Privacy at OsloParkering

Who is responsible?

Ibrahim Al-Rubaye operates OsloParkering and is responsible for personal data in its own features. For questions or requests to access, correct or delete your information, use the privacy contact form.

Search and map

An address you enter is sent to Entur’s address search, or to our fallback endpoint using Entur and sometimes Kartverket. Direct browser requests also provide Entur with your IP address. We use the address to locate the destination and do not store a search history in our database.

OpenStreetMap serves the map tiles and receives technical data including your IP address and map view. “Directions” opens Google Maps with the parking facility’s coordinates. These services have their own privacy policies. Our legal basis for providing search and maps is legitimate interest under GDPR Article 6(1)(f).

Business links and accounts

When you create a business page, we store its public name, address, coordinates, radius, sorting preference and dates of creation and changes for as long as the page is in use. A private edit key is stored only as a cryptographic check value. It is not used to track visitors. Do not share a private edit link with customers.

If you connect a business page to email, Supabase Auth sends a one-time login link and verifies the address. We store an account identifier and confirmed email with the page; the email is not public or used for marketing. A necessary login cookie normally lasts for up to seven days and can be renewed while you use the service. Logging out removes it from the browser.

Pending email claims expire after one day and are cleaned up on the next login. Account information is kept while the account is in use. Contact us to close access or request deletion. Supabase and its email delivery services handle account details and one-time links; information may be processed outside the EEA under their applicable transfer arrangements. See Supabase’s privacy notice.

Deleting a business page removes its profile information and account link from our business database. We keep only its old customer URL and deletion time so old links and QR codes cannot point to another business. The login account is managed separately. Our legal basis for maintaining business links and account access is legitimate interest under GDPR Article 6(1)(f).

Contact messages

Our contact form stores your email address, message, topic, and any name or reference you provide. Only the operator of OsloParkering can read the inbox. We use the information to reply and resolve your request under legitimate interest, GDPR Article 6(1)(f).

Messages older than 90 days are deleted the next time the form or inbox is used and may be deleted earlier. Email replies are also handled by the relevant email providers. To limit abuse, we store a short-lived protected code based on network address and hour, rather than the raw IP address in the form database; it is removed after a day on the next form or inbox use.

Hosting and cookies

OpenAI Sites and Cloudflare provide the site and database. They process technical data such as IP addresses and request information for delivery and security. ChatGPT login is used for the owner’s administration. Visitors comparing parking do not need to log in.

We have not added analytics or advertising pixels, and do not use contact messages or edit links for advertising. Hosting and sign-in may use necessary technical storage. If analysis or advertising is introduced later, we will update this information and any required choices before use.

For the providers’ information about processing and transfers, see OpenAI, Cloudflare, Entur, Kartverket and OpenStreetMap Foundation.

Your rights

You can request access, correction or deletion. Other rights may apply depending on the processing. We do not make automated decisions or profile people. Send requests through the privacy contact form; we normally respond within one month. You may complain to the Norwegian Data Protection Authority.