Enter Tromsø Hotels and Apartments AS (“Enter Tromsø”, “our” or “we”) is the controller of personal data processed in accordance with this privacy statement. We are responsible for processing your personal data in accordance with the Norwegian Personal Data Act, which implements the EU General Data Protection Regulation (“GDPR”). Our goal is to have a high degree of integrity when processing personal data about you, including information obtained through our booking system in connection with the purchase of our products and/or services.
If you have any questions or comments regarding our processing of personal data, you can contact Enter Tromsø Hotels and Apartments AS at firstname.lastname@example.org or by phone +47 77 64 77 30.
When you book various activities/travel experiences or accommodations through our booking system and/or contact us in other ways, Enter Tromsø Hotels and Apartments AS processes personal data about you. Therefore, information on the purpose of our processing of personal data, how we process your data, and information about your rights under the regulations follows. By using our booking system, you accept that Enter Tromsø processes personal data about you in accordance with what is described below.
WHY DO WE PROCESS YOUR PERSONAL DATA AND WHAT IS COLLECTED?
Processing of personal data in the booking system
We process personal data in connection with our booking system. By booking accommodations, travel activities, or other products through our booking system, Enter Tromsø will process your data. We collect name, address, telephone number, email, user history, residence, and payment/credit card information. All credit card information is processed on an encrypted page (SSL 128 bit) to ensure security. In some cases, the supplier of the activity/product may also need information about you as a customer in connection with a specific booking, such as information about clothing size, food preferences, height, weight, etc. The processing of personal data is necessary to fulfill the agreement with you (GDPR art 6 (1) letter b). We also process your date of birth in case this is necessary for security reasons. This is based on our legitimate interest in ensuring that security is maintained (GDPR art. 6 (1) f).
Processing of personal data in connection with marketing/travel surveys
We process personal data in connection with the implementation of marketing/travel surveys. We process, among other things, name, telephone number, and email address. The processing of personal data is based on your consent (GDPR art. 6 (1) letter a). You can withdraw your consent at any time by sending an email to email@example.com.
Processing of personal data about contact persons for suppliers and partners
We process personal data about representatives/contacts for our suppliers and partners. We collect name, email address, telephone number, and any other contact information. The processing of personal data is necessary for us to fulfill our contractual obligations to our suppliers and partners (GDPR art. 6 (1) letter b).
Processing of personal data in other inquiries from you
We further process personal data to answer other inquiries that we receive from you. We collect name, telephone number, email address, and any other personal information that may be included in the inquiry. The processing of personal data is based on a balancing of interests (GDPR art. 6 (1) f). We have assessed that this is often necessary to help you with what you are wondering about.
Processing of personal data in emails
The processing is based on a balancing of interests (GDPR art. 6 (1) f). The processing of personal data in email correspondence is necessary for daily communication both internally and with external parties.
DISCLOSURE OF YOUR PERSONAL DATA TO OTHERS
We do not disclose your personal information to others unless there is a lawful basis for such disclosure. Examples of such a basis will typically be your consent, an agreement with you, or a legal basis that requires us to provide the information.
When you book various travel activities, events, or accommodations through our booking system Bookvisit, relevant information necessary to deliver the ordered product/service will be shared with our suppliers/partners who will deliver the respective services/travel products. We do not share your data with anyone other than the suppliers who need this information to deliver the product you have ordered.
Enter Tromsø Hotels and Apartments AS uses data processors to collect, store, or otherwise process personal data on our behalf. Our booking system Bookvisit is provided by Visit Technology Group AB. We have entered into a data processing agreement with the supplier of the system to ensure information security at all stages of processing.
We may further be required to share personal data with third parties such as the police or another public authority if this is related to the investigation of a criminal offense or if Enter Tromsø is otherwise required to disclose the information by law or in accordance with a public administrative decision.
TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES OUTSIDE THE EU/EEA
All processing of personal data that we carry out takes place within the EU/EEA area.
STORAGE PERIOD We store your personal data with us for as long as necessary for the purpose the personal data was collected for. This means, for example, that personal data that we process on the basis of your consent is deleted if you withdraw your consent. Personal data we process to fulfill an agreement with you is deleted when the agreement is fulfilled, and all obligations arising from the contractual relationship are fulfilled.
Personal data collected in connection with our booking system Bookvisit will normally be stored for two years after the departure date. Any personal data collected in connection with market/travel surveys will be deleted or anonymized when the survey is completed.
HOW IS YOUR DATA PROTECTED?
Enter Tromsø Hotels and Apartments AS has implemented satisfactory technical and organizational measures to protect your personal data by ensuring that only authorized persons have access to them.
YOUR RIGHTS WHEN WE PROCESS YOUR PERSONAL DATA
In accordance with the Personal Data Act and the EU’s GDPR data protection regulation, you have several rights when we process personal data about you.
- Right to access
You have the right to access all personal data we process about you.
- Right to correction
You have the right to have inaccurate personal data corrected.
- Right to deletion In certain cases
You have the right to have your personal data deleted before our general obligation to delete it occurs.
- Right to demand restriction of processing
Under certain conditions, you may request a restriction of processing.
- Right to protest
Under certain conditions, you have the right to object to our processing of personal data.
- Data portability
In certain situations, you have the right to receive your personal data in a structured and machine-readable format, as well as to have the data transferred from one data controller to another.
If the processing of personal data is based on your consent, you have the right to withdraw your consent at any time. For more information about your rights, please visit the website of the Norwegian Data Protection Authority (Datatilsynet) at www.datatilsynet.no.
You can exercise your rights by contacting our data protection officer using the contact information above or by sending an email to firstname.lastname@example.org. We will respond to your request as soon as possible, and no later than 30 days after we receive your request. We may ask you to confirm your identity or provide additional information before allowing you to exercise your rights, to ensure that we only grant access to your personal data to you and not to someone pretending to be you.
If you believe that our processing of personal data violates privacy laws, you can file a complaint with the Norwegian Data Protection Authority. Information on how to contact the Data Protection Authority can be found on their website at www.datatilsynet.no.
CHANGES TO THIS PRIVACY STATEMENT
If there are changes to our services or changes in the regulations on the processing of personal data, this may result in changes to the information provided here. If we have your contact information, we will inform you of these changes. Otherwise, updated information will always be easily accessible on our website.
If you have any questions or comments about this privacy statement or wish to exercise your rights, please find our general contact information below:
Enter Tromsø Hotels and Apartments AS
Søndre Tollbodgate 17 – 9008 TROMSØ
Phone: +47 77 64 77 30
Organization number: 982 471 958