Privacy Policy Voss Resort

This privacy policy explains how Voss Resort AS collects and processes personal data on vossresort.no. We attach great importance to protecting your privacy, and ensure that all processing of personal data is in line with Norwegian law and the GDPR.

Personal data is information that can be linked to a person, for example name, telephone number, email address or IP address.

1. Data Controller

Voss Resort AS, represented by the CEO, is the data controller for the processing of personal data on vossresort.no.

Contact information

Voss Resort AS, Evangervegen 5, 5704 Vossevangen
Tel.: (+47) 47 00 47 00
Org. no.: 991 371 044

2. Purpose of collection

We collect personal information to:

• deliver services you request (e.g. through contact forms)
• send newsletters and relevant marketing if you actively sign up
• prevent fraud, abuse and adverse events
• analyze website usage in order to improve the user experience

Voss Resort uses MarketHype as a service provider for sending and managing newsletters.

3. What kind of information do we collect?

This may include:

• name
• email address
• phone number
• IP address
• usage data (e.g. browser type, pages visited, time)
• cookies

See our overview of cookies below.

4. How we use the information

The information may be used for:

• delivery of ordered services
• newsletter sending (via MarketHype)
• targeted marketing (Google, Facebook, etc.)
• statistics and analysis to improve the website
• security measures and prevention of abuse

5. Storage time

5.1 Storage for marketing and newsletters

For the purpose of sending newsletters and relevant marketing, we store your contact information for up to 24 months after your last purchase or last relevant contact with Voss Resort. This is based on our legitimate interest in informing previous guests about useful and relevant information, offers and updates.

If you have actively consented to receive newsletters, your information will be stored as long as your consent is valid. You can withdraw your consent at any time via the unsubscribe link in the emails or by contacting us.

When the period of our legitimate interest ends, or if you withdraw your consent, your contact information will be deleted or anonymized, unless it must be stored longer for other legal reasons (for example, accounting regulations).

5.2 Storage related to web analytics

Anonymized data in Google Analytics is stored for 56 months.

6. Who processes the information?

In addition to Voss Resort AS, the information is processed by approved data processors. They only process data after agreement with us.

Our central data processors:

• Google – anonymized and aggregated usage data, web analytics and advertising
• Facebook (Meta) – anonymized and aggregated data used for advertising
• seodr.® – operation of websites and underlying systems
• MarketHype – sending and administration of newsletters
• Visit Group – operation of online store (booking.vossresort.no)

7. Embedded content

Embedded content from third-party websites (e.g. videos from YouTube) may collect data about you in the same way as if you visited the website directly.

8. Cookies

When you use the website, we store cookies in your browser. These are used to:

• statistics
• operation of the ordering system
• safety and function
• content and marketing customization

IP addresses are anonymized before being stored in Google Analytics.

9. Web analytics

We use Google Analytics for anonymous statistics. Information is stored for 56 months. Read more about privacy and reservation against tracking.

10. Behavioral advertising

Voss Resort uses remarketing via Google Ads and Facebook. This means that you can receive ads based on previous visits to vossresort.no. You can make a reservation via Google, Facebook or European advertising schemes.

11. Children and privacy

Our services are not directed at children under the age of 18. We do not knowingly collect information from children. Please contact us if you believe we have received such information.

12. Changes to the Privacy Policy

Changes will be published on this page. In the event of major changes, we may notify you via email or a visible message on the website.

13. Legal basis (GDPR)

The processing of personal data is based on:

• agreement (order, purchase)
• consent (newsletter)
• legal obligation
• legitimate interest (analysis, security, marketing)

14. Your rights

You have the right to:

• insight
• correction
• deletion
• limited treatment
• data portability
• to protest against treatment
• to withdraw consent (e.g. newsletter via MarketHype)

Complaints can be addressed to the Norwegian Data Protection Authority: www.datatilsynet.no