PRIVACY POLICY
This privacy policy applies to Merkantilbygg AS and Highland Lodge (“the Hotel”)'s processing of personal data about its guests. The Hotel processes personal data about its guests in order to provide its services. This privacy policy provides you with information you are entitled to when personal data is collected about you, including how the Hotel processes personal data.
The Privacy Policy covers all personal information provided by you or collected by the Hotel in the performance of its services. The Hotel is subject to Norwegian law, and will process personal information in accordance with the applicable privacy legislation at any time.
1. DATA CONTROLLER FOR YOUR PERSONAL DATA
The controller is the party that determines the purposes and means of processing personal data. The Hotel is the controller of personal data you provide when you register on the Hotel's website www.highland.no (“Website”) or book a stay.
Contact information for the data controller:
Highland Lodge Geilo
Lienvegen 11, 3580
Telephone number: +47 32 09 61 00
Email address: mail@highland.no
2. PERSONAL DATA PROCESSED ABOUT YOU
If you enter into an agreement for accommodation at the hotel, the Hotel will process personal data about you. The information collected by the Hotel can be divided into the following categories:
i) Personal data ; i.e. information and assessments that can be linked to an individual, such as first and last name, age, gender, date of birth, position/title, credit card details or other financial information, residential address or other physical address, email address, telephone number and other contact information, log of use of user profile and advertisements.
ii) Information collected through use of the Website ; i.e. information collected through data tracking, for example through the use of cookies (see further under point 3) and through the use of analysis tools such as Google Analytics. Examples of information that may be collected are which browser you use, which third-party website linked you to the Website, the search terms you enter on the Website, the specific pages you visit on the Website, and how long you visit the Website at a time.
iii) Your IP address (the number that identifies your computer on the Internet) and other information about your computer ; The Hotel may also store your IP address and other information about your computer for system administration purposes (for example, to calculate how many users have visited the Website). Your IP address is only stored while you are visiting the Website, after which it is either deleted or anonymized.
3. COOKIES
The hotel uses cookies and other tracking technology (“Cookies”) to improve the user experience and optimize the Website. As a visitor to the Website, you will generally remain anonymous, but please note that you may be verified. Furthermore, location data may be stored to optimize the Website. Location data is never linked to user data.
You can set your browser to detect and remove cookies. By using the help function in your browser, you can configure your browser to prevent the use of cookies, and delete existing cookies. You can also learn how to block new cookies on your browser, and how to be notified about new cookies. If you do not choose to accept Cookies, you risk not being able to access all the features of the Website.
4. WHERE IS YOUR PERSONAL INFORMATION OBTAINED FROM?
Personal information is collected through your use of the Website, or by you providing information to the Hotel in connection with booking a stay.
5. WHAT IS YOUR PERSONAL INFORMATION USED FOR?
The Hotel uses the personal information you provide or that is collected by the Hotel through your use of the Website for the following purposes:
i) to fulfill an agreement with you, i.e. to offer you accommodation at the hotel;
ii) to enable you to enter into an agreement to book accommodation directly from the Website;
iii) to improve the services offered by the Hotel, the content of the Website and other relevant platforms, for example to collect and process personal data for internal statistical purposes, as well as the administration and marketing of the Hotel. This involves identifying general usage patterns in order for the Hotel to improve its services and the Website;
iv) to respond to your questions and inquiries;
v) to notify you about new and other services from the Hotel;
vi) to notify you of changes to this Privacy Policy;
vii) for the investigation of, and prevention and protection against, breaches of this Privacy Policy, crime, fraud and potential threats to our or others' legal rights;
viii) to comply with applicable laws and regulations;
ix) for any other purposes, which are either described in this Privacy Policy, permitted or required to us by law, rules, regulations or other legal process, or where we specifically notify you.
6. CONSENT AND OTHER LEGAL BASIS FOR PROCESSING PERSONAL DATA
The Hotel's processing of your personal data requires your consent, or other legal basis. Consent may be given at the request of the Hotel, or by you voluntarily providing information when booking a stay on the Website or other relevant platforms for the Hotel.
You can withdraw your consent at any time by sending an email to the Hotel, or by deleting your member profile on the Website (see point 10). Please note that certain services offered by the Hotel on the Website, such as booking and newsletters, depend on the Hotel processing certain types of information about the user, and that withdrawal of consent may result in the user not being able to stay at the hotel or receive newsletters.
Other legal basis for processing personal data may be such processing that is necessary for the Hotel to comply with applicable laws and regulations, such as the Accounting Act's requirements for the retention of special forms of documentation.
Your personal data will not be stored longer than is necessary for the Hotel to fulfill the above-mentioned purposes.
7. DISCLOSURE OF PERSONAL INFORMATION TO THIRD PARTIES
The Hotel may disclose your personal data to suppliers and subcontractors who perform services for the Hotel, in order for the Hotel to be able to provide services to you (for example, the Hotel may use suppliers for hosting the Website, or to facilitate contact with customers by email or SMS, for payment processing, etc.). Suppliers and subcontractors may only use the personal data for the purposes for which they were collected, and to perform their tasks. The relationship with such suppliers and subcontractors will be regulated through a data processing agreement with the Hotel.
The Hotel will not share, sell, distribute or otherwise disclose personal information about you other than as stated in this Privacy Policy, unless the Hotel is required to do so by law or binding court order.
8. SECURITY OF YOUR PERSONAL INFORMATION
The Hotel takes your privacy seriously and has implemented adequate security measures to protect your personal data, including physical, technical and organizational measures, to prevent loss, alteration, theft and unauthorized access to personal data for which the Hotel is responsible.
9. LINKS TO OTHER WEBSITES
The website may contain links to other websites. These websites have their own privacy policies that provide instructions on how the websites are operated and how personal data is collected and processed. If you provide your personal data to such websites, this will be governed by the website's privacy policy. The hotel is not responsible for such third-party websites, how they are operated, and how they process your personal data. The hotel recommends that you familiarize yourself with the third-party websites' own privacy policies and terms of use when visiting and using these websites.
10. YOUR RIGHTS
You have the right to access the personal data the Hotel processes about you. If you have registered a profile on the Website, you can easily log in to your profile on the Website and change incorrect personal data stored there, or delete your profile.
You have the right to request that your personal data be deleted. Upon such requests, all of your personal data will be deleted, unless continued storage of the personal data is required by law or permitted by the Hotel's legitimate interests. The Hotel may continue to store anonymized information, i.e. information that cannot be linked to you.
Please contact the Hotel using the contact information provided in section 1 if you wish to exercise your rights to:
i) receive information about what personal data the controller processes about you;
ii) change, correct or update your personal information;
iii) request the erasure of personal data;
iv) no longer receive emails from the Hotel, such as newsletters and the like;
v) withdraw your consent to the collection, processing, use or disclosure of your personal data to third parties;
vi) receive information about your right to data portability, i.e. your right to receive, reuse or transfer personal data you have provided to the Hotel.
If you believe that the Hotel's processing of personal data is in violation of privacy legislation, you have the right to complain to the Norwegian Data Protection Authority.
11. CHANGES TO THE PRIVACY POLICY
The Hotel may make changes to this Privacy Policy from time to time. An updated version of the Hotel's Privacy Policy will be available on the Website at all times, and will supersede any previous versions of the Privacy Policy in the event of any conflict. The Hotel will notify you if changes are made to the Privacy Policy that require your consent.
By using the Hotel's services, you consent to electronic notification and publication of this Privacy Policy on the Website, and you agree that electronic notification or publication of a revised version on the Website is valid as notification to you of any changes made.
