Back

Privacy Policy

15. Privacy Policy

15.1 General

HeiTromsø AS (“the Company”) is committed to protecting your privacy and handling your personal data in accordance with applicable laws, including the EU General Data Protection Regulation (GDPR). By booking a tour, you consent to the collection and use of your data as described below.

15.2 What we collect

  • Name, email address, and phone number.
  • Booking details (tour type, date, number of participants).
  • Health-related information you voluntarily provide (to assess suitability for an activity).
  • Photographs taken during tours (excluding inside Tromsøbadet).

15.3 How we use your data

  • Managing your booking and delivering the service.
  • Sending confirmations, reminders, and post-tour photos.
  • Contacting you about changes or cancellations.
  • Marketing purposes, if you have given your explicit consent.

15.4 Photos and media

Photos taken by the guide are normally delivered within 48 hours via Dropbox link sent to your email.

  • All photos remain the property of HeiTromsø AS. They are for personal use only and may not be resold or used commercially without permission.
  • Unless you notify us in writing before the tour, HeiTromsø AS may use photos taken during the activity for marketing and promotional purposes.

15.5 Data processors & third parties

We use reputable third-party providers to process and store data securely, including Understory (booking system), Adyen/Understory Pay (payments), and Dropbox (photo delivery). These providers act as data processors under GDPR and do not use your data for their own purposes.

15.6 Data retention

  • Booking records are stored for up to 5 years in compliance with Norwegian accounting regulations.
  • Emails and correspondence are retained as long as necessary to provide service and support.
  • Photos are typically kept only for as long as reasonably necessary to deliver them and handle potential re-requests.

15.7 Your rights

Under GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Request correction or deletion of your data.
  • Restrict or object to certain processing.
  • Withdraw consent for marketing at any time.
  • Lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).

15.8 Security

We take appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse.

15.9 Contact

For questions or requests regarding your data, please contact:
HeiTromsø AS
Solstrandvegen 157b, 9020 Tromsdalen, Norway
Org. nr: 935830680
Email:post@heitromso.no
Phone: +47 920 81 283