How can we help?

Evenes Apartments AS respects your privacy. This policy explains what data we collect, how we use it, and your rights under Norwegian law (personopplysningsloven) and the EU General Data Protection Regulation (GDPR).

1. Data controller
Evenes Apartments AS, Tjeldsund, Norway, org. nr. [DITT ORG.NR HER], is the data controller for personal data collected through evenesapartments.com and booking.evenesapartments.com. Contact: post@evenesapartments.com.

2. What data we collect
When you book accommodation, we collect: your full name, email address, phone number, address, dates of stay, number of guests, and payment information. Payment details are processed securely by our payment provider — we do not store credit card numbers ourselves. When you sign up for our newsletter, we collect: email address only. When you contact us, we collect: the information you provide in your message.

3. Why we collect this data
We use your data to: process and confirm your booking, send check-in instructions and travel information, comply with Norwegian tax and accounting law (bokføringsloven requires us to keep transaction records for 5 years), respond to inquiries, and send marketing emails — only if you have explicitly opted in to our newsletter.

4. Legal basis
Booking processing: contractual necessity (GDPR Art. 6(1)(b)). Tax and accounting records: legal obligation (GDPR Art. 6(1)(c)). Newsletter: consent (GDPR Art. 6(1)(a)) — you can withdraw consent at any time by clicking unsubscribe.

5. Who we share data with
We share your data only with: our booking system provider (Guesty), our payment processor, our cleaning partners (only your name and dates — not contact details), Norwegian tax authorities (Skatteetaten) when legally required, and from 1 January 2026 the Norwegian DPI reporting regime if applicable. We never sell your data to third parties.

6. Data retention
Booking and payment records: 5 years (legal requirement under bokføringsloven). Newsletter signups: until you unsubscribe. Contact form messages: 2 years, then deleted.

7. Your rights
Under GDPR you have the right to: access the data we hold about you, correct inaccurate data, request deletion (where legally permitted), restrict processing, port your data to another provider, and withdraw consent. To exercise any of these rights, contact info@evenesapartments.com. You also have the right to file a complaint with Datatilsynet (datatilsynet.no).

8. Cookies
Our website uses essential cookies to enable booking functionality and analytics cookies to understand how visitors use the site. You can disable non-essential cookies in your browser settings.

9. Security
We use industry-standard encryption (HTTPS/TLS) and access controls. Our booking system (Guesty) is GDPR-compliant. We will notify affected users and Datatilsynet within 72 hours of any data breach involving personal information.

10. Updates
We may update this policy from time to time. Significant changes will be communicated to existing customers by email.

Last updated: May 2026.