About this site
Bjørknes gamle skole is a school house from 1938 in Nes, Norway, rented out to clubs, associations and private people for a weekend or a week. This website shows available dates, takes booking requests and lets guests sign in to see and change their own requests. Volunteers use the same site to answer requests.
Who is responsible
Årnes menighet (the parish of Årnes) owns the school and is the data controller for this website. Questions about privacy go to post@bjorknesgamleskole.no.
What we collect
When you send a booking request: your name, email address, phone number, the dates, the number of guests, what you are planning and your message. When we handle the request, we add whether it was approved and, if so, the price.
When you sign in: your email address and the name from your request. The IP address and browser of the session are stored with your sign-in. The sign-in code we email you is not stored in plain text and expires after 10 minutes.
The public calendar only shows that dates are taken, never who has booked them.
Signing in with Google
You can choose to sign in with your Google account instead of an emailed code. We then ask Google only for your name, email address and profile picture (the scopes openid, email and profile). We use them only to sign you in and to show who you are signed in as. We do not access your email, calendar, files or anything else in your Google account.
The data from Google is stored with your sign-in. It is not shared with anyone, not sold and not used for advertising. It is deleted when your sign-in is deleted (see below), or when you ask us to delete it. You can also remove our access in your Google account under "Third-party apps & services".
Bjørknes gamle skole's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Why
We use the data to handle your request, arrange the rental and contact you, and the sign-in so that you can see and change your request yourself. The legal basis is that this is necessary to enter into and carry out an agreement with you (GDPR Article 6(1)(b)). We do not use it for anything else, and we do not send you marketing.
Where the data is
The website, database and email are run by Cloudflare, which processes the data on our behalf. The database and its backups are stored in the EU. If you sign in with Google, the sign-in goes through Google.
How long we keep it
- Requests that are not approved, or that you withdraw, are deleted 3 months after their dates.
- Approved bookings are deleted 2 years after the stay, so that it is easy to book again next year.
- Your sign-in, including any data from Google, is deleted together with your last request.
- We back up the database every night. Backups are deleted after 90 days, so deleted data can remain in them for that long.
Payment is made with Vipps to Årnes sokn and recorded in the parish's accounts, which have their own rules for how long they are kept.
Cookies
We use cookies only for signing in: one that keeps you signed in for up to 30 days, and a temporary one while you sign in with Google. When you send a request we also store a cookie in your browser for 30 days, so the calendar can show that your request is waiting for an answer. The site has no analytics, tracking or advertising, and loads no scripts from third parties.
Your rights
You can ask for access to, correction or deletion of your data, and you can object to the processing. While your request is waiting for an answer, you can change or withdraw it yourself by signing in. Otherwise, write to post@bjorknesgamleskole.no.
If you think we are handling your data wrongly, you can complain to the Norwegian Data Protection Authority, Datatilsynet.
Last updated 27 October 2026.