Plotare Norway Travel

1. Introduction

Plotare Norway Travel AS ("Plotare", "we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

2. Information We Collect

We collect several types of information for various purposes:

2.1 Personal Identification Information

• Full name, date of birth, and nationality
• Contact details (email, phone number, address)
• Passport information and visa details
• Payment information (processed securely via payment providers)
• Emergency contact information

2.2 Travel Information

• Travel dates and itinerary preferences
• Special requirements (dietary, medical, mobility)
• Accommodation preferences and room requirements
• Activity interests and fitness levels
• Travel insurance details

2.3 Technical Data

• IP address and browser type
• Cookies and usage data (see our Cookie Policy)
• Device information and operating system
• Website interaction data

3. How We Use Your Information

4. Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data based on:

• Consent: You have given clear consent for specific purposes
• Contractual Necessity: Processing is necessary for the travel contract
• Legal Obligation: Compliance with Norwegian laws and regulations
• Legitimate Interests: Our legitimate business interests, balanced with your rights

5. Data Sharing and Disclosure

We may share your information with third parties only in these circumstances:

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not sell your personal data to third parties.

6. International Data Transfers

Your data is primarily processed in Norway/EEA. If transfers outside EEA occur, we ensure appropriate safeguards including standard contractual clauses approved by the European Commission.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal data. These include encryption, secure servers, access controls, and regular security assessments in compliance with Norwegian security standards.

8. Data Retention

We retain your personal data only as long as necessary for the purposes collected, including legal requirements. Booking data is typically retained for 5 years in compliance with Norwegian accounting and travel industry regulations.

9. Your Rights

Under GDPR and Norwegian privacy law, you have the following rights:

• Access: Request access to your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (with limitations)
• Restriction: Request restriction of processing
• Portability: Request transfer of your data
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact our Data Protection Officer using the details below.

10. Cookies and Tracking

We use cookies to enhance your browsing experience. You can control cookies through your browser settings. See our separate Cookie Policy for details.

11. Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect data from children without parental consent. Family bookings require adult supervision.

12. Changes to This Policy

We may update this Privacy Policy. We will notify you of significant changes and update the "Last Updated" date. Continued use of our services constitutes acceptance.

13. Contact Information