Privacy Policy

Why and How We Process Your Personal Data

Hotel Stays

We process your personal data to manage hotel reservations and stays, including check-in, check-out, and payment. The processing may include contact details (name, email address, phone number, address), payment information, reservation ID, and times of arrival and departure. For guests who cancel a reservation, we process only the information necessary to handle the cancellation.

The legal basis for processing this personal data is to fulfill the agreement between you and Støtvig Hotel, to comply with legal obligations (including accounting legislation), and Støtvig Hotel’s legitimate interests in managing cancellations.

We retain your personal data for 5–10 years for completed stays and for 12–15 months in the event of a cancellation.

Restaurant Reservations and Other Activities

When you reserve a table in our restaurants, cafés, or bars, register for activities, or purchase access to the spa area, we process necessary personal data such as contact details, reservation details, and any additional notes (e.g., allergies or special requirements).

The legal basis for this processing is to fulfill the agreement between you and Støtvig Hotel, as well as our legitimate interests in managing cancellations.

We retain your personal data for 5–10 years for completed reservations and for 12–15 months in the event of a cancellation.

Customer Service

We value your feedback and aim to resolve any issues you may experience during your stay at Støtvig Hotel. To assist you with your inquiry, we process your contact details and other information relevant to your request.

The legal basis for this processing is our legitimate interest in maintaining high service quality and providing excellent customer care.

We retain your personal data for 12–15 months.

CCTV Surveillance

We use CCTV surveillance in the hotel’s reception, bar, and pool areas to ensure physical security. This may involve processing images and information about when guests arrive and leave the hotel premises.

The legal basis for this processing is our legitimate interest in maintaining the safety of guests, employees, and property. Video recordings are stored for up to 7 days before being automatically deleted, unless longer storage is required to achieve the purpose of surveillance, for example, in the case of security incidents or suspected criminal activity.

Marketing

We may send you marketing communications based on your consent, such as newsletters, to provide relevant information and help you get the most out of our services.

We process your name, email address, and other details provided when signing up for our newsletter or other marketing communications containing relevant information and updates about our offers and services. We retain your personal data for this purpose as long as your consent remains active.

You may withdraw your consent at any time by unsubscribing from newsletters and marketing communications. You can do this via the unsubscribe link included in our emails or by contacting us at the email address provided at the end of this Privacy Statement.

Cookies

We use cookies to record information about your use of our website and services. This makes it easier for you to navigate our services and allows us to track activities related to your use for analytical, statistical, and marketing purposes. We may also use third-party analytics tools and technologies to track and analyze website data.

The storage of, or access to, information (including personal data) on your device (such as mobile or computer) via cookies takes place based on your consent. The legal basis for our further processing of this information is our legitimate interest in facilitating the delivery and improvement of our websites and services for our guests, customers, and visitors.

If you do not want cookies to be stored, you can change your browser or device settings. You can also delete existing cookies. Each browser or device provides instructions on how to manage cookies and related technologies through its privacy and security settings. If you choose to delete or block cookies, you may experience reduced functionality on our website.

For more information about which cookies we use and/or to manage your consent preferences, click on the cookie icon available on our website.

Støtvig Hotel’s Use of Data Processors

For certain services offered by Støtvig Hotel, we use suppliers to collect and process personal data on our behalf in order to deliver the services you have requested. We have entered into data processing agreements with these suppliers. The supplier may only process personal data in accordance with the terms of the data processing agreement and our instructions.

Transfer of Personal Data Outside the EU/EEA

To provide our services effectively, Støtvig Hotel may need to transfer your personal data to countries outside the EU/EEA (“third countries”) through our data processors, if such processors are located there. We will not transfer personal data to a third country that does not offer adequate protection unless a valid transfer basis is in place.

Information Security

We handle your personal data securely and have established procedures that meet the requirements described in privacy legislation. Our security measures are technical, contractual, and organizational. We regularly assess the security of all key systems used for handling personal data.

We limit access to personal data in our systems to personnel who require access to perform their duties. We have access control mechanisms and routines ensuring that personal data is only available to staff with a legitimate need.

Your Rights

You have several rights regarding our processing of your personal data. If you have questions or wish to exercise your rights, please contact us using the information provided at the end of this Privacy Statement.

• Right of access and information: You have the right to request information about, or access to, your personal data. Some exceptions apply, meaning you may not always receive access to all the data we process.
• Right to object: You have the right to object to our processing of your personal data. This means you can stop or restrict us from using your data. However, this only applies in certain circumstances, and we may continue processing your data if we have legitimate grounds to do so.
• Right to erasure: You have the right to request the deletion of your personal data under certain circumstances. Some data cannot be deleted, for example, where we are legally required to retain it.
• Right to data portability: You may obtain a copy of your personal data in a structured, commonly used, and machine-readable format by contacting us. Where technically feasible, you may also request that the data be transferred directly to another company or processor.
• Right to rectification: You may ask us to correct personal data that you believe is inaccurate or incomplete.
• Right to restriction of processing: You may request that we restrict the processing of your personal data in certain situations.
• Right to withdraw consent: If you have given us consent to process your personal data, you may withdraw this consent at any time.
• Right to lodge a complaint: If you have any complaints regarding our processing of your personal data, you may contact the Norwegian Data Protection Authority (Datatilsynet).

You can read more about your rights in the Data Protection Authority’s guidelines on data subjects’ rights at www.datatilsynet.no.

Contact Information

If you have any questions or comments regarding this Privacy Statement or how Støtvig Hotel processes your personal data, please contact us using the following details:

Address: Larkollveien 801, 1560 Larkollen

Email: resepsjon@stotvighotel.com

Phone: +47 69 23 61 00