Norrøna Adventure AS (org. no. 988 264 849), Vollsveien 13H, 1366 Lysaker, Norway, represented by its managing director, is the controller for the company's processing of personal data. You can contact us about privacy at [email protected]. Providing personal data in connection with services on destinations.norrona.com is voluntary for visitors to the website.

Legal basis for processing

We process personal data on the following legal bases:

• Performance of a contract (GDPR Art. 6(1)(b)): When you book a stay, trip or activity, we process the data necessary to carry out your stay and deliver the agreed services.
• Consent (GDPR Art. 6(1)(a)): When sending newsletters, collecting health data such as allergies and food intolerances (GDPR Art. 9(2)(a)), or using optional cookies for marketing.
• Legitimate interest (GDPR Art. 6(1)(f)): To improve and develop our websites, and to maintain the security of the website.
• Legal obligation (GDPR Art. 6(1)(c)): Retention of transaction and accounting data in accordance with the Norwegian Bookkeeping Act.
  Website operation and data processors

Catch Media AS is our supplier for the development and maintenance of the website. Data collected in connection with the operation of the website is stored on servers operated by GROUP.ONE NORWAY AS. A separate data processing agreement governs which information the supplier has access to and how it must be processed.

Bookings, booking systems and retention periods

When you book a stay, trip or activity, we process your name, contact details, date of birth, nationality, travel dates and travel party, emergency contact, and the information we need to adapt equipment and activities, such as height, weight, shoe size and experience level. Information about equipment and activity adaptation is deleted after your stay has ended. The data is shared only with local partners, guides, skippers, transport companies or accommodation providers to the extent necessary to carry out your stay. We use the following booking systems as data processors to manage bookings, guest lists and room lists:

• Andørja Lodge and Canvas Telemark: Visbook (booking system) and BookVisit (booking on the website).
• Varg: Qondor (Qondor AS).
• Health data: Information about allergies, food intolerances and other health conditions that we need in order to serve safe food and carry out activities is treated as strictly confidential and deleted after your stay has ended.
• Invoice data: Retained for 5 years in accordance with the requirements of the Norwegian Bookkeeping Act
  
  

Payment

We use external providers for online payment (Adyen, Klarna, Nets). This means that we transfer contact and booking details to the payment provider when you pay, so that they can administer your purchase. Card details are not stored by us. Personal data that is transferred is processed in accordance with the privacy notices of Klarna, Adyen and Nets.

Search

We store information about which search terms users enter on our websites in Google Analytics in order to improve the information we provide. Usage patterns are stored in aggregated form, and search terms cannot be linked to IP addresses or individuals.

Newsletter

Anyone who wishes to receive information and offers from us by email can subscribe to our newsletter. To make sure we send emails to the right person, we need to register your name and email address in our messaging system. In the messaging system we can also see where and when you open the newsletter, and which links you click. We use this information to improve our communication with you. No data is shared with other companies, and it is deleted when we are informed that you no longer wish to receive information from us. You can easily unsubscribe via the link in the newsletter we send you.

Chat

You can chat with us through the chat solution on our website. We do not ask for personal data such as your name, but you can share your email address with us if you wish. Please note that we receive your IP address, which in some cases can be used to trace your identity. Through Intercom's chat solution we can track your behaviour on the website, and chat history is stored so that we can tailor our responses. The information is stored in the software we use, provided by intercom.com. For more information about how they process this data, see intercom.com's privacy policy.

Web analytics and cookies

We use cookies for functionality, analytics and targeted marketing:

• Google Analytics & Google Tag Manager: Used for statistics and usage patterns (number of visits, duration, traffic source). IP addresses are anonymised before storage.
• Facebook Pixel & Delta Projects: Used to measure advertising conversions and for segmentation for targeted marketing.
• Transfers to third countries (USA): Services provided by, among others, Google, Meta (Facebook) and Intercom may involve the transfer of data to servers in the USA. Such transfers are safeguarded by approved transfer mechanisms, including the EU-U.S. Data Privacy Framework or the EU Standard Contractual Clauses (SCCs).
• Necessary cookies: Support the system's load balancing, language selection, booking flow and login functions.

You can manage and withdraw your consent to cookies in your browser or via the website's settings. See www.nettvett.no for guidance on browser settings.

Your rights

Anyone who asks is entitled to basic information about how a business processes personal data. In this notice we describe what data we collect and how it is used. If you are registered in one of Norrøna Adventure AS's systems, you have the following rights under the General Data Protection Regulation (GDPR) regarding the data we hold about you:

• Access: You have the right to know what personal data we process about you, and to receive a copy of it.
• Rectification: You can ask for incorrect, incomplete or outdated data about you to be corrected or supplemented.
• Erasure ("the right to be forgotten"): In certain cases you can require us to delete your personal data, for example if the data is no longer necessary for the purpose for which it was collected, or if you withdraw your consent. (Please note that in some cases we are required by law to retain certain data, for example under the Norwegian Bookkeeping Act.)
• Restriction of processing: In certain situations you can ask us to restrict the processing of your data (meaning we store it but do not actively use it).
• Data portability: For data you have provided to us on the basis of consent or contract, you have the right to receive it in a structured, commonly used and machine-readable format, or to have it transferred directly to another organisation where technically feasible.
• Objection: You have the right to object to our processing where it is based on our legitimate interests, and you can object at any time to your data being used for direct marketing (for example by unsubscribing from the newsletter).
• Withdrawal of consent: Where processing is based on consent you have given us, you can withdraw it at any time.

Contact and exercising your rights

Requests are handled free of charge and within 30 days at the latest. Requests regarding your rights can be sent to us by email at [email protected]. 

Complaints to the Norwegian Data Protection Authority

If you believe that our processing violates data protection legislation, you have the right to lodge a complaint with the Norwegian Data Protection Authority, Datatilsynet (www.datatilsynet.no)

Published: 26.11.2024, Last updated: 02.11.2026