GDPR / Privacy

Privacy Policy for Norges Rejser Aktiv Familie Ferie AS

1. Data Controller

On behalf of Norges Rejser Aktiv Familie Ferie AS, Sune Sørensen is the data controller for the company’s processing of personal data.

2. Personal data that is stored

The following personal data is stored about customers: name, address, telephone number, email address, gender, date of birth.

3. Purpose of the processing

The data is processed in order to fulfil obligations under the agreement. The data is also used to provide information, offers and service in connection with purchases via email, telephone, SMS and postal mailings.

4. Legal basis for the processing

Information such as name, address, telephone number and email address is used to fulfil the purchase agreement. The legal basis for this processing is Article 6 (b) of the General Data Protection Regulation.

5. Collection of personal data

The personal data submitted on the website is stored. Cookies are used on the website to provide the best possible customer experience and service to visitors.

6. Disclosure of data to third parties

Personal data will not be shared, sold, transferred or otherwise disclosed to others unless there is a legal obligation to do so. To fulfil obligations under the agreement, necessary data is disclosed to partners: shipping companies, hotels, campsites, customer gift distributors and activity providers.

7. Deletion of personal data

Data that must be retained under the Norwegian Bookkeeping Act will be stored for up to 5 years, in accordance with statutory requirements.

8. Rights of the data subject

Personal data is processed in accordance with the Personal Data Act and applicable regulations. It is noted that it is possible to request access to and transfer of one’s own personal data, as well as request rectification or deletion of data. Complaints about processing in breach of the rules may be submitted to the Norwegian Data Protection Authority.