Data Protection
1. Introduction
The protection of your personal data is an important concern for us. This Privacy Policy informs you about how we process your personal data in accordance with the Norwegian Personal Data Protection Act (Personopplysningsloven) and the General Data Protection Regulation (GDPR).
2. Data Controller
The entity responsible for the collection, processing, and use of your personal data is:
BLACOON RETREATS AS
Managing Director: Erik Puzig
Address: Rondanevegen 518, 2670 Otta, Norway
Phone: +47 98 67 12 77
Email: retreats@blacoon.com
Organization Number: 934054806
3.Collection and Processing of Personal Data
We collect and process personal data exclusively within the framework of legal regulations. The categories of data affected include:
Contact details (e.g., name, address, email, phone number)
Payment information (e.g., for orders in the Support Shop)
Usage data (e.g., visited pages, IP address, browser type)
Communication data (e.g., inquiries via email or phone)
4. Purpose of Data Processing
We use your personal data for the following purposes:
- Processing of bookings and payments
- Provision of our accommodation and related services
- Customer and guest communication
- Fulfillment of legal obligations
- Analysis and improvement of our services
5. Legal Basis for Processing
The processing of your personal data is based on the following legal grounds:
Performance of a contract (Art. 6 para. 1 lit. b GDPR)
Fulfillment of legal obligations (Art. 6 para. 1 lit. c GDPR)
Legitimate interest (Art. 6 para. 1 lit. f GDPR)
Consent (Art. 6 para. 1 lit. a GDPR, if required)
6. Disclosure of Data to Third Parties
We only share your personal data with third parties if this is necessary for the performance of a contract or if there is a legal obligation to do so.
Service providers acting on our behalf, such as payment or booking service providers, only receive the data necessary to provide their respective services and are required to comply with applicable data protection regulations.
7. Data Retention and Deletion
Your personal data will only be stored for as long as necessary for the respective processing purposes or as required by applicable legal retention obligations.
After the relevant retention period has expired, the data will be deleted or anonymized.
8. Images and Media
Our website and other online channels may contain photographs or other media showing guests, visitors, partners, employees, events, or other individuals.
If you are identifiable in an image or other media published by us and would like us to review or remove it, please contact us at retreats@blacoon.com and provide sufficient information to identify the relevant content.
We will review your request in accordance with applicable data protection and other legal requirements and, where appropriate, remove the relevant content.
9. Your Rights
Under the GDPR and Norwegian data protection law, you have the following rights:
- Right of access to your personal data (Art. 15 GDPR)
- Right to rectification of inaccurate data (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
To exercise these rights, please contact us using the contact details provided above.
10. Data Security
We implement appropriate technical and organizational security measures to protect your personal data from unauthorized access, loss, or misuse.
Our security measures are regularly reviewed and adapted to technological developments.
11. Changes to the Privacy Policy
We reserve the right to update this Privacy Policy as necessary. The most current version can be found on our website.