Privacy
Which data we collect, what we use it for and how long we keep it.
Last updated: 15 October 2026
- 01 · Who is responsible
- 02 · Which data we collect
- 03 · Contact and enquiries
- 04 · Booking on this website
- 05 · Booking.com and Airbnb
- 06 · Online check-in
- 07 · Cookies
- 08 · Service providers
- 09 · How long we keep data
- 10 · Your rights
- 11 · Changes
01Who is responsible
DAVVI rents out four chalets on the Ullsfjord in Northern Norway: Tind, Nordlys, Bjørka and Skaret. DAVVI is a brand of:
Sommarbukt Utvikling AS
Stordalstrandvegen 285, 9030 Sjursnes, Norway
[email protected]
Please send any questions about data protection to this address. Norway applies the EU General Data Protection Regulation (GDPR) through the EEA Agreement.
02Which data we collect
We collect personal data when you:
- visit this website,
- send us a message or an enquiry,
- book a chalet here or through Booking.com or Airbnb,
- complete the online check-in before your stay.
Personal data is any information that identifies you, such as your name, email address, date of birth or passport number.
When you visit the website, the server automatically processes technical data such as your IP address, browser type, the pages you open and the time of access. This is needed to deliver the website securely.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, working website).
03Contact and enquiries
If you write to us using the contact form or by email, we use your details to answer you. This usually means your name, email address, travel dates, number of guests, the chalet you are interested in and your message. Your phone number is optional.
The contact form is protected against spam by Google reCAPTCHA. Technical data such as your IP address and browser information is sent to Google for this purpose.
Legal basis: Art. 6(1)(b) GDPR (steps prior to a contract) and Art. 6(1)(f) GDPR (legitimate interest in answering enquiries and preventing spam).
04Booking on this website
Bookings on this website run through the booking system of Lodgify (Lodgify SL, Barcelona, Spain). We process your travel dates, number of guests, contact details and billing details to confirm and manage your booking and to issue your invoice.
Payments are handled by the payment provider connected to the booking system. We do not see or store your full card details.
Lodgify processes this data on our behalf and is contractually bound to protect it. More details are in Lodgify's own privacy policy.
Legal basis: Art. 6(1)(b) GDPR (performance of the rental contract) and Art. 6(1)(c) GDPR (accounting obligations).
05Booking.com and Airbnb
If you book a DAVVI chalet through Booking.com or Airbnb, the platform passes your booking details to us: your name, travel dates, number of guests and the contact details the platform shares. We use them to prepare and carry out your stay. The platforms' own privacy policies apply to the data they collect themselves.
Legal basis: Art. 6(1)(b) GDPR (performance of the rental contract).
06Online check-in
Before you arrive, we ask you to complete an online check-in. We use it to prepare your stay and to meet the guest registration duty under Norwegian law. We ask for:
- full name,
- date of birth,
- nationality,
- home address,
- type and number of your passport or ID card, with an upload of the document,
- expected arrival time,
- phone number.
Why we ask
Accommodation providers in Norway must keep a register of all overnight guests and show it to the police on request. For guests who are not citizens of a Nordic country, this includes passport or ID details.
Passport data is stored securely, is only accessible to authorised persons and is used for no other purpose.
Legal basis: Art. 6(1)(c) GDPR (legal obligation under section 20 of the Norwegian Immigration Regulations, Utlendingsforskriften) and Art. 6(1)(b) GDPR (performance of the rental contract).
07Cookies
This website only uses cookies that are needed for it to work, for example to remember your region and currency or to keep a booking in progress. They are set by the booking system and are always active.
We do not use cookies for statistics or advertising, and we do not build user profiles.
Legal basis: Art. 6(1)(f) GDPR. Strictly necessary cookies do not require consent.
08Service providers
We do not sell data. We only share it with service providers we need to run the website and handle bookings. All of them are contractually bound to protect your data.
| Provider | Purpose | Location | Safeguard |
|---|---|---|---|
| Lodgify | Booking system, chalet management, website hosting, maps on the chalet pages | Spain (EU) | EU law |
| Spam protection (reCAPTCHA), web fonts | Ireland / USA | EU-US Data Privacy Framework, Standard Contractual Clauses | |
| Booking.com, Airbnb | Bookings made on these platforms | Netherlands / Ireland (EU) | EU law |
| Fiken | Invoicing and accounting | Norway (EEA) | GDPR |
For transfers to the USA we rely on the EU-US Data Privacy Framework or on Standard Contractual Clauses of the European Commission.
09How long we keep data
We only keep data for as long as necessary.
| Data | Period |
|---|---|
| Messages and enquiries | Until the matter is settled, then up to 3 years |
| Booking and billing data | Up to 5 years after your stay (Norwegian accounting rules) |
| Check-in and guest register | At least 2 years (Norwegian law) |
| Technical server data | Only as long as needed for secure operation, according to Lodgify's rules |
10Your rights
An email to [email protected] is enough to use any of these rights.
- Access: which data we hold about you, with a copy.
- Rectification: correct wrong or outdated data.
- Erasure: have data deleted, unless we are required to keep it.
- Restriction: have processing paused in certain cases.
- Portability: receive your data in a common format.
- Objection: object to certain processing, including direct marketing.
- Withdrawal: withdraw any consent at any time.
Complaints
You can lodge a complaint with the Norwegian Data Protection Authority, or with the data protection authority in the country where you live:
Datatilsynet
Postboks 458 Sentrum, 0105 Oslo, Norway
www.datatilsynet.no
11Changes
We update this policy when we use new services or the law changes. The date at the top shows the current version.