Skip to main content
India & Norway The Road to FIFA 2034 Follow the journey

Privacy Policy

Last updated: 7 October 2026

This privacy policy explains what personal data is processed when you visit www.roadtofifa2034.com or contact us through the website, and which outside services are involved.

Who is responsible

The website India & Norway: The Road to FIFA 2034 is published by Det Moderne India, which is responsible for the processing of personal data described in this policy.

DET MODERNE INDIA
Organisation number 924 785 381
Dronning Eufemias gate 59
0194 Oslo
Norway
dmi.no

Questions about privacy: rina@detmoderneindia.no

In short

  • If you accept statistics cookies in the cookie banner, the website uses Google Analytics to measure how it is used. The website does not use advertising, remarketing or personalised advertising.
  • The website stores your cookie choice in a cookie from Cookiebot. Statistics cookies from Google Analytics are only set if you accept them. Other cookies are only used when someone logs in to edit the website, and by some of the outside services described below.
  • If you use the contact form, your message is stored on the website and sent to us by email so that we can reply.
  • Some pages load content directly from Spotify, Instagram and Cloudflare. These services receive technical information from your browser when that content loads.

When you visit the website

When you open a page, your browser sends technical information to the server, such as your IP address, browser type, the page you asked for, the referring page and the time of the request. This is necessary to deliver the website to you.

The website runs on WordPress on a server provided by Vultr in Stockholm, Sweden. The server is managed through RunCloud and uses the OpenLiteSpeed web server. The web server records these requests in an access log, which contains your IP address, the time of the request, the page requested, the response status and size, the referring page and your browser (user agent). Access logs are kept for up to 30 days. The server also keeps a separate technical error log for troubleshooting, which is not covered by this 30-day period.

The website is delivered through Cloudflare, a content delivery and security service. All requests to the website, including your IP address, pass through Cloudflare’s network before they reach our server. Cloudflare uses this information to deliver the website and to protect it against attacks and abuse, and may set strictly necessary security cookies in your browser if its security features need it. Cloudflare processes this data on our behalf under its Data Processing Addendum. Cloudflare has servers in many countries, including outside the EU/EEA. For such transfers the addendum relies on the EU Standard Contractual Clauses and, where Cloudflare is certified, the EU–U.S. Data Privacy Framework. More information: Cloudflare’s privacy policy.

The contact form

The contact form asks for your name, email address, organisation (optional) and your message. We use this information to respond to and administer your enquiry.

We process it on the basis of our legitimate interest in responding to and administering enquiries sent to us (GDPR Article 6(1)(f)). If your enquiry is about entering into an agreement with us, we process it to take steps at your request before entering into that agreement (GDPR Article 6(1)(b)).

When you send the form:

  • Your submission is stored in the website’s database (the Fluent Forms plugin), together with the address of the page you sent it from and the type of browser and device you used. Your IP address is not stored with the submission.
  • A copy is sent by email to Det Moderne India’s contact person for the project.
  • The website keeps a log of the emails it sends, including their content, for 30 days.

Contact form submissions are kept in the website’s form storage for up to 12 months and are then deleted from it automatically.

Emails received directly from the contact form are kept in the recipient mailbox for up to 12 months and are then deleted in accordance with our retention routine.

Email delivery

Email from the website is delivered by toSend, a service operated by FluentCart Inc. in the United States, which acts as our data processor under its Data Processing Agreement. According to toSend’s documentation, email logs, message content and related service data are stored in the EU, and message content and send logs are deleted after 14 days. For this website, emails are delivered through toSend’s United States sending region, using Amazon Simple Email Service (Amazon Web Services). For transfers outside the EU/EEA, toSend relies on the EU Standard Contractual Clauses in its Data Processing Agreement. See toSend’s privacy policy and list of subprocessors.

Spam protection with Cloudflare Turnstile

To protect the contact form against spam, the contact page uses Cloudflare Turnstile. When the page loads, a script from challenges.cloudflare.com runs in your browser and sends technical signals to Cloudflare, such as your IP address, browser (user agent) and connection details, to check that the form is being used by a person and not an automated program. A check box is only shown if Cloudflare needs you to confirm. Cloudflare processes these signals on our behalf to protect the form, and as an independent controller to improve its bot detection. More information: Cloudflare Turnstile privacy addendum.

Content from other services

Spotify. Some news articles include a podcast player from Spotify. The player is loaded from open.spotify.com when you open the article, so Spotify receives your IP address and information about your browser, and may set its own cookies. This is covered by Spotify’s privacy policy.

Instagram. The home page shows recent posts from our Instagram account @roadtofifa2034official. The images are loaded directly from Instagram’s servers, which are operated by Meta, so Meta receives your IP address and information about your browser when the home page loads. If you click a post, it opens on Instagram. This is covered by Instagram’s privacy policy.

Links to other websites, such as news articles, podcasts and social media profiles, take you to those websites. Their own privacy policies apply there.

Cookie consent and statistics

Cookie consent with Cookiebot

When you first visit the website, a cookie banner asks whether you accept statistics cookies. The banner is provided by Cookiebot, a consent management service from Usercentrics A/S in Denmark. You can accept, reject or choose which categories you allow. Your choice is stored on your device in the cookie CookieConsent for about one month, after which the banner appears again. You can change or withdraw your consent at any time with the cookie icon in the bottom left corner of the website.

To document your choice, Cookiebot logs it together with the date and time, a random consent ID, the page you were on, information about your browser and your IP address with the last part removed. Cookiebot processes this on our behalf as our data processor. More information: Cookiebot’s privacy policy.

Statistics with Google Analytics

If you accept statistics cookies, we use Google Analytics 4, a web analytics service from Google, to understand how the website is used. This includes which pages are visited, how far down a page people scroll, which links to other websites and which files are clicked, and how many messages are sent through the contact form. We only look at this information in aggregated form, to improve the website. We do not use it for advertising. Google Signals, personalised advertising and links to Google Ads are switched off.

Google Analytics sets the cookies _ga and _ga_1JK4XT92HD, which are used to tell visits and visitors apart. They last for up to two years, although some browsers limit this to about 13 months. Information about your visit is sent to Google, such as the pages you view, your browser and device, your approximate location and the identifier stored in these cookies. Google uses your IP address to work out your approximate location and states that Google Analytics 4 does not log or store IP addresses. When you send the contact form, we only record that a message was sent. The content of your message and your contact details are not sent to Google Analytics.

We only use Google Analytics with your consent (GDPR Article 6(1)(a)), and you can withdraw it at any time with the cookie icon. Statistics data is kept in Google Analytics for 14 months and is then deleted automatically. Google processes the data on our behalf under the Google Ads Data Processing Terms. Our Google Analytics account settings also allow Google to use the data to improve its own products and services, to provide technical support and for aggregated benchmarks. Google may process data outside the EU/EEA, including in the United States. For such transfers Google relies on the EU Standard Contractual Clauses and the EU–U.S. Data Privacy Framework. More information: Google’s privacy policy and how Google uses information from sites that use its services.

Google Tag Manager

Google Analytics is added to the website through Google Tag Manager, a service from Google for managing the scripts a website loads. Google Tag Manager only loads Google Analytics after you have accepted statistics cookies. It does not set cookies itself and is not used to analyse your visit, but when it loads, Google receives your IP address and technical information about your browser.

Cookies

The website uses the following cookies for visitors:

  • CookieConsent from Cookiebot, which stores your cookie choice so that the banner is not shown on every page. It lasts for about one month.
  • _ga and _ga_1JK4XT92HD from Google Analytics, which are only set if you accept statistics cookies. They last for up to two years.

The following cookies are only set for people who log in to edit the website:

  • WordPress login cookies (wordpress_test_cookie, wordpress_logged_in_*, wordpress_sec_* and wp-settings-*), which keep editors logged in and remember their editing preferences.
  • _lscache_vary from LiteSpeed Cache, which makes sure logged-in editors are not shown cached pages.

Outside services may set their own cookies as described above (Cloudflare security cookies and Spotify).

Your rights

Under data protection law you can ask for access to the personal data we hold about you, and ask us to correct or delete it. You can also object to or ask us to restrict our processing, and ask to receive your data in a portable format. Contact us at rina@detmoderneindia.no.

If you think we process your personal data unlawfully, you can complain to the Norwegian Data Protection Authority (Datatilsynet).

Changes to this policy

We will update this policy if the website or the services it uses change. The date at the top shows when it was last updated.