Last revised on 25.06.2020
1. Introductory provisions
This is the single point of contact according to Art. 26 GDPR for your data protection concerns within the scope of this privacy statement:
Visit Lyngenfjord AS
Johan Beck-veien 23, N- 9143 Skibotn
Phone: +47 77 21 08 50
Data protection officer: Georg Sichelschmidt, [email protected]
Personal data (e.g. name, e-mail address, telephone number, IP address) are processed and transmitted by the operator only in a lawful manner - in particular for fulfilling contractual obligations, based on predominant legitimate interests of the operator or on the basis of the user's consent. The legal basis for each processing operation is specified separately in each case.
4. Website presentation, data security, SSL encryption
The operator saves the following data every time a user accesses this website: website accessed, file requested, exact date/time, amount of data transferred, notification of successful retrieval, browser type/version, operating system, previously visited page and IP address.
Data collected serve to ensure a trouble-free operation of our website, further improvement of our offer, statistical evaluations as well as protection against and documentation of cyber-attacks etc. The website operator reserves the right to check the server log files at a later time in case there is any evidence of illegal use.
These data processing actions take place on the basis of a predominantly legitimate interest (Art. 6 (1) (f) GDPR) of the website operators. The purpose of data processing is to provide the website efficiently and safely, and to avert current or potential threats. The user's IP address will be deleted 1 month after the last visit to the respective website.
Additionally, also cookies are used when visiting our websites (see point 11. Cookies).
The operators of the websites set up proper technical and organizational measures to ensure the security of your personal data.
Visit Group is the supplier for development and maintenance of the website and processor of personal data on www.visit-lyngenfjord.com.
For this purpose, the website operators use SSL encryption - among other measures. All data that you will transmit to these websites - in the course of inquiries or logins - cannot be read by third parties thanks to SSL encryption. You recognize such encrypted connections due to the URL prefix "https://" in the page link of your browser's address bar. Unencrypted pages are identified by "http://".
However, we would like to point out that data transmission via the Internet (e.g. in the case of communication by e-mail) can always have security gaps. The complete protection of your transmitted data against unauthorized access by third parties is not possible.
5. Inquiry/Contact Form and brochure order
When contacting the operator via our inquiry/contact form and when ordering free brochures, the following user information is processed in order to manage the request and to answer any follow-up questions that might arise: salutation, first and last name, e-mail address, telephone number, address, postal code, country. In addition, other specified data concerning the request (e.g. period of stay, type of accommodation) is processed as well. All collected personal data will be deleted by the operator within 12 months after completion of the request's processing.
If you voluntarily provide us with "sensitive" (special categories of personal data within the meaning of Art. 9 GDPR) data (e.g. existing allergies or your religious confession), this will only be done on the basis of your explicit consent to data processing for the purpose of handling your request. This consent can be revoked at any time by sending a message to Visit Lyngenfjord AS ([email protected]).
Personal data disclosed by the user will only be processed by the operator to the extent required for the processing of the current request and/or the provision of the requested service. According to Art. 6 (1) lit. b GDPR, these data processing operations are necessary to fulfill the contract or to carry out pre-contractual measures.
If there is a legal or regulatory obligation, data will also be transmitted to public authorities (Art. 6 (1) lit. c GDPR).
6. Prize games
When participating in competitions and prize games organized by the websites, the following personal data will be collected: salutation, first and last name, e-mail address, address, telephone number, country, date of birth.
These data are processed by the respective operators for the administration and processing of the prize game (in particular for the assignment of prize game participation requests and for the determination and notification of winners). They are stored for the duration of the prize game and - for processing any profit and damage claims that might arise - for a maximum of 40 months thereafter before they are deleted.
In the event of a winning prize, the participant agrees that he will be named and published as the winner and that a photo will be taken when the prize is handed over - which may be used and published by the organizer of the prize draw. This consent to data processing and publication may be revoked by the participant in the prize game at any time prior to notification of the prize by contacting the respective party responsible. A measure that terminates the participation in the prize game immediately. The prize game can be carried out only on the basis of the appropriate marketing communication of the competition and the winner; For this reason, the participant in the prize game accepts the appropriate data processing measures and publication of his photo, which are mainly in the interest of Visit Lyngenfjord AS.
If there is a legal or regulatory obligation, data will also be transmitted to public authorities (Art. 6 (1) lit. c GDPR). If required or helpful for the delivery or order processing, personal data will also partly be forwarded to third party service providers (e.g. delivery services).
On the basis of a separate consent, a marketing-related processing of personal data provided can take place as well. In this case the participant receives our newsletter and direct marketing measures can take place (see 07. Newsletter and 08. Direct Marketing). You may revoke your consent to the processing of your data for this purpose at any time by sending an e-mail to [email protected].
If a user subscribes to the newsletter of the operator, personal data of the user - salutation, first and last name and e-mail address - is collected and processed. Afterwards, the user regularly receives a personalized e-mail message tailored to his preferences, containing information and current offers of the operator (newsletter). In general, the administration of e-mail marketing is carried out centrally by Visit Lyngenfjord AS as part of joint information processing.
By subscribing to the newsletter, the user agrees that personal data may be used for the regular sending of the newsletter in accordance with Art. 6 (1) lit a GDPR.
The registration uses the double opt-in procedure. After logging in, the user will receive a confirmation and authorization message to the e-mail address provided, with the respective request to click on the link contained therein. This ensures that only the authorized user of the given e-mail address can sign up for the newsletter. If you register for the newsletter online, we will store the IP address of the computer system used at the moment of registration as well as the exact date and time of registration. This procedure is necessary to document your consent and thus fulfill the data protection obligations of the party responsible.
Our newsletters use a standard tracking system. Using an embedded tracking pixel, we can detect if and when an e-mail was opened by the user and which links in the email were accessed. This information is evaluated by our experts in order to optimize the delivery of newsletters and to better adapt the content of future newsletters to your favorite interests. These personal details will not be disclosed to third parties.
The user can unsubscribe from the newsletter at any time. At the end of each newsletter you will find a link that allows the user to unsubscribe from the service. Alternatively, the user can also send a corresponding e-mail to [email protected]. After unsubscribing from the newsletter, personal data of the user will be deleted immediately from the newsletter system.
8. Direct marketing
In addition to sending out newsletters on the basis of a corresponding consent, the operator reserves the right to process customer data in connection with the sending of offers and information regarding services and offers of the operator by post or by e-mail for own advertising purposes: salutation, first and last name, e-mail address, telephone number, address, country. You can revoke the processing of personal data for this purpose at any time, either when entering your data or by sending an e-mail afterwards to [email protected].
9. Sharing of data
We reserve the right to share accumulated, general-demographic data with our partners - this is valid for collected in connection with the use of our offers and services in anonymous form for statistical purposes. Such data doesn't contain any personally identifiable information.
10. Surveys, Temporary actions
In the course of temporary actions (e.g. guest surveys) personal data is processed by the operator. Participation in these actions is voluntary, therefore the user can decide independently whether he wants to disclose personal information or not. Personal data (such as name, e-mail address, telephone number), demographic data (e.g. postal code, age group) or other data may be affected here.
Data is used to provide the requested service to the website visitors. All personal data collected is used on the basis of our legitimate interest (Art. 6 (1) lit. f GDPR) in order to further improve both our website and our services. As far as possible by taking into account also the respective processing purpose, anonymous or pseudonymized data processing takes place. In this context you have the right to object to the processing of your personal data for reasons that arise from your particular situation; Please contact us by sending an e-mail to [email protected].
The use of the website is also possible without cookies. The user can deactivate the storage of cookies in his browser, limit them to certain websites or set his browser to notify each time before a cookie is stored. The user can delete the cookies at any time from his device's hard disk by adapting the privacy features/settings of his browser. In this case, the functionality and usability of the website may be restricted.
The legal basis of data processing in the context of cookies is formed by the consent of the user via the cookie banner (Art. 6 (1) lit a GDPR). You may revoke your consent to the processing of your data for this purpose at any time by changing the setting of the cookie banner or by sending an e-mail to [email protected].
Below you will find a list of all cookies used on this website:
In addition, cookies are also used through several social media plugins (see 14. Social Media Plugins) as well as web analytics and advertising tools (see 16. Web Analytics and Advertising Tools).
The operator uses so-called social media plugins (social network interfaces) on the website. When a user visits our website, the system automatically connects to the respective social network through integration of the plugins, and forwards personal details (IP address, website visit, etc.).
Automatically transferred data is used exclusively by the social network providers, not by the operator himself. Further information, including information on the content of data collected by social networks, can be found on the website of the respective social network, where the privacy settings can be changed and adjusted.
The following social networks are integrated into our website:
This website contains social plugins of the social network YouTube, operated by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
By visiting one of our websites that contain such a plugin, your browser will set up a direct connection with the YouTube servers. By linking the plugin, YouTube receives the information that you have visited the corresponding page of our website. If you are logged in to your YouTube account, YouTube can associate your visit to your personal account. You can prevent this by logging out of your YouTube account. Please find more detailed information on YouTube data sharing and data privacy at http://www.google.de/intl/en/policies/privacy/ .
13. Web Analytics and advertising tools
This website uses Google Analytics, a website analysis service provided by Google Inc. (“Google”), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics applies cookies that enable an analysis of how a person uses the website.
All data generated by the cookie about the use of this website (including the user's IP address) are transmitted to a Google server in the USA and stored there. A specific European Commission "Adequacy Decision" has been made for the transfer of personal data to the USA.
Google will, on behalf of the operator, use all data submitted for the purposes of evaluating the person's use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. Google may also forward this information to third parties if required to do so by law, or if such third parties process the information on Google’s behalf.
In case of activation of IP anonymization on this website, Google will truncate your IP address within the European Union or in the European Economic Area. Only in exceptional cases the full IP address will be transmitted to a Google server in the USA and truncated there. The IP anonymization is active by default on this website.
14. Google remarketing
This website uses Google Remarketing. Google Remarketing is an ad service provided by Google Inc., that targets specific ads to previous visitors of the website.
More detailed information: https://support.google.com/adwords/answer/2453998?hl=en
15. Facebook custom audiences
We use on our webpage functions of Facebook, a social media network of the company Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland.
Which functions (social plug-ins) Facebook is offering, can you read up at https://developers.facebook.com/docs/plugins/.
Via the visit of our webpage information can be transferred to Facebook. In case you have a Facebook account, Facebook can match this data with your personal account. If you do not whish that, please sign out from Facebook.
The data protection guidelines, which information Facebook collects and how they use them you can find at https://www.facebook.com/policy.php.
This website uses Facebook Custom Audiences. Facebook Custom Audiences is an advertising service owned by Facebook Inc., 1601 S California Ave, Palo Alto, CA, 94304, USA, that targets specific ads directly to previous visitors of the website.
Cookies facilitate the analysis of user behavior during visits to the website and are then used for targeted product recommendations and interest-based advertising.
If users do not wish to receive interest-based advertising on Facebook, they can opt out here: https://www.facebook.com/settings/?tab=ads
16. Storing and disclosure of personal data
The personal data registered in forms on our websites is not accessible to other visitors to the website. The data is not shared with a third party unless this is necessary to deliver the service that has been booked or if you have consented to this when filling in the form. Visit Lyngenfjord AS does not sell your personal data to third parties.
The data registered in forms on www.visit-lyngenfjord.com is stored by Visit Group and Visit Lyngenfjord and is not used for purposes other than what the form applies to. The data is not shared with a third party unless this is necessary to deliver the service that has been booked or if you have consented to this when filling in the form.
Data registered in connection with bookings on booking.visit-lyngenfjord.com is stored by Visit TG in the booking system Citybreak. If you have booked a service provided by a third party (e.g. hotel accommodation or a sightseeing tour), the data will be shared with the relevant service provider. This data will only be used in connection with your booking and for no other purposes. Beyond this, the data is not shared with a third party unless you have consented to this when filling in the form.
17. Searches on the website
Web search queries used on the website are collected and stored in Google Analytics. The purpose of storing these is to be able to use data about what users search for to adapt the content on the web pages and improve the search function. The words/terms used in the web search queries cannot be linked to other data about the user who has performed the search.
18. The data subject’s rights include
• You have the right to demand restriction of the processing.
• You have the right to object to the processing.
• You have the right to data mobility.
• You have the right to complain to the Norwegian Data Protection Authority (DPA).
• You have the right to withdraw your consent at any time.
If you have any questions concerning access to and/or rectification or erasure of personal data, please contact us by e-mail at [email protected].
19. External links
20. Links and embedded external Content (Iframe)
Visit Lyngenfjord AS, org.no. 911 611 538
Visiting address: Johan Beck-veien 23, 9143 Skibotn
Postal address: PO Box 74, 9148 Olderdalen
Phone: +47 77 21 08 50
E-mail: [email protected]