Privacy Policy

Lat updated: 02/04/2026

1. Introduction

This Privacy Policy explains how Lofoten Lightscape collects, uses, and protects your personal data when you contact us, make a booking, or participate in our services.

We are committed to handling your data in accordance with the General Data Protection Regulation (GDPR) and applicable Norwegian data protection laws.

2. Data Controller

Lofoten Lightscape
Owner: Ciro Ciriello
Address: Løktoddveien 2, 8392 Sørvågen, Norway
Organization Number: 936 700 357
Email: info@lofotenlightscape.com
Phone: +47 404 58 653

Lofoten Lightscape is the data controller responsible for your personal data.

3. Personal Data We Collect

We may collect the following types of personal data:

3.1 Information You Provide

Full name
Email address
Phone number
Booking details
Payment information (processed via third-party providers)
Health or fitness information (only when relevant to participation)

4. How We Use Your Data

We process your personal data for the following purposes:

To manage bookings and provide services
To communicate with you regarding your reservation
To ensure your safety during activities
To comply with legal obligations
To improve our services
To send marketing communications (if consent is given)

5. Legal Basis for Processing

We process your data under the following legal bases:

Contractual necessity – to fulfill your booking
Legal obligation – to comply with Norwegian laws
Legitimate interest – to improve services and communication
Consent – for marketing and use of images/videos

6. Sharing of Data

We do not sell your personal data.

We may share your data with:

Payment service providers
IT and booking system providers
Authorities if required by law

All third parties are required to handle your data securely and in compliance with GDPR.

7. Data Retention

We retain personal data only as long as necessary:

Booking and transaction data: up to 5 years (legal/accounting requirements in Norway)
Marketing data: until you withdraw consent
Health-related data: deleted after the activity unless required for legal reasons

8. Your Rights (GDPR)

You have the right to:

Access your personal data
Request correction of inaccurate data
Request deletion (“right to be forgotten”)
Restrict processing
Object to processing
Request data portability
Withdraw consent at any time

To exercise your rights, contact: info@lofotenlightscape.com

You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).

9. Photography & Media

During tours, photos and videos may be taken.

These may be used for marketing purposes (website, social media, etc.)
This is based on your consent when booking or participating
You may opt out at any time by informing us in advance

10. Data Security

We take appropriate technical and organizational measures to protect your personal data, including:

Secure communication channels
Restricted access to personal data
Use of trusted service providers

11. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available upon request or on our website.

12. Contact

If you have any questions about this Privacy Policy or how your data is handled, please contact:

Lofoten Lightscape
Email: info@lofotenlightscape.com
Phone: +47 404 58 653