Privacy Policy

1. Data controller

Kajakkguiden AS (hereafter "we" or "Kajakkguiden") is the data controller for personal data collected via the website kajakkguiden.no and in connection with our courses and services.

Contact information:
Kajakkguiden AS
Org. no.: 915 846 491
Masemyrane 8, 6050 Valderøya
Email: post@kajakkguiden.no
Phone: 468 09 065

2. What information we collect

We collect the following types of personal data:

• Contact information: Name, email address, phone number and any postal address when booking courses or rentals.
• Health information: Relevant health information you voluntarily provide in connection with course registration, such as swimming ability and any health conditions that may affect safety.
• Payment information: Payment is made via invoice, bank transfer or Vipps. We only store information necessary for invoicing and payment follow-up.
• Technical information: IP address, browser type, device information and page views via cookies and analytics tools.
• Communication: Content of emails, messages and other correspondence you send us.

3. Purpose of processing

We use your personal data to:

• Manage course bookings and registrations
• Conduct courses and trips safely
• Communicate with you about bookings, changes and important information
• Send newsletters and marketing (only with your consent)
• Improve the website and our services through analysis of usage patterns
• Fulfill legal requirements, including accounting legislation

4. Legal basis

We process personal data based on the following legal grounds:

• Contract: Processing necessary to fulfill an agreement with you, for example when booking a course.
• Consent: For newsletters, marketing and use of non-essential cookies.
• Legitimate interest: To improve our services and for basic website analytics.
• Legal obligation: To meet requirements in the Bookkeeping Act and other legislation.

5. Cookies

The website uses cookies to function optimally. We distinguish between:

• Essential cookies: Required for the website to function (e.g. forms, navigation). These do not require consent.
• Analytics cookies: We use Google Analytics to understand how the website is used. These are only activated with your consent. Your IP address is anonymised.

We currently do not use marketing cookies. We will implement a cookie solution that allows you to manage your cookie preferences.

6. Third parties

We may share personal data with the following third parties:

• Google: Google Analytics for website analytics. A data processing agreement is in place.
• Vercel: Hosting and operation of the website. Servers in EU/EEA.
• Cloudflare: DNS and security infrastructure for the domain.
• Resend: Email provider for sending confirmations and newsletters. A data processing agreement is in place.
• Accountant: For legally required accounting.

We never sell your personal data to third parties.

7. Newsletters

If you subscribe to our newsletter, we store your email address and optionally your name. You can unsubscribe at any time by clicking the unsubscribe link in the email, or by contacting us directly.

8. Storage and deletion

We store personal data only as long as necessary for the purpose for which it was collected:

• Customer data: Deleted no later than 3 years after the last customer relationship, unless legislation requires longer retention.
• Accounting data: Retained for 5 years after the end of the financial year in accordance with the Bookkeeping Act.
• Newsletters: Stored until you unsubscribe.
• Analytics data: Anonymised or deleted after 26 months.

9. Your rights

Under the General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act, you have the following rights:

• Access: You have the right to request access to what personal data we have stored about you.
• Rectification: You have the right to request that incorrect or incomplete data be corrected.
• Erasure: You have the right to request deletion of your personal data, unless we have a legal obligation to retain it.
• Restriction: You have the right to request that the processing of your data be restricted.
• Data portability: You have the right to receive your personal data in a structured, machine-readable format.
• Objection: You have the right to object to processing based on legitimate interest.
• Withdrawal of consent: You may withdraw any consent you have given at any time.

To exercise your rights, contact us at post@kajakkguiden.no. We will respond within 30 days.

10. Complaint to the Data Protection Authority

If you believe that our processing of personal data does not comply with what we have described here, or that we are otherwise in breach of privacy legislation, you can file a complaint with the Norwegian Data Protection Authority (Datatilsynet).

Datatilsynet
Postboks 458 Sentrum, 0105 Oslo
Phone: 22 39 69 00
Email: postkasse@datatilsynet.no
Website: www.datatilsynet.no

11. Security

We take data security seriously and have implemented technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or deletion. The website uses SSL/TLS encryption for all data transfers.

12. Changes to the privacy policy

We may update this privacy policy as needed. Significant changes will be communicated via the website. We encourage you to review this policy regularly.