- What personal data we collect and how
- The purpose of collecting data
- Your rights
- Disclosure of personal data to third parties, including subcontractors
Lyngen Arctic Adventures AS (hereinafter "we" or "us") is a Norwegian limited liability company. We promise to adhere to applicable Norwegian privacy law and meet the minimum requirements according to applicable laws and regulations within the EU/EEA, including the General Data Protection Regulation (GDPR), which came into force May 25, 2018. We will ensure that your privacy rights and our processing of your personal data are held to the highest standard.
2 What personal data we collect and how
Users of our site and/or guests are required to register some personal data. We also use and store cookies that may contain personal data. Users can also choose to register optional personal data.
2.1 Personal data necessary to book rooms and activities with us:
- Full address
- E-mail address
- Phone number
2.2 Special categories of personal data Special categories of personal data is information relating to:
- Racial or ethnic origin, or political opinions, philosophical or religious beliefs,
- The fact that a person has been suspected of, charged with, indicted for or convicted of a criminal act,
- Sex life,
- Trade-union membership.
We do not collect special categories of personal data. However, upon booking certain activities, you may want to inform us about any special needs or allergies you might have.
We use the following cookies on our website:
3 Purpose and legal basis for processing
We collect, store and use personal data for several purposes:
To provide you with access to our website: We use personal data about you to be able to provide the website to you. The legal basis for this is the contract you entered into with us concerning the provision of the website.
To develop and improve the functionality of our website and related services: We want to provide you with the best possible experience. For this purpose, we use personal data that you have provided to us and that is generated while using the website to develop and improve the website and our service offerings. This is based on our legitimate interest in developing and improving the website and related service offerings.
To provide you with relevant marketing and promotions: We want the marketing you experience and the promotions you get to be as relevant as possible. For this purpose, we process personal data about you, and the legal basis for this processing is our legitimate interests in generating income from your bookings.
To ensure secure payments: We process personal data that you provide to us and that is generated from the use of payment cards to ensure that any payments you make to us are secure. This is based on the contract you entered into with us concerning the provision of the rooms and activities along with our legitimate interests in ensuring secure payment.
4 Disclosure of personal data to third parties, including subcontractors
We use subcontractors for processing personal data ("Sub-Processors") for the following purposes:
- Data storage
- Data analysis
5 Your rights
Consent: If our data processing is based on your consent, you can withdraw your consent regarding our use of your personal data at any time. If you want to withdraw your consent, we will delete your account within reasonable time, unless we have another legal basis for further processing of the data.
Access: You can request access, free of charge, to the personal data we have collected about you at any time, unless such rights are restricted by law. You can also request information about how we collect personal data at any time.
Erase & rectify: If certain conditions are met, you can request that we erase (delete) and rectify any collected personal data concerning you.
Lodge a complaint: If you are not satisfied with the way we process your personal data, you have the right to lodge a complaint with the relevant supervisory authority (in Norway: Datatilsynet). However, we hope you will contact us first using the contact information below, regarding any issues you might have.
Other data protection rights: You may have other rights in personal data concerning you depending on your circumstances. Please contact us if you have further questions regarding your rights.
We employ routines and measures ensuring that no unauthorized persons gain access to any of your personal data. These measures include both physical and logical measures, risk assessments, and routines for handling data and following up requests about access to and deletion of personal data.
7 How to get in touch
If you have any questions, suggestions or requests regarding the collection of personal data, please contact us at: firstname.lastname@example.org or by regular post to:
Lyngen Lodge Djupvik,