Draft for review. Not legal advice.
[COMPANY NAME], org. no. [ORG NUMBER], [ADDRESS], Norway, is the controller for personal data processed on this website. Contact: [EMAIL].
Browsing. Our hosting provider (Vercel Inc.) processes your IP address and request data to deliver the pages and protect the service, and keeps server logs for a limited time. Product photos are delivered by an image service (imgix) which sees your IP address when loading an image.
Searches and live availability. When you choose dates or open a product, your search (dates, party size, product) is sent to our server and on to the supplier's booking system to fetch live availability and prices. No name or contact details are involved at this stage.
Remembered on your device only. Your last search, recently viewed products and saved products are stored in your own browser (sessionStorage and localStorage). They never reach our servers and you can clear them in your browser at any time.
Cookies. This website sets no tracking or advertising cookies. [IF ANALYTICS IS ADDED, DESCRIBE IT HERE.]
Booking. When you book, the booking system behind this site collects the details needed for the booking and payment (name, e-mail, phone, payment details) and shares what is necessary with the supplier. That processing is described in the privacy notice shown in the booking step. [LINK TO BOOKING PRIVACY NOTICE]
Delivering the pages and answering your searches is our legitimate interest in running the website (GDPR art. 6(1)(f)). Server logs are kept for at most [30] days. Data stored in your browser is kept until you clear it.
Our servers and database run in the EU/EEA and the United Kingdom. Where a provider processes data outside the EEA, transfers rest on the EU standard contractual clauses or an adequacy decision.
You may ask for access, correction or deletion of personal data we hold about you, object to processing, and complain to the Norwegian Data Protection Authority (Datatilsynet). Write to [EMAIL].
