01 Who is responsible
Guilherme Silva, who works under the name GSPMEDIALAB from Stavanger in Norway, decides why and how the personal data described here is used. The business is not a registered company, so the person responsible is Guilherme Silva.
Write to silva@gspmedialab.com with any question about this notice, or to ask for a postal address, which you will be given.
This notice covers enquiries, discovery-call bookings, the newsletter, lead forms on Facebook and Instagram, business prospecting, and the running of this website. The cookie notice covers what runs in your browser.
02 Enquiries by email
The brief form on this site opens your own email app with a filled-in template. This website does not receive or store the draft, and nothing is sent until you press send in your email app.
Once your email reaches us we keep your name, address, company and what you wrote, so we can answer and plan the work.
03 Discovery-call bookings
Book a discovery call opens Calendly on calendly.com in a new tab. Nothing from Calendly loads on this site.
If you book, Calendly handles your name, email address, your answers and the time you pick, on our behalf. We keep the booking with the rest of the enquiry. Read Calendly’s privacy notice.
04 The GSP Brief newsletter
You subscribe by entering your email address and ticking the consent box. We store the address, the date and time, and the wording you agreed to.
If no list is connected to the form at the time, it opens your own email app with the request filled in, and the address reaches us as an ordinary email instead. Nothing is stored on this website either way.
Every issue has an unsubscribe link, and you can also write to silva@gspmedialab.com. We put no tracking pixels in the newsletter and we do not record who opens it.
05 Lead forms on Facebook and Instagram
If you fill in a lead form inside Facebook or Instagram, Meta collects the fields you complete and passes them to us with the campaign they came from. Meta’s own privacy policy applies inside its apps.
We use the answers to route and answer your enquiry. Nothing is decided about you automatically.
06 Business prospecting
We build a list of companies we would like to work with. It holds the company name, organisation number, address, phone number, industry and size, and the name and work address of the person in charge.
The sources are the Enhetsregisteret and the Regnskapsregisteret at Brønnøysund, and the companies’ own websites.
We use the list to call or write to businesses about production work relevant to them. That is our legitimate interest as a supplier under article 6(1)(f), and we will send you the written balancing test on request.
We contact people about their business, never about anything private, and we do not write to private addresses. Say no once, by reply or on the phone, and the record comes off the list the same day.
A text service helps us draft the opening line of an email. It receives the company information above and processes it only to produce that draft.
We delete a prospect record 24 months after the last contact, or sooner if you ask.
07 How this website runs
The site is static. Pages, images and films are served from our own host, with no video platform embedded.
Our host records the usual server logs: IP address, browser and device, the page requested and the time. These logs keep the site working and secure, and the host keeps them for a short period.
The two typefaces are served from our own host, so no font provider sees your visit.
08 Traffic measurement
We count visits with Plausible Analytics, hosted in the EU. Plausible sets no cookies and stores nothing on your device.
It receives the page address, the referring site, your browser and your country, and turns your IP address into a code that changes every day. We see totals only: page views, how far down a page people read, clicks on the booking and email links, plays of a film, briefs sent, files opened, links followed off the site, and newsletter sign-ups. Read Plausible’s data policy.
09 Why we are allowed to do this
- Answering your enquiry and preparing a proposal: steps taken at your request before a contract, article 6(1)(b).
- Prospecting, follow-up, server logs and traffic totals: our legitimate interests as a business, article 6(1)(f).
- The newsletter, and any advertising measurement we might add later: your consent, article 6(1)(a), which you can withdraw at any time.
- Accounting records for client work: a legal obligation under bokføringsloven, article 6(1)(c).
10 Follow-up and marketing
We may follow up an enquiry by email, phone or text about the work you asked about. An enquiry does not subscribe you to the newsletter.
Tell us to stop and we stop. We keep a minimal record of that request so it is honoured.
11 Who else handles the data
Our website host and its database service, Calendly for bookings, our email and newsletter providers, Plausible for traffic totals, Meta Platforms Ireland for lead forms, and a text service that helps draft prospecting messages.
They act on our instructions under a written agreement. We do not sell enquiry or prospect information.
12 Data outside the EEA
Our website host, Calendly and Meta are in the United States. Those transfers rely on the EU-US Data Privacy Framework, and on the EU Standard Contractual Clauses where the framework does not apply.
Ask us at silva@gspmedialab.com for a copy of the safeguards.
13 How long we keep things
- Enquiries that do not become work: deleted or anonymised within six months of the last contact.
- Clients: for the length of the contract, then for the period accounting law requires.
- Newsletter: while you are subscribed, plus a short record of your unsubscribe so we do not write again.
- Prospect records: 24 months after the last contact.
- Server logs and provider records: the provider’s own period.
14 Advertising measurement
This site loads no Meta Pixel and no advertising tags. If we ever add one it stays off until you choose, with Accept and Reject given equal weight and an easy way to change your mind.
15 Your rights
You can ask for a copy of your data, a correction, deletion, restriction or portability. You can object to processing based on our legitimate interests, including prospecting, and withdraw consent at any time.
Write to silva@gspmedialab.com and we answer within one month.
You can complain to Datatilsynet in Norway. If you live or work elsewhere in the EEA you can complain to your own authority, for example the AEPD in Spain.
16 Changes
We update this notice when the site or the tools behind it change. The date at the top is the date of this version.
- 18 September 2026: the person responsible is named, and a retention period for prospect records was added.
- 17 September 2026: the booking calendar is no longer embedded, the typefaces moved to our own host, and a section on business prospecting was added.
- 4 September 2026: first version.