Privacy policy
This privacy policy is continuously updated and was last revised on 11.06.2024.
It explains why and how Spiterstulen Drift AS collects and uses personal data, as well as your rights.
The privacy policy applies to Spiterstulen Drift AS (with organization ID 976 389 387)
1. General Information
Below you will find a simple overview of how your personal data will be processed when you visit our website. The term "personal data" includes all information that can be used to personally identify you. As the operator of this website, Spiterstulen Drift AS understands the importance of handling your personal data with confidentiality. We assure you that we comply with all legal requirements for privacy and data security at all times.
2. Responsible controll of data collection on the website
The data processed on this website is managed by the site owner, whose contact information is available under "Information about the Controller" in this privacy policy.
3. Who Has Access to Your Personal Data?
Information provided via forms on this website and/or in communication with us by phone or email is accessible only to employees of Spiterstulen. We do not sell or rent the provided information about to any third party. Information about your user patterns on the website is tracked and stored in the various analytics tools that we use, provided that you have given consent to this. You will find detailed information about these tools and the information collected further down in this privacy policy.
4. How We Use Your Personal Data
Some of your information is stored to ensure proper functionality and delivery of the information and functions on this website. Other data is stored for analysis purposes to understand your usage patterns and journey on the website.
We process your personal data in accordance with applicable privacy regulations. This means that user data is only processed in the following cases:
- When it is required by law (in accordance with Article 6, Paragraph 1(c) of the GDPR).
- When it is necessary to fulfill a contract (in accordance with Article 6, Paragraph 1(b) of the GDPR).
- When it is in line with our legitimate interests (in accordance with Article 6, Paragraph 1(f) of the GDPR).
- When the user has provided consent (in accordance with Article 6, Paragraph 1(a) of the GDPR).
We do not collect personal data such as names, phone numbers, or email addresses unless you voluntarily provide this information, for example, by submitting a contact request, applying for a job, or contacting us via phone or email.
We will only use this data to contact you regarding your existing customer relationship with us or a specific inquiry from you, such as a contact request or job application. We may also use the data for product-related marketing purposes if you have given prior consent, or if it is permitted under applicable laws and regulations, unless you have objected to this.
5. How Long We Store Your Data
Unless a more specific retention period is provided in this privacy policy, your personal data will be retained until the purpose for which it was collected no longer applies. If you submit a legitimate deletion request or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible reasons to retain your personal information (e.g., tax or purchase-related retention periods). In such cases, the data will be deleted once these reasons no longer apply.
6. Legal Basis for Data Processing on This Website
If you have given your consent to data processing, we will process your personal data in accordance with applicable privacy laws, including Article 6(1)(a) of the GDPR. If you specifically consent to the transfer of personal data to third countries, the processing will also be based on relevant legal provisions, such as Article 49(1)(a) of the GDPR. If you have consented to the storage of cookies or access to your device's information (e.g., via device fingerprinting), the data processing will also be based on § 25 (1) of the TTDSG. You can withdraw your consent at any time. If your data is necessary to fulfill a contract or for pre-contractual actions, processing will be in accordance with Article 6(1)(b) of the GDPR. Additionally, we will process your data in accordance with Article 6(1)(c) of the GDPR if a legal obligation requires such processing. We may also process your data based on our legitimate interests, in accordance with Article 6(1)(f) of the GDPR. Further information on the specific legal bases for data processing will be provided in the relevant sections of this privacy policy.
7. Information about the Controller (the Responsible Data Processor)
The responsible party for data processing on this website is:
Spiterstulen
Adresse: Visdalsvegen 1710, 2686 Lom, Norway
E-post: post@spiterstulen.no
8. Your Rights Regarding Your Personal Data
You have the right to receive information about the source, recipients, and purposes of the personal data stored about you without incurring any cost. You also have the right to request correction or deletion of your data. If you have given consent for data processing, you have the right to withdraw this consent at any time, which will also affect future data processing. Additionally, you have the right to request the restriction of data processing if warranted by the circumstances. You also have the right to file a complaint with the competent supervisory authority.
If you wish to exercise any of your rights, you can email us at post@spiterstulen.no. You can also send a written request toSpiterstulen Jotunheimen, Po.box 158, 2688 Lom, Norway, or you can call us at +47 97 99 80 00.
9. How Your Personal Data is Stored
9.1 General information
When you visit our website, your device's browser automatically sends information to our server, which is temporarily stored in a log file. We have no control over this. The following information is automatically recorded and stored until it is deleted:
- The IP address of the device requesting access
- Date and time of access
- The name and URL of the accessed file
- The website/application used to access it (referrer URL)
- The browser you are using and, if applicable, your computer's operating system, as well as the name of your access provider .
Processing of the IP address is based on Article 6, Paragraph 1(f) of the GDPR and § 25(1) of the TTDSG. Our legitimate interest in the data collection includes the purposes of ensuring smooth connectivity, optimal user experience, and assessment of system security and stability.
We also use cookies, tracking tools and targeting methods our website. You will find a detailed explanation of these tools, procedures, and how your data is used for these purposes in the sections below on online presence, website optimization, and integration of services and third-party content.
9.2 Inquiries
When you share your information with us, by submitting a contact form, a presentation form, or any other type of inquiry, this information is safely stored in our system. This system stores data in accordance with the Personal Data Act and GDPR. (Les mer om Microsoft Dynamics og GDPR).
For various inquiries, we store the following personal data about you:
- Henvendelse via kontaktskjema:
Contact form inquiry: Name, Last name, Email, Phone Number, and Company (if provided). - Email inquiry to our provided email address, including job applications:
Email and any other personal information you have shared in the email.
- Phone Inquiry::
Your phone number and any other personal information you have shared in your call.
- Reservations completed in our bookingsystem, Ibelsa:
Name, Last name, Address, Phonenumber, Country Nationality, Gender, Language, Email address and Company
10. Marketing and Analytics Tools
10.1 Google Tag Manager
This website uses Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is a tool that allows us to integrate tracking technologies and other tools into our website. Google Tag Manager does not create user profiles, store cookies, or conduct independent analyses. It only functions as a platform for managing and activating the integrated tools. However, Google Tag Manager collects your IP address, which may also be transmitted to Google's parent company in the USA.
The use of Google Tag Manager is based on Article 6(1)(f) of the GDPR. As the website operator, we have a legitimate interest in the simple and efficient integration and management of various tools on our website. When required consent has been obtained, processing is carried out according to Article 6(1)(a) of the GDPR and § 25(1) of the TTDSG (German Telecommunications-Telemedia Data Protection Act), provided the consent includes the storage of cookies or access to user information (e.g., device fingerprinting). You have the right to revoke this consent at any time.
10.2 Google Analytics
We use the Google Analytics service on this website. This is a web analytics tool provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics allows the website operator to analyze visitor behavior patterns on the site. This includes information such as pages visited, time spent on the pages, the operating system, and the user's geographic location. This data is collected and assigned a unique user ID linked to the visitor's device.
Google Analytics also allows for tracking of mouse clicks, scrolling movements, and other interactions on the website. To improve data collection and analysis, Google Analytics uses various modeling methods and machine learning technologies.
Google Analytics uses technologies like cookies or device fingerprinting to identify and analyze user behavior patterns. The information collected by Google is usually transmitted to servers in the USA and stored there.
We base the use of Google Analytics on your consent, in accordance with Article 6(1)(a) of the GDPR and § 25(1) of the TTDSG. You have the right to revoke this consent at any time.
Data transfer to the USA takes place according to the Standard Contractual Clauses (SCCs) of the European Commission. You can find details here: https://business.safety.google/adscontrollerterms/sccs/. https://business.safety.google/adscontrollerterms/sccs/
10.3 Google Ads
This website uses Google Ads, an online marketing tool from Google Ireland Limited ("Google"), with an address at Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads enables the display of advertisements in Google's search engine or on third-party websites when users search for specific keywords in Google (keyword targeting). It also allows targeted advertising based on user data that Google has, such as location data and interests (audience targeting). As the data processor, we analyze this data quantitatively, including which keywords resulted in our ads being displayed and the number of clicks on each ad.
The use of these services is based on your consent in accordance with Article 6(1)(a) of the GDPR and § 25(1) of the TTDSG. You have the right to revoke this consent at any time.
Data transfer to the USA is based on the Standard Contractual Clauses (SCCs) of the European Commission. For details, please see: https://policies.google.com/privacy/frameworks
https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/.
10.4 Google Signals
If you have given consent for performance and statistical cookies through our consent solution (in accordance with Article 6(1)(a) of the GDPR), we will also implement the Google Signals extension in Google Analytics. The provider of this service is Google LLC (formerly Google Inc.), headquartered at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. In the EU, the service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereafter referred to as Google.
Google Signals provides Google Analytics (see the Google Analytics section above) with additional information, including demographic data and interest categories related to Google users who have enabled personalized ads in their settings. Google combines this information with its own signals to analyze behavior across multiple devices. However, Google Analytics only generates such data in the form of aggregated and anonymized reports. These reports provide insights into general behavior patterns without identifying individuals
For this purpose, Google Analytics creates specific audiences (called Google Audiences) that the Google Ads advertising platform can use as a basis for displaying ads across devices. This enables Google to integrate advertising across various platforms, including search engines, YouTube, and other Google products, as well as third-party websites.
We use Google Signals to better understand our users' digital experience.
If you do not wish to allow the use of Google Signals, you can withdraw any previously given marketing consent in the cookie settings and disable personalized ads through your own Google settings: https://adssettings.google.com/ https://adssettings.google.com/
For further information about Google Signals and Google's privacy practices, please see the following links: https://support.google.com/analytics/answer/7532985 https://policies.google.com/privacy?hl=en
10.5 Hotjar
This website uses cookies from Hotjar, a service provided by Hotjar Ltd., Level 2, St. Julian's Business Centre, 3, Elia Zammit Street, St. Julian's STJ 1000, Malta, Europe (https://www.hotjar.com).
Hotjar is a tool used as part of our consent solution, CookieBot. It is utilized by CookieBot to analyze user behavior on the website to ensure that we constantly operate in accordance with our users' consent.
Hotjar uses technologies that allow for user recognition in order to analyze user behavior patterns (such as cookies or device fingerprinting).
If you have given your consent, the use of this service will comply with Article 6(1)(a) of the GDPR and § 25(1) of the TTDSG. You have the right to revoke this consent at any time. If consent has not been obtained, the service will be used according to Article 6(1)(f) of the GDPR because the website operator has a legitimate interest in analyzing user behavior patterns to optimize web presence, web functionality and advertising activities.
Disabling Hotjar
If you wish to disable data collection by Hotjar, click on the link below and follow the instructions: https://www.hotjar.com/policies/do-not-track/.
Please note that Hotjar must be disabled separately for each browser and device.
For more information about Hotjar and data collection, please see Hotjar's privacy policy at this link:https://www.hotjar.com/privacy .
11. Tools and Third-Party Providers
11.1 YouTube
We integrate videos from YouTube on our website. YouTube is operated by Google Ireland Limited ("Google"), headquartered at Gordon House, Barrow Street, Dublin 4, Ireland.
When you start playing a YouTube video on our website, a connection to the YouTube server is established, which notifies YouTube of which of our pages you have visited. If you are logged into your YouTube account while visiting our website, this allows YouTube to directly link your browsing patterns to your personal profile. You can avoid this by logging out of your YouTube account.
After you have started playing a video, YouTube may place cookies or similar recognition technologies (such as device fingerprinting) on your device. This allows YouTube to collect information about visitors to our website. The data is used, among other things, to create video statistics to improve the website's user-friendliness and to prevent potential fraud attempts.
Further data processing transactions may occur after you start playing a YouTube video, which is beyond our control.
The use of YouTube is based on our interest in presenting online content in an appealing manner. This is in accordance with Article 6(1)(f) of the GDPR, which states a legitimate interest. Where the required consent has been obtained, the processing is carried out in accordance with Article 6(1)(a) of the GDPR, provided that the consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting). This consent can be revoked at any time.
For more information on how YouTube handles user data, you can see YouTube's privacy policy here: https://policies.google.com/privacy?hl=en.
11.2 Google Maps
We use the Google Maps service on this website. This service is provided by Google Ireland Limited ("Google"), located at Gordon House, Barrow Street, Dublin 4, Ireland.
To use the Google Maps features, your IP address needs to be processed and stored. Usually, this information is transferred to Google's servers in the USA and stored there. We have no control over this data transfer. When Google Maps is activated, Google may also use Google Fonts for a uniform display of fonts. When you open Google Maps, your browser loads the necessary fonts into the cache to display text and fonts correctly.
We use Google Maps to present our online content in an appealing manner and to make it easy for our visitors to find the locations listed on our website. This constitutes a legitimate interest in accordance with Art. 6(1)(f) of the GDPR. Where the required consent has been obtained, the processing is carried out in accordance with Art. 6(1)(a) of the GDPR, provided that the consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting). This consent can be revoked at any time.
You can find details about this here: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en. https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_enFor more information on how user data is handled, please see Google's privacy policy at: https://policies.google.com/privacy?hl=en..
12. Data Security
All personal data you transfer is secured using the trusted SSL (Secure Socket Layer) standard. SSL is a well-known and reliable standard used in online banking, for instance. Signs of a secure SSL connection include "https://" in the browser's address bar and the padlock symbol at the bottom of the browser.
This website uses technical and organizational security measures to ensure that all personal information provided is protected against manipulation, loss, or unauthorized access by third parties. Our security protocols are continuously updated in line with technological developments.
13. Cookies
A cookie is a small file that is stored on your computer, tablet, or smartphone. A cookie is not a program and does not contain harmful processes or viruses. You can decline to consent to the storage of cookies in your browser at any time. (Read more about how to manage cookies at nettvett.no )