Privacy policy

Stokkøya Strandhotell (we) are committed to safeguarding the privacy of our users, suppliers, partners, and their employees. This document provides information about when, why, and how we process personal data that we gain access to as part of our work.

GENERAL TERMS FOR USE OF THE WEBSITE
The content on our websites is intended solely as an overview of the products and services we offer, as well as other relevant information. We strive to ensure that all information presented on our websites is accurate at all times, but errors may occur, and we do not accept responsibility for any losses resulting from information that may prove to be incomplete or incorrect.

Links to external websites are provided solely to make relevant information available to our users. We are not responsible for the content on websites where it is clear that the information is provided by third parties, or for any other information presented on or through such websites.

All content on our websites is protected by copyright. Copying, public distribution, or any other use beyond what is permitted under the Norwegian Copyright Act of 12 May 1961 no. 2 and other applicable legislation is not allowed without written consent.

Any disputes arising from the use of our websites shall be governed by Norwegian law and subject to Norwegian jurisdiction.

1. Who are we?
Stokkøya Strandhotell consists of Strandbaren and the Strandhotell. We are a travel destination located in Central Norway.

2. Why do we process your personal data?
The personal data we access will primarily be used to communicate with you, to manage inquiries, and for example to share information via newsletters. Information about your use of our services may also be used in our work to improve services and for statistical purposes related to this.

3. What personal data do we process?
In general, we only process personal data that is necessary to manage direct inquiries, send newsletters, or fulfill obligations we have undertaken through forms or agreements.

Personal data typically includes your name, address, phone number, and email address. When registering as a user of our services, we may request additional personal information. We do not normally process sensitive personal data about our users.

4. How do we collect your personal data?
The source of the information we hold about our users will normally be the users themselves, who provide the information during online registration.

5. How do we use inquiries and cookies?
We use cookies on our website to improve your user experience. Cookies are small data files stored on your device when you visit our website. They help us understand how you interact with our site, which pages you visit most, and how you navigate the website. This information is used to make adjustments based on user behavior, improving your experience and providing content that is most relevant to you.

We use:

  • Google Analytics 4 (GA4), an analytics platform that helps us measure traffic and engagement on our website. GA4 collects data about how users interact with the site, including which pages they visit, how long they stay on each page, and what actions they take. These insights help guide the development of our website so that our digital presence is optimized for results.
  • Functional cookies, which help recognize you when you return to our website and remember your preferences, such as language settings.
  • Analytical cookies, which help count the number of visitors and understand how our website is used.
  • Marketing cookies, which support the promotion of our products and services.
    If you do not wish to accept necessary, functional, or analytical cookies, you may adjust your privacy settings as described on this page: How to manage the use of cookies.

6. What is the legal basis for processing your personal data?
We will obtain your consent for the processing of personal data. Information about what you are consenting to will be clearly stated where personal data is collected.

7. Who has access to your personal data?
We will limit access to your personal data to those employees who need such access based on the purposes described in section 1 above. We may also share this information with our affiliated subcontractors and partners, see also section 8, and when necessary, with our advisors, auditors, lawyers, IT consultants, and others. In such cases, we ensure that all information is processed in full compliance with the intended purpose and that our suppliers assume responsibility for maintaining information security in accordance with applicable requirements and regulations.

8. Who do we disclose your personal data to?
We may use suppliers (subcontractors) who assist us in processing personal data. This typically includes providers of storage services and communication solutions that form part of our systems. This only occurs when necessary for you to access the relevant service. Consent for such sharing will be obtained in connection with the purchase or use of the service. Personal data will not otherwise be shared with others.

9. How and for how long do we store your personal data?
Personal data is stored for as long as necessary based on the purpose of the processing, and will then be deleted. Personal data collected in connection with the use of our services is stored electronically with data security in local IT systems.

You may request deletion of your personal data at any time, unless we are legally required to retain the information for a certain period (e.g., legal claims, accounting laws, etc.).

10. What rights do you have?
You must be informed about the processing of personal data concerning you. This document is therefore available on our website and includes links to the pages where you can register your information. For users who contact us in other ways, we will ensure that this information is made available when personal data is collected.

As a registered user, you have the right to:

  • access the personal data we process about you
  • request correction or deletion of inaccurate, unnecessary, incomplete, or outdated personal data
  • object to processing for direct marketing purposes, and be informed about any profiling
  • withdraw any consent you have given
  • receive the personal data you have provided to us and transfer it to another controller (data portability)
  • contact us if you have comments or questions regarding our processing of personal data
  • file a complaint directly with the Norwegian Data Protection Authority if you believe our processing of your personal data violates applicable law

11. How do we secure your personal data?

We have established routines and measures at various levels to ensure that unauthorized persons do not gain access to your personal data, and that all processing is carried out in accordance with applicable legislation. These measures include regular risk assessments, technical systems and physical procedures to safeguard information security, and routines for verifying access and correction requests. Further details about these assessments and security measures can be provided upon request.

12. How can you contact us?
Users who have questions or requests related to our processing of personal data may contact us. See our contact information on a separate page.