Privacy policy and GDPR

This privacy policy explains how Visit Østfold AS collects and uses personal data. Our goal is to provide you with an overview of how we process personal data.

The term "website" refers to the entire site at www.visitoestfold.com and [insert correct link to English version here]. "We" or "us" refers to Visit Østfold AS.

Visit Østfold AS is the data controller for the processing of personal data described in this privacy policy. Here, we explain what types of personal data we collect and how we process them.

This privacy policy applies to: [insert correct link to Norwegian version] and [insert correct link to English version].

Personal data we collect and process

We process the following categories of personal data:

Basic information: Name, date of birth
Contact details: Address, phone number, email address
Customer history and engagement: Order and delivery details, shopping cart activity, discount codes, loyalty programme information, active products and agreements, as well as products and services you have previously used, frequency of use, and status of products/services
Customer activity: Browsing and interaction history from our app, website, or electronic communications we send. This also includes technical information about the devices you use
Cookies: See our cookie policy [insert link here]

We store personal data provided in connection with:

Ticket purchases via our website
Requests and bookings related to courses, activities, and events
Other enquiries via electronic channels
Use of cookies on our website
Registration of visitors, customers, suppliers, and partners

Personal data is collected directly from you through the information you provide and through your use of our services and products. In some cases, we may also obtain personal data from other sources, such as:

Address verification services

How we use personal data

Service Delivery & Contract Fulfilment

We use your personal data to fulfil our agreements with you, such as when you have ordered a product or service from us. The legal basis for this processing is that it is necessary to perform a contract with you.

Customer relationship management

We process personal data to manage our customer relationships, including customer service, complaint handling, and troubleshooting. The legal basis for this processing is that it is necessary to perform a contract with you.

Analysis, business development & service improvements

We continuously work to develop and improve our services. This often involves analysing different types of personal data, such as customer activity, purchase history, and profile information. The legal basis for this processing is our legitimate interest in improving our services.

Personalised user experience

We use personal data to customise your user experience and communication based on your customer relationship. The legal basis for this processing is our legitimate interest.

Marketing & sales

We use personal data for marketing our products and services, such as sending you emails. The legal basis for this processing is our legitimate interest. You can opt out of this processing by unsubscribing from our emails.

In some cases, we may also ask for your consent to use your personal data for profiling, which helps us tailor marketing to your interests.

System monitoring & error correction

We monitor our systems for errors and issues, which sometimes involves processing personal data. The legal basis for this processing is our legitimate interest.

Security, fraud prevention & crime detection

We process personal data to protect our users and ourselves against fraud, misuse, and criminal activity. The legal basis for this processing is our legitimate interest.

Who processes your data?

Several companies assist Visit Østfold AS in processing personal data. Under data protection laws, these companies are classified as data processors and process data in accordance with data processing agreements with us. These include:

Google, MailChimp, SurveyMonkey, Mine Event, Vipps, Expo, Logic Interactive, Meta, Hotjar

Cookies & tracking technologies

For more details about how we use cookies, please visit our [cookie policy] (insert link here).

Statistics & analytics

Visit Østfold AS uses Google Analytics to analyse visitor numbers and website traffic. This helps us improve our services by understanding how the website is used.

IP addresses are anonymised before being transmitted to Google Analytics, meaning data cannot be linked to individual users.
Google Analytics uses cookies to collect traffic information in an anonymised format.
The information collected includes page views, visit numbers, referral sources, and browser details.

Traffic data is stored by Google Inc. in an anonymised form. We have activated "Demographics and Interests Reports" in Google Analytics.

You can opt out of this tracking by adjusting your Google Ad Settings.

By using our website, you agree to Google processing your data as described above.

Advertising & third-party tracking

Google Ads

Visit Østfold AS uses Google cookies to deliver relevant advertising and improve user experience.

Facebook advertising

Facebook uses cookies, web beacons, and similar technologies to collect or receive information from our website for targeted advertising.

You can disable cookies in your browser.
You can also opt out of personalised ads on Facebook [insert opt-out link].
Read more about Facebook’s use of cookies [insert link].

SSL encryption

When you visit our website, a secure (SSL-encrypted) session starts automatically. You can verify this by checking for "https" in the URL and a padlock icon in your browser.

Disclaimer

The content on [insert correct link] may contain errors or omissions. Visit Østfold AS makes every effort to prevent this but disclaims any liability for any losses, including financial losses, resulting from such errors.

Visit Østfold AS is not responsible for the content of external websites linked from our site.

Your rights

If you wish to exercise any of your rights, please contact us at info@visitoestfold.no.

Right to access your data

You can request a copy of all personal data we process about you.

Right to rectification

You have the right to request corrections or updates to inaccurate or misleading information.

Right to erasure ("right to be forgotten")

You have the right to request the deletion of your personal data without undue delay.

Right to restrict processing

You may ask us to limit how we process your personal data.