1. Who is responsible
Trevarefabrikken with org.nr. 915 541 453 (“Trevarefabrikken” or “we” / “us”) is a company and culture house in Henningsvær, Norway that consists of a hotel, bar, restaurant, café, culture venue, event spaces, yoga and sauna. It’s a meeting place across cultural expressions welcoming people of all ages from all around the world to new experiences in Lofoten.
Trevarefabrikken takes your privacy seriously and it’s important to us that you know what information we process, whether you buy tickets for events, book hotel rooms or sauna, buy products or are employed or hired with us. This privacy statement provides you with information about how we process your personal information and what rights you have.
Trevarefabrikken is responsible for processing and will process your personal data as described in this privacy statement. If you have questions related to our processing or wish to exercise other rights as registered under the Privacy Ordinance (“GDPR”), you can contact us by email email@example.com or mail to Trevarefabrikken AS, Dreyers gate 72, 8312 Henningsvær.
2. Why do we process your personal data - processing basis
Trevarefabrikken processes personal information about you in order to carry out our services, including when you buy tickets, when you book hotel rooms or sauna, when you work with us or buy products from us. We process your personal data in order for us to be able to organize, market and run Trevarefabrikken, and it is the agreement with you that constitutes the processing basis, and which allows us to process your personal data.
If we need information about other things than what’s needed to produce, market and carry out our services, we will only process personal information about you if you consent to this. This may be relevant if you expressly consent to photography, video, film and audio being taken of you during your visit or when you place payments through bookings or other purchases. If you want to subscribe to our newsletter, you can also consent to our processing of data about your name and email address, so that we can send you current news and updates. This might also be the case when you buy tickets or book hotel rooms and sauna through our booking systems.
Trevarefabrikken are also subject to several legal obligations, and we must to a certain extent process personal data on the basis of law. It can be the Accounting Act, the Working Environment Act, the Personal Data Act, the Copyright Act, the Tax Act, the Accounting Act or other relevant laws, regulations or government decisions.
3. Personal information we process
Trevarefabrikken only collects personal information about you that is necessary to organize and carry out our services. When you buy tickets and place bookings for hotel rooms and sauna we process information about name, date of birth, email address, postal address and the country and city you are from, in addition to payment information. During your stay/visit, we may also process personal information in the form of photography, video, film and audio recordings, but only if you expressly consent to this.
For employees, contractors and volunteers, we will be able to process personal data of financial nature in order to fulfill the contract agreed on with you. In connection to this, we will also be able to process contact information, birth number/D number, bank account number, work hours, size of clothes and information about allergies or whether there are other special needs we have to arrange for.
4. How do we take care of your personal information
We will make sure that the processing of your personal data takes place under a secure framework and have a strong focus on security so that personal data is secured against unauthorized access and use.
Only a few employees in Trevarefabrikken have access to the personal information we process about you in connection with the organization and implementation of our services, and we use, for example, encryption if we store or otherwise process your birth number/D number. There are no employees in Trevarefabrikken who have access to the birth number, only administrators working with contracts and payments, and it will only be decrypted if the Tax Administration requests access to personnel lists.
Personal information we process will only be shared with other stakeholders and partners based on an agreement, required by law, or if you have given consent to it.
Information about name and email address that we process in connection with the sending of newsletters and distributing tickets, is stored in a separate database, and is not shared with other stakeholders. You can unsubscribe at any time either from the link in the newsletter, or by contacting us at firstname.lastname@example.org.
To the extent that we use suppliers who process personal data on our behalf, a data processor agreement has been made with such supplier which limits the supplier’s processing to fulfill its obligations with us.
The following data processors are used:
5. How long do we store your personal information?
We store information for as long as it is necessary, but only for the purpose for which the personal information was collected. All personal information is reviewed in an annual check. Personal information stored for more than two years without the need for continued treatment, will be anonymized and only be used for internal analysis or be deleted. Contact information is deleted and anonymized in this process.
If you consent to us sending you newsletters, we take care of your name and email address for as long as you have agreed to and delete your personal information after this period. You can withdraw your consent at any time by sending an e-mail to email@example.com
We will also delete personal information about you if you ask us to do so, unless we have a statutory duty or other reasons to store the personal information further.
6. Your right
You have the right to know what personal information we process about you, and you can request to access your personal information. If you find that the personal information we have is incorrect, you can ask to get your personal data corrected. You also have the right to demand that we delete your personal information when we no longer need it, and we have no other basis for retaining this information.
If you have questions about this statement, your personal information or believe that we process your personal information illegally, you can contact us by sending an e-mail to firstname.lastname@example.org. If you believe the information and our processing is illegal, you can complain to the Norwegian Data Protection Authorities.
Trevarefabrikken uses the following cookies:
Used by Google Analytics to differentiate users.
Expires: 24 hours
Used by Google Analytics to differentiate users.
Expires: 2 years