This Privacy Policy applies to our customers, guests and visitors to our website.
Støtvig Hotel and associated entities ("Støtvig Hotel" or the "Company") are the data controller for the personal data that is processed. The Data Controller is responsible for ensuring that your personal data is processed in accordance with applicable data protection requirements and internal policies/procedures.
The purpose of the privacy policy is to inform you about what personal data Støtvig Hotell processes about you and your rights related to this.
Why and how we process your personal data
Hotel stays
We process your personal data to manage hotel reservations and stays, including check-in and check-out and payment. The processing may include contact details (name, email address, telephone number, address), payment information, reservation ID, and arrival and arrival times. For people who cancel a reservation, only the data necessary to handle the cancellation will be processed.
The legal basis for the processing of this personal data is to fulfil the agreement entered into between you, legal obligations (including the Bookkeeping Act) and Støtvig Hotell's legitimate interests in administering cancellations.
We keep your personal data for 5-10 years for completed stays and for 12-15 months in the event of cancellation.
Restaurant reservations and other activities
When you reserve a table in our restaurants, cafes or bars, sign up for activities, or purchase access to the spa area, we process necessary personal data such as contact details, reservation details and other possible notices (e.g. allergies/special needs).
The legal basis for the processing of this personal data is to fulfil the agreement entered into between you and Støtvig Hotell's legitimate interests in administering cancellations.
We keep your personal data for 5-10 years for completed reservations and for 12-15 months in case of cancellation.
Customer service
We appreciate your feedback and want to resolve any issues you experience during your stay at Støtvig Hotel. In order for us to be able to help you with your inquiry, we process your contact details and other information related to your inquiry.
The legal basis for the processing of this personal data is our legitimate interests in
in ensuring good quality and in providing a good range of services.
We keep your personal data for 12-15 months.
Camera surveillance
We use camera surveillance in the hotel's reception, bar and pool areas to ensure physical security. In this connection, we may process photos and information about when guests arrive and leave the hotel property.
The legal basis for the processing of this personal data is our legitimate interests in maintaining the safety of guests, employees and property. Image recordings are stored for up to 7 days before they are automatically deleted, unless longer storage is necessary to safeguard the purpose of the surveillance, for example in the event of security incidents or suspected violations.
Marketing
We may send you marketing based on your consent, such as newsletters, to provide you with relevant information and help you get the most out of our services.
We process your name, email address and other information provided in connection with signing up for our newsletter and other marketing with relevant information and updates about our offers and services. We will retain your personal data for this purpose for as long as your consent is active. You can withdraw your consent at any time by unsubscribing from newsletters and other marketing. This is done by using the unsubscribe option in the newsletter or by sending an e-mail to the e-mail address we have provided at the bottom of this privacy policy.
Cookies
We use cookies to record information about your use of our websites and services. This makes it easier for you to navigate the Services and allows us to track activities related to your use of our Services for analytics, statistical and marketing purposes. We may also use third-party analytics tools and technologies to track and analyze data from our websites.
Storage of or access to information, including personal data, on your device (mobile, computer and similar) via cookies takes place on the basis of your consent. The legal basis for our further processing of this data is our legitimate interests in facilitating the provision of our websites and services to our guests/customers and visitors, as well as improving these.
If you do not want cookies to be stored, you can change the settings on your browser or device. You can also delete existing cookies. Each browser or device has instructions on how to manage cookies and related technologies through privacy and security settings. If you choose to delete or not accept cookies, you may experience reduced functionality on our websites.
For more information about which cookies we use and/or manage your consents, click on the cookie icon that you will find on our website.
Støtvig Hotel's use of data processors
For certain services that Støtvig Hotell offers, we use suppliers to collect and process personal data on our behalf in order to provide you with the services you have requested. We have entered into data processing agreements with these suppliers. The Provider may only process personal data in accordance with the terms of the Data Processing Agreement and in accordance with our instructions.
Transfer of personal data out of the EU/EEA
In order to provide our services in a satisfactory manner, Støtvig Hotell may be required to transfer your personal data to countries outside the EU/EEA ("third countries") using our data processors, if such data processors are located in third countries. We will not transfer personal data to third countries that do not offer adequate protection, unless a valid transfer basis is in place.
Information security
We handle your personal data in a secure manner and have established procedures that meet the requirements described in the data protection legislation. The security measures are both technical, contractual and organisational. We conduct regular assessments of the security of all central systems used for the handling of personal data.
We limit access to personal data processed in our systems to personnel who need access in order to perform their tasks. We have mechanisms and procedures for access control so that personal data is only accessible to personnel with a legitimate need for such access.
Your rights
You have a number of rights in connection with our processing of your personal data. If you have any questions or wish to exercise your rights, we encourage you to contact us using the contact information included at the bottom of this Privacy Policy.
- Right to information and access: You have the right to ask us for information about or access to your personal data. There are some exceptions, which means that you may not always be able to access all personal data we process.
- Right to object: You have the right to object to us processing your personal data. This means that you can stop or prevent us from using your data. However, it only applies in certain cases, and we may not need to stop processing your personal data if we can provide legitimate grounds to continue using your personal data.
- Right to erasure: You have the right to ask us to delete your personal data in certain circumstances. For example, some information cannot be deleted because we are required by law to keep it.
- Right to disclosure and data portability: You can obtain a copy of your personal data in a structured, commonly used and machine-readable format by contacting us. If technically feasible, in some cases you can request that the personal data be transferred directly to another company or person acting as a data processor.
- Right to rectification: You can ask us to correct personal data that you believe is inaccurate or incorrect. You also have the right to ask us to update personal data that you believe is incomplete.
- Right to restriction of processing: You have the right, under certain circumstances, to ask us to restrict the processing of your information.
- Right to withdraw consent: If you have given us consent to process your personal data and we process the data on this basis, you can withdraw that consent at any time.
- Right to complain: If you have any complaints about our processing of your personal data, you can contact the Norwegian Data Protection Authority. You can read more about your rights in the Norwegian Data Protection Authority's guidelines on data subjects' rights, which are available at www.datatilsynet.no.
Read also:
Guest Privacy Policy
Employee Privacy Policy
Contact information
If you have any questions or comments regarding this privacy policy or about how Støtvig Hotell processes your personal data, you can contact us in the following ways:
Address: Larkollveien 801, 1560 Larkollen
E-mail: resepsjon@stotvighotel.com
Phone: 69 23 61 00