Privacy policy

Last updated: 16.10.2025

This Privacy Policy explains how we process personal data when you visit ekstremsportveko.com. We take privacy seriously and process your data in accordance with the General Data Protection Regulation (GDPR) and Norwegian law.

1. Data Controller

STIFTINGA EKSTREME VOSS
Address: Vangsgata 45, 5700 Voss

We are responsible for the processing of personal data on this website.

2. What data do we collect?

a) Technical data (automatic)

When you visit our website, certain technical information is collected automatically, such as:

IP address (anonymized if possible)

Browser type and version

Device type (mobile, tablet, desktop)

Operating system

Pages visited and time of visit

Referring URL (e.g. Google, social media)

b) Analytics (Google Analytics via Google Tag Manager)

We use analytics tools to understand how visitors use the site. The data is aggregated and used to improve content and user experience.

c) Marketing / social media (if enabled)

We may use pixels (e.g. Facebook or Snapchat) to measure campaigns and deliver relevant ads.

d) Embedded content (e.g. YouTube)

If you interact with embedded third-party content, they may collect data according to their own privacy policies.

e) Booking (external system)

Bookings are handled via a third-party provider on a separate subdomain.
This provider handles personal data independently and has its own privacy policy.
We have data processing agreements in place if required.

3. Purpose of processing

We process personal data to:

Operate and maintain the website

Improve functionality and user experience

Analyze traffic and statistics

Perform marketing (with consent)

Ensure security and prevent misuse

4. Legal basis (GDPR)

We rely on the following legal grounds:

Legitimate interest (Art. 6(1)(f))

Website operation and security

Statistics (anonymized / aggregated)

Consent (Art. 6(1)(a))

Use of non-essential cookies (analytics/marketing)

Embedded third-party content

If we later offer contact forms, newsletters or user accounts, we will state the relevant legal basis (consent or contract).

5. Storage period

We keep personal data only as long as necessary for the specified purpose.
Analytics data may be stored for up to 26 months (default) or less depending on configuration.

6. Sharing of personal data

We do not disclose personal data to third parties unless:

Necessary for website operation (e.g. hosting provider)

Through analytics/marketing tools (Google, Meta, Snapchat)

Required by law (e.g. police or court order)

If data is transferred outside the EU/EEA, we ensure GDPR compliance (e.g. Standard Contractual Clauses).

7. Your rights

Under GDPR, you have the right to:

Access the data we hold about you

Request correction of inaccurate data

Request deletion (“right to be forgotten”)

Restrict processing

Object to processing based on legitimate interest

Withdraw consent at any time

Lodge a complaint with the Data Protection Authority (datatilsynet.no)

To exercise your rights, contact us by email.

8. Security

We apply technical and organizational measures to protect your data from unauthorized access, alteration, or misuse.

9. Booking via third party

Bookings are handled by an external provider on a separate subdomain.
This provider is responsible for the collection and processing of booking-related data.
Please read their privacy policy before completing a booking.

10. Changes to this Privacy Policy

We may update this policy when necessary. The date of the most recent update is shown at the top of this page.

11. Contact

If you have questions about privacy, please contact:

STIFTINGA EKSTREME VOSS
Address: Vangsgata 45, 5700 Voss