Privacy Policy for Gausta
You can read about how we process your personal data and how we protect your personal privacy. If you have any questions about how your information is processed, you are always welcome to contact us.
The EU General Data Protection Regulation (GDPR) becomes enshrined in European law in 2018, and this means that new rules for privacy applies. The new regulations give businesses such as Gausta Ski & Resort AS (“Gausta”) new duties and Gausta Ski & Resort’s customers new rights. Gausta Ski & Resort AS follows these new EU-based regulations.
This policy explains how we treat your personal information, as well as your access permissions, rectification, cancellation, and other data protection rights.
GDPR/Privacy for:
Gausta Ski & Resort AS
Kvitåvatnvegen 372, 3660 Rjukan
891 680 422
1. Personal data collection and use
Gausta processes personal data to bookers, users and customers using Gausta services. Gausta takes care of the users personal data and complies with applicable laws at all times to protect the recipient as a person. Gausta acts as the data controller of personal data in connection with the services and in connection with bookings/reservations.
Personal data means all kinds of information that can be directly or indirectly attributed to a living person. This includes their name, national ID number, address, email address and telephone number. It may also include the likes of booking numbers and IP addresses where these can be linked to individuals.
Gausta’s goal is to maintain a high level of protection for personal information. Personal information will not be sold or otherwise distributed to anyone other than those who need such information in order to implement the agreement including additional services.
2. Why we collect personal data
Gausta primarily uses personal data to manage, operate, develop and maintain benefits, process reservations, optimize the user experience in terms of benefits and adapt our communication with the recipient/booker/guest. Gausta exclusively collects the personal data that is relevant for the purpose for which the customer has ordered.
The purpose of the processing of personal data is to fulfill contractual obligations and also offer a more flexible and individualized service and product.
In making a reservation, Gausta uses personal data to:
- Manage, provide, develop and maintain services.
- Process orders and service requests.
- Contact the guests, for example by SMS, other mobile application or e-mail, or notify guests about reservation status or anything else in connection with the reservation before, during and after their stay.
- Individualize our communication with the guests regarding the services, e.g. by creating a profile for you and sending you offers that match your profile as a user of our services.
- Analyze statistics and user behavior in relation to our services.
- Improve bookers’/guests’ advantages with our products and services in a way that Gausta believes benefits the user.
- Promote services and products, directly or indirectly to the user.
3. What personal data we collect
Data collected in order to manage a booking
When you book a product with Gausta, we collect personal data from you in order to complete your booking. If your booking includes children, we also collect this data for the children in question, provided that this is necessary in order to fulfil the booking.
The following are potential examples of the personal data we collect:
- Identity information, such as your name, national ID number and address.
- Contact information, such as your address and email address.
- Other information about you, such as language or position.
- Booking information, such as your booking number, login information, how long you will be travelling, the destination, and what products you have ordered.
- Information about your purchases, including user history, what you bought, when and where you bought it, how you paid and credit or other payment information.
- Photographs of you, which can only be taken in connection with you buying a season pass in order to ensure that your ski pass is not misused.
- Health information, such as particular allergens, disability, your height, weight and shoe size, for example in order to set up your hire skis, and other information the guests/applicants have provided in connection with the use of our services.
Data collected by personal contact
We also collect personal data when you contact us in order to manage the customer relationship between us. First and foremost, we collect the personal data necessary to be able to answer your question or handle your case.
Data collected on “my pages”
If you register a user account on gausta.com (“my pages” on booking.gausta.com), we collect your email address in order to create your login. You can then manage your data via “my pages”.
Data collected when you subscribe to our newsletter
If you choose to subscribe to our newsletter, we collect your name and email address in order to send you the newsletter.
Data collected when using our digital services
When you use any of our websites, our apps or any other digital service from us, we collect data about your use of the service in question. Some of this data may be personal data, for example your IP address if it can be linked to individuals. We also collect information about how you navigate in the relevant service, what searches you make and which products you are interested in. If you are logged into “my pages” (on booking.gausta.com) or provide information that enables us to identify you, we connect the information about your usage patterns with other information we have collected about you. For more information about the type of data collected in connection with the use of our digital services, see our cookie policy.
Information collected from someone other than yourself
When booking and when in contact with us in relation to various matters, it may happen that a person provides personal data about one or more other guests in a travelling group. We assume that the person providing this data has the consent of all the individuals involved to disclose this personal data. If you have not made a booking yourself, but someone else has made a booking which includes you, we collect personal data about you from that person.
When you provide personal data about other guests, you must make sure that they consent to this and that you have permission to submit the data. If appropriate, you should also make sure that they understand how their personal data may be used by us.
Data collected for editorial purposes and marketing activities
If you choose to participate in a photo session for Gausta or the Gausta sub brands, you may also give Gausta (via the Gausta representative) written permission to use those photos/images for editorial and marketing purposes. The consent is valid for use on both printed and digital channels. The usage will be on, for example, the Gausta Booking and/or our partners’s (e.g. Gausta Skisenter, Gaustablikk Høyfjellshotell, Visit Rjukan, etc.) communication channels, such as web pages and social media, in advertisement, newsletters, brochures and other printed material, as well as publicity photos. Gausta is not obliged to inform me when this participation or publishing will occur. You can choose to give consent for various types of data: your name, photos of you, videos of you, interview statements, and/or contact information. As a guardian, you can also choose to give permission for Gausta to use your child’s personal data (as listed above).
You can contact Gausta any time to recall your consent to the processing of such personal data. Recalling your consent does not affect the legality of processing that has been conducted before the consent was recalled.
4. How we use and store your data
Gausta’s legal basis for processing your personal information
Gausta processes your personal data in accordance with the law. It can happen that the same personal data is processed on the basis of multiple legal bases, such as the performance of a contract, based on a balancing of interests or specific consent from you, or on the basis that the data is necessary in order to comply with other legal obligations. This means that, even if you revoke your consent and processing based on consent ceases, it may still be necessary to save your personal data for other purposes where the personal data is still needed. Primarily, we process your data for the performance of a contract to which you are party, such as a booking.
Administration of your trip
In order to be able to deliver the services and products you have ordered from us (i.e. perform our contract), we use your personal data in various ways. The data is used to produce your booking confirmation and other travel documents, to book your accommodation and make payment for the products you have ordered. Depending on what you have ordered (e.g. ski hire, ski passes, tickets or similar), the data is used accordingly to deliver these products.
Administration of your booking also includes the use of your data for the purposes of accounting, settlement and audit, credit or other payment card verification and customs controls (i.e. satisfying legal obligations).
In order to provide customer service
We use your personal data in order to be able to provide you with service if you contact us with questions, comments or complaints, etc. We use your name and booking number to identify you and your booking. We use your contact information, such as your email address and telephone number, to be able to contact you in connection with questions and issues. We do this in order to be able to fulfil our contract with you and on the basis of our legitimate interest in providing you with good service. We may also use the other personal data we have collected about you to handle your question or your case, as is relevant in the particular case in question.
Sending information
When you have made a reservation with us, we use your personal data to send you a booking confirmation, important information about your upcoming stay and offers related to your chosen product (i.e. in order to perform our contract and on the basis of our legitimate interest in marketing our products and services).
Marketing and personalisation
We would love to send you relevant offers and news about our products and services. Data such as information about your previous purchases, browsing habits and search settings may be used by Gausta in order to contact you by post, email or telephone in a marketing context. In this way, we can tailor our communications so that they are more relevant to you. We may also send you information about products and services from our partners that we believe may be of interest to you.
If you do not want to receive marketing material from us, you may decline it at any time by contact us.
Development of services and customer service
We use the data we collect about our customers to develop and improve our products and services. This applies to our digital services, where we analyse user behaviour in order to develop how we present information and offers and design features.
We predominantly use anonymous or anonymised data on an aggregate level to perform this type of analysis. However, it can happen that we also use the personal data we have collected if relevant. We do this in order to fulfil our contract with you and on the basis of our legitimate interest in improving our services and our customer service.
Legal requirements
Finally, your personal data may also be processed in order to satisfy obligations under laws and regulations, for example regarding security and reporting.
Retention periods
We never save data longer than we need to and only use your personal data for the purposes set out in this policy. After this time, we will safely remove your personal data. The same personal data may be stored in several different places for different purposes. This means that we may delete data from one system when it is no longer needed there, while the same data may continue to be stored in a different system where its purpose is still valid for that specific system. If data is needed after this period for analytical, historical or other legitimate commercial purposes, we will take appropriate steps to anonymise the data so that it no longer constitutes personal data.
The personal data we collect via a booking is stored in our customer database. Personal data is stored as a basis for market and customer analyses, for statistical purposes and in order to provide you with a better booking offer and better customer service. The personal data is also stored in order to enable us to comply with the legal requirements with respect to the supervision in place for package tours and in order to ensure that there is documentation of booking in the event of a complaint. In the event of complaints, some data may be saved in order for us to be able to defend ourselves against legal claims.
If you have registered to receive our newsletter, we will retain the data necessary to administer this until or unless you unsubscribe from the newsletter or notify us that you no longer wish to receive it. You can you opt out of receiving the newsletter at any time via the unsubcribe button in the newsletter.
5. Disclosure of personal data
In order to be able to fulfil the booking you have made with us, we may need to share your personal data with our sub-suppliers and partners. We only share personal data with them to the extent necessary for them to be able to provide their services to you and us, and they only have access to the personal data that is necessary.
Service providers
In order to meet the objectives of our processing of your personal data, we share your personal data with companies that provide services to Gausta, for example in order to manage the dispatch and delivery of your goods. These companies may only process your personal data in accordance with our explicit instructions and must not use your data for their own purposes. They are also required by law and contracts to protect your personal data.
Contractual partners and IT suppliers
We use a number of different IT services and IT systems in our business. Personal data is stored and handled in some of these. We care about your privacy and the security of your data during any such handling. Some systems are installed locally with us and it is only our staff who have access to the data. In these cases, there is no transfer to third parties. Some systems, however, are cloud solutions or installed by the provider, which means that we transfer personal data to the provider. In such cases, the provider is our data processor and handles the data on our behalf and under our instructions.
Web analytics companies
We use external providers for personalisation and analysis of user behaviour on our websites and for user feedback. These companies handle personal data on our behalf as a data processor. The data is primarily collected via cookies and is handled at an anonymous and aggregated level.
Agents and digital partners
When you book a trip with Gausta via a travel agent or website (digital partner) with which we cooperate in the marketing of our trips, it may be that you yourself provide personal data to the travel agency or website. This personal data is the responsibility of and is managed by the operator in question in accordance with its data protection policy.
When you book through an agent, you yourself provide your personal data to the agent and consent to the agent handling that data in its business. The agent can therefore identify you, e.g. with the aid of your booking number. We are not responsible for the agent’s handling of the personal data you have directly provided the travel agency with.
Property brokers
Property brokers have access to the personal data needed to make a booking. This means, as appropriate, the name and age of all travellers on the booking and the telephone number of the orders..
Providers of travel-related services
In order to provide some of the services you have ordered from us, we use sub-suppliers and contractual partners. It is often necessary to provide them with personal data in order for the service in question to be performed.
Within Gausta
Our Privacy Policy applies to all group companies and subsidiaries of Gausta. This means that Gausta Booking AS has the same access to personal data as the specific department you were in contact with locally, but with the restriction that an individual employee can only see such information as is relevant for carrying out their working duties.
Other
If you book other travel-related services through us, such as ski school or other activities, the personal data needed to deliver the service ordered may, where appropriate, be passed on to the party that will perform the service in question. This may involve, for example, data about the names and national ID numbers of all persons on the booking, and contact information for the person who made the booking.
Transfer to a third country
Because we work with agents and partners in multilple countries (e.g Sweden, Norway and Denmark), some of our partners are located within the EU/EEA. This means that personal data may be transferred to partners in these countries for the same purposes as described above.
6. Your rights
Necessary handling of personal data and handling based on consent
Such processing of personal data as is necessary for us to be able to perform a contract with you or to fulfil a legal obligation is permitted without consent. However, your consent to processing is required in order for us to collect and handle your personal data for any other purpose.
Withdrawal of consent
You can choose to withdraw your consent at any time by contacting us via the contact details given below. If you withdraw your consent, we will anonymise the personal data we hold about you, and discontinue any processing on the basis of that consent, e.g. in connection with profiling.
It may be that the same personal data is being processed both on the basis of your consent and on the basis that it is necessary or under other regulations. This means that, even if you revoke your consent and such processing as is based on that consent ceases, it may still be necessary for us to retain your personal data for other purposes.
Right to information about the personal data we have stored about you
In addition to the online access you have to the personal data related to my page or your booking, you also have a right to a copy of the personal data that we hold about you.
Right to control your personal data
You have the right to request that data about you be deleted, supplemented or corrected. You also have the right to request that the processing of your personal data is limited to specific purposes and that it not be used, for example, for direct marketing or profiling.
Cookies
On gausta.com and on the Gausta app we use cookies in order to improve you experience, to gather information for our marketing and in order to develop the web pages. The data is stored anonymously. It can happen that certain personal data is handled by cookies at gausta.com. For such handling of data our cookie policy applies in addition to this privacy policy.
