Privacy Policy

1. Who We Are

This privacy policy explains how Hike Oslo collects, uses, and protects your personal data when you use our website (hikeoslo.no) and book our tours.

Data controller: Tanehkamt Travel (trading as Hike Oslo)

Organisation number: 924 548 223

Address: Brochmanns gate 10 B, 0470 Oslo

Email: atlas.contact15@gmail.com

We process personal data in accordance with the General Data Protection Regulation (GDPR) as implemented in Norwegian law through the Personal Data Act (personopplysningsloven).

2. What Data We Collect

We collect the following personal data when you use our website or book a tour:

 

Data

When Collected

Purpose

Name

Booking, contact form, enquiry form

Identify you, communicate about your booking

Email address

Booking, contact form, enquiry form

Send confirmation, tour details, respond to enquiries

Phone number

Booking (if provided)

Contact you about your tour (e.g. weather changes)

Number of participants

Booking

Plan group size and logistics

Payment information

Booking

Process payment (handled by Stripe)

Special requests

Booking or enquiry

Accommodate dietary needs, accessibility, children

IP address and browser data

Website visit

Website functionality

 

We do not collect sensitive personal data (health information, religious beliefs, etc.) unless you voluntarily share it with us — for example, if you inform us of a medical condition that may affect your participation in a tour.

3. Legal Basis for Processing

We process your personal data on the following legal grounds:

Performance of a contract: When you book a tour, we process your data to fulfil the booking, send you confirmation and tour details, and provide the service you paid for.

Legitimate interest: We may use your contact details to respond to enquiries and to improve our services.

Consent: If we send you marketing communications, we will ask for your explicit consent first. You can withdraw consent at any time.

Legal obligation: We retain certain booking and payment records as required by Norwegian accounting law (bokføringsloven).

4. Third-Party Services

We use the following third-party services to operate our website and process bookings:

 

Service

Purpose

Data Shared

Location

Bokun

Booking platform

Name, email, phone, booking details

EU/EEA

Stripe

Payment processing

Payment card details (we never see or store full card numbers)

EU/EEA and US

Google Maps

Embedded maps on tour pages

IP address, location data

US

 

Where data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or an adequacy decision by the European Commission.

5. How Long We Keep Your Data

Booking data: Retained for 5 years after the tour date, as required by Norwegian accounting law.

Contact form enquiries: Retained for up to 12 months after the enquiry is resolved, then deleted.

Marketing consent records: Retained as long as you are subscribed. Deleted within 30 days of unsubscribing.

6. Cookies

Our website uses cookies — small text files stored on your device — for the following purposes:

Essential cookies: Required for the website and booking system to function. These cannot be disabled.

Booking system cookies: Set by Bokun to manage the booking process and shopping cart.

We do not use analytics cookies, advertising cookies, or share cookie data with third parties.

You can manage cookies through your browser settings. Disabling essential cookies may affect the functionality of the booking system.

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

Access: You can request a copy of the personal data we hold about you.

Correction: You can ask us to correct inaccurate or incomplete data.

Deletion: You can ask us to delete your data, unless we are required by law to retain it.

Restriction: You can ask us to restrict the processing of your data in certain circumstances.

Data portability: You can request your data in a structured, commonly used, machine-readable format.

Objection: You can object to processing based on legitimate interest.

Withdraw consent: Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, contact us by email at atlas.contact15@gmail.com. We will respond within 30 days.

8. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Payment data is processed directly by Stripe and is never stored on our servers. Our website uses HTTPS encryption for all data transmission.

9. Children’s Data

We do not knowingly collect personal data from children under the age of 16. Bookings for tours that include children must be made by a parent or guardian. The adult’s contact details are used for all communication.

10. Complaints

If you believe we have handled your personal data incorrectly, you have the right to file a complaint with the Norwegian Data Protection Authority (Datatilsynet):

Website: datatilsynet.no

Email: postkasse@datatilsynet.no

We encourage you to contact us first so we can try to resolve the matter directly.

11. Changes to This Policy

We may update this privacy policy from time to time. The date of the latest update is shown at the top of this page. If we make significant changes, we will notify you by email or through a notice on our website.