Last updated: 2026-10-14
Grensepakke.no is a service provided by Kontorshuset i Strömstad AB. We are the data controller for personal data collected through this service.
We collect the following personal data when you register and use our service:
| Data | Purpose | Legal basis |
|---|---|---|
| Name (first and last) | Identify you as a customer | Contract (necessary to provide the service) |
| Email address | Send notifications about parcels (arrival, pickup) | Contract (necessary to provide the service) |
| Phone number | Contact you when needed | Contract (necessary to provide the service) |
| Postal address (address, zip, city) | Deliver parcels to the correct recipient | Contract (necessary to provide the service) |
| Parcel information (tracking no., carrier, weight, price) | Manage parcel reception and delivery | Contract (necessary to provide the service) |
| Password (stored encrypted) | Secure login to the customer portal | Contract (necessary to provide the service) |
We store your data as long as you are an active customer. If you have not used the service for 24 months, we will contact you to ask if you wish to keep your account. You can request deletion of your account at any time. Messages sent through the contact form are stored for up to 12 months so we can handle your enquiry, and are then deleted automatically.
We do not sell your personal data. The data is used to provide the service. Email is sent via our email server (Loopia, Sweden) which is our data processor. If you have consented to statistics or marketing, visit data (e.g. IP address, browser and which pages/events) is sent to Google Ireland Ltd. (Google Analytics), Ahrefs Pte. Ltd. (Ahrefs Analytics) and/or Meta Platforms Ireland Ltd. (Meta Pixel).
We take security seriously. Passwords are stored encrypted (bcrypt), all communication is over HTTPS (SSL/TLS), and we have access controls on all systems. Only authorized personnel have access to customer data.
We use cookies and local storage in your browser. Necessary cookies are always used. Statistics and marketing are only used if you consent in the cookie banner, and nothing from Google, Ahrefs or Meta is loaded before you choose. You can change or withdraw your consent at any time via “Cookie settings” at the bottom of the page.
| Name | Purpose | Duration | Provider | Category |
|---|---|---|---|---|
PHPSESSID |
Session: login, language choice and security (CSRF). | Until the browser closes; 30 days when you are logged in | Grensepakke | Necessary |
GPADMINSESSID |
Staff login (/admin/ only). | Until the browser closes | Grensepakke | Necessary |
gp_consent, gp_consent_cats, gp_consent_v |
Remembers your cookie choice (local storage). | Until you change it | Grensepakke | Necessary |
Service worker (gp-pwa-*), push |
The app: offline page and icons (service worker); push notifications only if you turn them on. | Until you remove it | Grensepakke | Necessary |
_GRECAPTCHA |
Spam protection on the contact form (reCAPTCHA). | Up to 6 months | Google Ireland Ltd. | Necessary |
gp-install-dismissed |
Remembers that you closed the “Install the app” banner. | 30 days | Grensepakke | Functional |
gp-dev-id, gp-ev-* |
Anonymous app usage statistics (random device ID). | Until you remove it | Grensepakke | Statistics |
_ga, _ga_* |
Google Analytics: visitor statistics. | Up to 2 years | Google Ireland Ltd. | Statistics |
Ahrefs Analytics |
Ahrefs Analytics: visitor statistics (cookieless). | Not stored in the browser | Ahrefs Pte. Ltd. | Statistics |
_fbp, _fbc |
Meta Pixel: measuring ads on Facebook and Instagram. | Up to 90 days | Meta Platforms Ireland Ltd. | Marketing |
Google Maps (NID m.fl.) |
Google Maps map, loaded only when you click “Show map”. | Set by Google | Google Ireland Ltd. | Third party (on click) |
Under GDPR, you have the following rights:
Contact us at info@grensepakke.no to exercise your rights. We will respond within 30 days.
If you believe we are not handling your data correctly, you can file a complaint with the Swedish Authority for Privacy Protection (imy.se) or the Norwegian Data Protection Authority (datatilsynet.no).
We may update this privacy policy. In case of significant changes, we will notify you via email. The current version is always available on this page.