Privacy policy
Jotunheimen Travel AS safeguards the privacy of its website users and customers. In the following text, we review what types of information we collect and how we treat your personal data. You have the right to ask for your personal data to be erased and/or amended.
Cookie settings
Privacy policy
1. Introductory provisions
The following Privacy Policy will give a detailed overview of how your data is treated on the websites of AS Jotunheimen og Valdresruten Bilselskap (JVB) and its subsidiaries and how we protect your data when visiting these websites.
This Privacy Policy informs the user of the following website (including subpages) about the type, scope, and purpose of collection and use of personal data at www.jvb.no and www.jotunheimentravel.com.
2. Responsible
This is the single point of contact according to Art. 26 GDPR for your data protection concerns within the scope of this privacy statement:
AS Jotunheimen og Valdresruten Bilselskap
Jernbanevegen 7, 2900 Fagernes
Phone: +47 61365900
Data protection officer: Helge Kvame
3. General
The operators of these pages take the protection of your personal data very seriously. We always treat your personal data confidentially and in accordance with the currently valid data protection regulations and this privacy policy statement.
Personal data (e.g., name, e-mail address, telephone number, IP address) are processed and transmitted by the operator only in a lawful manner – in particular for fulfilling contractual obligations, based on the predominant legitimate interests of the operator or the basis of the user’s consent. The legal basis for each processing operation is specified separately in each case.
Regardless of the below-mentioned deletion details for all individual data processing methods, deletion is omitted to the extent that the use of personal data for other lawful processing (e.g., self-promotion) is allowed in accordance with this privacy policy.
4. Website presentation, data security, SSL encryption
The operator saves the following data every time a user accesses this website: website accessed, file requested, exact date/time, amount of data transferred, notification of successful retrieval, browser type/version, operating system, previously visited page, and IP address.
Data collected serve to ensure a trouble-free operation of our website, further improvement of our offer, statistical evaluations as well as protection against and documentation of cyber-attacks, etc. The website operator reserves the right to check the server log files at a later time in case there is any evidence of illegal use.
These data processing actions take place based on a predominantly legitimate interest (Art. 6 (1) (f) GDPR) of the website operators. The purpose of data processing is to provide the website efficiently and safely and to avert current or potential threats. The user’s IP address will be deleted 1 month after the last visit to the respective website.
Additionally, also cookies are used when visiting our websites (see point 11. Cookies).
The operators of the websites set up proper technical and organizational measures to ensure the security of your data.
iSky AS is the supplier of maintenance of the website and processor of personal data on www.jvb.not and www.jotunheimentravel.com.
For this purpose, the website operators use SSL encryption – among other measures. All data that you will transmit to these websites – in the course of inquiries or logins – cannot be read by third parties thanks to SSL encryption. You recognize such encrypted connections due to the URL prefix “https://” in the page link of your browser’s address bar. Unencrypted pages are identified by “http://”.
However, we would like to point out that data transmission via the Internet (e.g., in the case of communication by e-mail) can always have security gaps. The complete protection of your transmitted data against unauthorized access by third parties is not possible.
5. Inquiry/Contact Form
When contacting the operator via our inquiry/contact form, the following user information is processed in order to manage the request and to answer any follow-up questions that might arise: salutation, first and last name, e-mail address, telephone number, address, postal code, and country. In addition, other specified data concerning the request (e.g., period of stay, type of accommodation, activity, package) is processed as well. All collected personal data will be deleted by the operator within 12 months after the completion of the request’s processing.
If you voluntarily provide us with “sensitive” (special categories of personal data within the meaning of Art. 9 GDPR) data (e.g., existing allergies or your religious confession), this will only be done on the basis of your explicit consent to data processing for the purpose of handling your request. This consent can be revoked at any time by sending a message to JVB ([email protected]).
Personal data disclosed by the user will only be processed by the operator to the extent required for the processing of the current request and/or the provision of the requested service. According to Art. 6 (1) lit. b GDPR, these data processing operations are necessary to fulfill the contract or to carry out pre-contractual measures.
If there is a legal or regulatory obligation, data will also be transmitted to public authorities (Art. 6 (1) lit. c GDPR).
6. Prize games
When participating in competitions and prize games organized by the websites, the following personal data will be collected: salutation, first and last name, e-mail address, address, telephone number, country, and date of birth.
These data are processed by the respective operators for the administration and processing of the prize game (in particular for the assignment of prize game participation requests and for the determination and notification of winners). They are stored for the duration of the prize game and – for processing any profit and damage claims that might arise – for a maximum of 40 months thereafter before they are deleted.
In the event of a winning prize, the participant agrees that she/he will be named and published as the winner and that a photo will be taken when the prize is handed over – which may be used and published by the organizer of the prize draw. This consent to data processing and publication may be revoked by the participant in the prize game at any time prior to notification of the prize by contacting the respective party responsible. A measure that terminates participation in the prize game immediately. The prize game can be carried out only on the basis of the appropriate marketing communication between the competition and the winner; For this reason, the participant in the prize game accepts the appropriate data processing measures and publication of his photo, which are mainly in the interest of JVB.
If there is a legal or regulatory obligation, data will also be transmitted to public authorities (Art. 6 (1) lit. c GDPR). If required or helpful for the delivery or order processing, personal data will also partly be forwarded to third-party service providers (e.g. delivery services).
On the basis of a separate consent, marketing-related processing of personal data provided can take place as well. In this case, the participant receives our newsletter and direct marketing measures can take place (see 07. Newsletter and 08. Direct Marketing). You may revoke your consent to the processing of your data for this purpose at any time by sending an e-mail to [email protected].
7. Newsletter
If a user subscribes to the newsletter of the operator, the personal data of the user – salutation, first and last name, and e-mail address – is collected and processed. Afterward, the user regularly receives a personalized e-mail message tailored to his preferences, containing information and current offers of the operator (newsletter). In general, the administration of e-mail marketing is carried out centrally by JVB as part of joint information processing.
By subscribing to the newsletter, the user agrees that personal data may be used for the regular sending of the newsletter in accordance with Art. 6 (1) lit a GDPR.
If you register for the newsletter online, we will store the IP address of the computer system used at the moment of registration as well as the exact date and time of registration. This procedure is necessary to document your consent and thus fulfill the data protection obligations of the party responsible.
Our newsletters use a standard tracking system. Using an embedded tracking pixel, we can detect if and when an e-mail was opened by the user and which links in the email were accessed. This information is evaluated by our experts in order to optimize the delivery of newsletters and to better adapt the content of future newsletters to your favorite interests. These personal details will not be disclosed to third parties.
The user can unsubscribe from the newsletter at any time. At the end of each newsletter, you will find a link that allows the user to unsubscribe from the service. Alternatively, the user can also send a corresponding e-mail to [email protected]. After unsubscribing from the newsletter, the personal data of the user will be deleted immediately from the newsletter system.
8. Direct marketing
In addition to sending out newsletters based on a corresponding consent, the operator reserves the right to process customer data in connection with the sending of offers and information regarding services and offers of the operator by post or by e-mail for own advertising purposes: salutation, first and last name, e-mail address, telephone number, address, country. You can revoke the processing of personal data for this purpose at any time, either when entering your data or by sending an e-mail afterward to [email protected].
9. Sharing of data
We reserve the right to share accumulated, general-demographic data with our partners – this is valid for collection in connection with the use of our offers and services in anonymous form for statistical purposes. Such data doesn’t contain any personally identifiable information.
10. Surveys, Temporary actions
In the course of temporary actions (e.g., guest surveys) personal data is processed by the operator. Participation in these actions is voluntary, therefore the user can decide independently whether he wants to disclose personal information or not. Personal data (such as name, e-mail address, telephone number), demographic data (e.g., postal code, age group), or other data may be affected here.
Data is used to providing the requested service to the website visitors. All personal data collected is used on the basis of our legitimate interest (Art. 6 (1) lit. f GDPR) in order to further improve both our website and our services. As far as possible by taking into account also the respective processing purpose, anonymous or pseudonymized data processing takes place. In this context you have the right to object to the processing of your personal data for reasons that arise from your particular situation; Please contact us by sending an e-mail to [email protected].
11. Cookies
Cookies are pieces of information that are stored by a certain website on the user’s device. The purpose of cookies is to store information and allow access to it at a later time. Cookies cannot be used to read other data on the user’s device. In particular, websites use cookies to restore their previous user preferences, track the history of user inquiries or analyze user behavior exactly.
The use of the website is also possible without cookies. The user can deactivate the storage of cookies in his browser, limit them to certain websites, or set his browser to notify each time a cookie is stored. The user can delete the cookies at any time from his device’s hard disk by adapting the privacy features/settings of his browser. In this case, the functionality and usability of the website may be restricted.
The legal basis of data processing in the context of cookies is formed by the consent of the user via the cookie banner (Art. 6 (1) lit a GDPR). You may revoke your consent to the processing of your data for this purpose at any time by changing the setting of the cookie banner or by sending an e-mail to [email protected].
Below you will find a list of all cookies used on this website:
In addition, cookies are also used through several social media plugins (see 14. Social Media Plugins) as well as web analytics and advertising tools (see 16. Web Analytics and Advertising Tools).
12. Web Analytics and advertising tools
Privacy Policy for the use of Google Analytics
This website uses Google Analytics, a website analysis service provided by Google Inc. (“Google”), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics applies cookies that enable an analysis of how a person uses the website.
All data generated by the cookie about the use of this website (including the user’s IP address) are transmitted to a Google server in the USA and stored there. A specific European Commission “Adequacy Decision” has been made for the transfer of personal data to the USA.
Google will, on behalf of the operator, use all data submitted for the purposes of evaluating the person’s use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. Google may also forward this information to third parties if required to do so by law, or if such third parties process the information on Google’s behalf.
In case of activation of IP anonymization on this website, Google will truncate your IP address within the European Union or in the European Economic Area. Only in exceptional cases the full IP address will be transmitted to a Google server in the USA and truncated there. The IP anonymization is active by default on this website.
The user can refuse the use of cookies within the scope of Google Analytics by selecting the appropriate settings in the browser. In this case, however, the full functionality of this website may not be available. Furthermore, the user can prevent Google’s collection and use of data generated by the cookie and related to the use of the website (including the IP address) by downloading and installing the following browser plugin available at https://tools.google.com/dlpage/gaoptout?hl=en.
For more detailed information on Google Analytics’ terms of use and data protection/privacy please go to http://www.google.com/analytics/terms/gb.html
13. Google remarketing
This website uses Google Remarketing. Google Remarketing is an ad service provided by Google Inc., that targets specific ads to previous visitors of the website.
Third-party vendors, including Google, place ads on websites on the internet. They make use of cookies to place ads based on the user’s previous visits to this website. Users are identified again through cookies that are saved to the web browser. With the help of such cookies, the usage of the website is analyzed in detail and then used for specific product recommendations and interest-based advertising.
If users don’t want to receive interest-based advertising, they can change the settings in the Ads Preferences Manager to deactivate cookies via Google and adjust ads in the Google network by opening the Opt Out page in Google’s ad settings. Alternatively, users can deactivate the use of cookies by third-party vendors by opening the Consumer Opt Out page of the Network Advertising Initiative or by deactivating the use of cookies in the browser.
More detailed information: https://support.google.com/adwords/answer/2453998?hl=en
14. Facebook custom audiences
We use on our webpage functions of Facebook, a social media network of the company Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland.
Which functions (social plug-ins) Facebook is offering, can you read up at https://developers.facebook.com/docs/plugins/.
Via the visit of our webpage information can be transferred to Facebook. In case you have a Facebook account, Facebook can match this data with your account. If you do not wish that, please sign out from Facebook.
The data protection guidelines, which information Facebook collects and how they use them you can be found at https://www.facebook.com/policy.php.
This website uses Facebook Custom Audiences. Facebook Custom Audiences is an advertising service owned by Facebook Inc., 1601 S California Ave, Palo Alto, CA, 94304, USA, that targets specific ads directly to previous visitors of the website.
Facebook uses cookies to post advertisements based on previous visits to this website by the user. The identification of the user is carried out through the use of cookies installed and saved for 90 days on the user’s web browser.
Cookies facilitate the analysis of user behavior during visits to the website and are then used for targeted product recommendations and interest-based advertising.
If users do not wish to receive interest-based advertising on Facebook, they can opt-out here: https://www.facebook.com/settings/?tab=ads
https://www.facebook.com/legal/terms/customaudience
15. Storing and disclosure of personal data
The personal data registered in forms on our websites are not accessible to other visitors to the website. The data is not shared with a third party unless this is necessary to deliver the service that has been booked or if you have consented to this when filling in the form. JVB does not sell your data to third parties.
The data registered in forms on www.jvb.no and www.jotunheimentravel.com is stored by JVB and is not used for purposes other than what the form applies to. The data is not shared with a third party unless this is necessary to deliver the service that has been booked or if you have consented to this when filling in the form.
Data registered in connection with bookings on www.nor-way.no (booking of bus, boat, and snowcoach tickets) will be handled from No-Way. Please check Nor-Way privacy policy about how your data will be processed and for what purpose: https://www.nor-way.no/en/about-us/privacy-policy/.
Data registered in connection with bookings on www.jotunheimentravel.com is stored by Adventure Tech AS in the booking system Bilberry. If you have booked a service provided by a third party (e.g., hotel accommodation or a sightseeing tour), the data will be shared with the relevant service provider. This data will only be used in connection with your booking and for no other purposes. Beyond this, the data is not shared with a third party unless you have consented to this when filling in the form.
16. Searches on the website
Web search queries used on the website are collected and stored in Google Analytics. The purpose of storing these is to be able to use data about what users search for to adapt the content on the web pages and improve the search function. The words/terms used in the web search queries cannot be linked to other data about the user who has performed the search.
17. The data subject’s rights include
- You have the right to demand restriction of the processing.
• You have the right to object to the processing.
• You have the right to data mobility.
• You have the right to complain to the Norwegian Data Protection Authority (DPA).
• You have the right to withdraw your consent at any time.
If you have any questions concerning access to and/or rectification or erasure of personal data, please contact us by e-mail at [email protected].
18. External links
Some pages include links that lead to other websites, e.g., to buy tickets on the events calendar, book a room in a presentation of a hotel, or reserve a table at a restaurant. If this link leads to a website other than jotunheimentravel.com, JVB is not the controller for personal data on the external website. In such cases, the privacy policy of the external website is applicable.
19. Links and embedded external Content (Iframe)
This Privacy Policy doesn’t apply to websites on the Internet that you access via hyperlinks directly from our websites. We assume no liability for the content and the handling of your data by the respective website operators.
Changes to this Privacy Policy
We reserve the right to change this Privacy Policy without prior notice. We, therefore, recommend that you read this statement at regular intervals.
Fagernes, 01.01.2023
Contact details
AS Jotunheimen og Valdresruten Bilselskap, org.no. 945 968 915MVA
Visiting address: Jernbanevegen 7, 2900 Fagernes
Phone: +47 61 36 59 00
E-mail: [email protected]