Privacy Policy – Voss Resort

This privacy policy explains how Voss Resort AS collects and processes personal data on vossresort.no. We place great importance on protecting your privacy and ensure that all processing of personal data complies with Norwegian law and the GDPR.

Personal data is information that can be linked to an individual, such as name, phone number, email address, or IP address.

1. Data Controller

Voss Resort AS, represented by the Managing Director, is the data controller for the processing of personal data on vossresort.no.

Contact information:
Voss Resort AS
Evangervegen 5
5704 Vossevangen
Phone: (+47) 47 00 47 00
Org. no.: 991 371 044

2. Purpose of Data Collection

We collect personal data to:

• deliver services you request (e.g., through contact forms)
• send newsletters and relevant marketing if you actively subscribe
• prevent fraud, misuse, and unwanted incidents
• analyse website usage to improve user experience

Voss Resort uses MarketHype as the service provider for sending and managing newsletters.

3. What Information We Collect

This may include:

• name
• email address
• phone number
• IP address
• usage data (e.g., browser type, pages visited, timestamps)
• cookies

See the separate cookie overview further down.

4. How We Use the Information

Personal data may be used for:

• providing requested services
• sending newsletters (via MarketHype)
• targeted advertising (Google, Facebook, etc.)
• statistics and analysis to improve the website
• security measures and prevention of misuse

5. Data Retention

5.1 Retention for Marketing and Newsletters

For the purpose of sending newsletters and relevant marketing, we retain your contact information for up to 24 months after your most recent purchase or other relevant interaction with Voss Resort. This is based on our legitimate interest in providing previous guests with useful and relevant information, offers, and updates.

If you have actively given consent to receive newsletters, your information will be stored for as long as the consent remains valid. You can withdraw your consent at any time by using the unsubscribe link in our emails or by contacting us directly.

When the period covered by our legitimate interest expires, or if you withdraw your consent, your contact information will be deleted or anonymised, unless it must be stored for a longer period due to other legal obligations (such as accounting regulations).

5.2 Retention Related to Web Analytics

Anonymised data in Google Analytics is stored for 56 months.

6. Who Processes the Information

In addition to Voss Resort AS, the information is processed by approved data processors. These parties process data only according to our instructions.

Our main data processors:

• Google – anonymised and aggregated usage data, web analytics, and advertising
• Facebook (Meta) – anonymised and aggregated data for advertising
• Apility – website operation and underlying systems
• MarketHype – newsletter distribution and management
• Visit Group – operation of the online shop (booking.vossresort.no)

7. Embedded Content

Embedded content from third-party websites (e.g., videos from YouTube) may collect data about you as if you visited the external site directly.

8. Cookies

When you use our website, we store cookies in your browser. These are used for:

• statistics
• operation of booking systems
• security and functionality
• tailoring content and marketing

IP addresses are anonymised before being stored in Google Analytics.

8. Web Analytics

We use Google Analytics for anonymised statistics. Information is stored for 56 months. You can read more about privacy and opting out of tracking via Google.

10. Behaviour-Based Advertising

Voss Resort uses remarketing via Google Ads and Facebook. This allows you to receive ads based on your previous visits to vossresort.no. You may opt out through Google, Facebook, or European advertising networks.

11. Children and Privacy

Our services are not directed toward children under 18 years of age. We do not knowingly collect information from children. Please contact us if you believe we have received such information.

12. Changes to the Privacy Policy

Changes will be published on this page. For significant changes, we may notify you by email or through a visible notice on the website.

13. Legal Basis (GDPR)

Processing of personal data is based on:

• contract (orders, purchases)
• consent (newsletters)
• legal obligation
• legitimate interest (analytics, security, marketing)

14. Your Rights

You have the right to:

• access your data
• rectification
• deletion
• restriction of processing
• data portability
• object to processing
• withdraw consent (e.g., newsletters via MarketHype)

Complaints can be submitted to the Norwegian Data Protection Authority: www.datatilsynet.no/en/