PRIVACY AND COOKIES POLICY
- Introduction.
ZAPA DA assures that it collects only a minimum necessary amount of your personal data and that it is stored safely and that you can request it to be removed at any time.
Further we explain the following:
- What personal data we collect and how
- The purpose of collecting data
- Your rights
- Disclosure of personal data to third parties, including subcontractors
- Security
ZAPA DA – acting on the market as Lyngen Outdoor Center and Rotsund Seafishing – is a Norwegian business partnership. We adhere to applicable Norwegian privacy law and meet the minimum requirements according to applicable laws and regulations within the EU/EEA, including the General Data Protection Regulation (GDPR), which came into force May 25, 2018. We will ensure that your privacy rights and our processing of your personal data are held to the highest standard.
We collect and process data as described in this Privacy Policy. It is important that you read this Privacy Policy thoroughly. If you do not agree with the contents of this Privacy Policy, you should refrain from using our website, or booking any rooms, or activities with us.
- What personal data we collect and how.
As users of our website you are not required to register any personal data. Here we only use and store cookies that may contain personal data.
2.1. As our guests, during the booking process you will be required to provide the following information:
- Name
- Gender
- Nationality
- Age
- Full address
- E-mail address
- Phone number
2.2. Special categories of personal data.
We do not collect special categories of personal data. However, upon booking certain activities, you may want to inform us about any special needs or allergies you might have.
Special categories of personal data is information relating to:
- Racial or ethnic origin, or political opinions, philosophical or religious beliefs,
- The fact that a person has been suspected of, charged with, indicted for or convicted of a criminal act,
- Health,
- Sex life,
- Trade-union membership.
2.3. Cookies.
Our website uses cookies.
A cookie is a file, a small piece of text that a website sends to a browser, and which the browser sends back next time you visit the website to enable faster download. For more information about how cookies work, please refer to www.allaboutcookies.org.
We also use Google Analytics that gathers statistics on how our website is used with the specific purpose of improving it.
- Purpose and legal basis for processing.
We collect, store and use personal data for several purposes:
- To provide you with access to our website: We use personal data about you to be able to provide the website to you. The legal basis for this is the contract you entered into with us concerning the provision of the website.
- To develop and improve the functionality of our website and related services: We want to provide you with the best possible experience. For this purpose, we use personal data that you have provided to us and that is generated while using the website to develop and improve the website and our service offerings. This is based on our legitimate interest in developing and improving the website and related service offerings.
- To provide you with relevant marketing and promotions: We want the marketing you experience and the promotions you get to be as relevant as possible. For this purpose, we process personal data about you, and the legal basis for this processing is our legitimate interests in generating income from your bookings.
- To ensure secure payments: We process personal data that you provide to us and that is generated from the use of payment cards to ensure that any payments you make to us are secure. This is based on the contract you entered into with us concerning the provision of the rooms and activities along with our legitimate interests in ensuring secure payment.
- Disclosure of personal data to third parties, including subcontractors.
We use subcontractors for processing personal data (« Sub-Processors ») for the following purposes:
- Data storage
- Data analysis
- Marketing
We ensure that all Sub-Processors enter into written agreements, including (if pertinent) agreements authorizing transfers outside the EEA. Sub-Processors are imposed the same obligations as us in relation to this Privacy Policy. We will never sell, transfer or otherwise disclose personal data for other reasons than defined by this Privacy Policy unless required by law or with your consent. If we suspect criminal activity in connection with your use of our services, we may choose to disclose information to the police upon demand.
- Your rights
- Consent: If our data processing is based on your consent, you can withdraw your consent regarding our use of your personal data at any time. If you want to withdraw your consent, we will delete your account within reasonable time, unless we have another legal basis for further processing of the data.
- Access: You can request access, free of charge, to the personal data we have collected about you at any time, unless such rights are restricted by law. You can also request information about how we collect personal data at any time.
- Erase & rectify: If certain conditions are met, you can request that we erase (delete) and rectify any collected personal data concerning you.
- Lodge a complaint: If you are not satisfied with the way we process your personal data, you have the right to lodge a complaint with the relevant supervisory authority (in Norway: Datatilsynet). However, we hope you will contact us first using the contact information below, regarding any issues you might have.
- Other data protection rights: You may have other rights in personal data concerning you depending on your circumstances. Please contact us if you have further questions regarding your rights.
- Security.
We employ routines and measures ensuring that no unauthorized persons gain access to any of your personal data. These measures include both physical and logical measures, risk assessments, and routines for handling data and following up requests about access to and deletion of personal data.
- Contact.
If you have any questions or requests regarding the collection of personal data, please contact us at: info@lyngen-outdoor.com, tel. +4790028697 or by regular post to:
Lyngen Outdoor Center
Uløybuktveien 19
9197 Uløybukt, Norway