Privacy policy.

Privacy Policy

Last updated: February 24, 2026

Skårungen (“we”, “us”) is committed to protecting your privacy and handling personal data in a transparent and secure way. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, who we share it with, how long we keep it, and what rights you have.

This policy applies to our website, booking flows and communications.

1. Controller and contact details

Data Controller: Skårungen
Email: reception@skaarungen.no
Address: SKÅRUNGEN AS
Organisation number: 918278443

If you have questions about this policy or want to exercise your rights, contact us using the details above.

2. What personal data we collect

We may collect and process the following categories of personal data:

A) Booking and stay information

  • Name, contact details (email, phone), address (if provided)

  • Booking details (dates, room/cabin type, number of guests, preferences)

  • Payment-related information (handled via payment providers; we do not store full card details)

B) Communications

  • Messages you send us by email, phone, contact forms or chat

  • Customer service history related to your booking or stay

C) Website and device information

  • IP address, device identifiers, browser type, operating system

  • Pages visited, clicks, referral source, approximate location (derived from IP)

  • Cookie identifiers and similar tracking technologies (depending on your cookie choices)

D) Marketing preferences

  • Consent status, newsletter subscription status, and your preferences/choices

We do not intentionally collect special category data (sensitive data). If you voluntarily provide such information (for example in a message), we will only use it to handle your request and will minimise what we store.

3. Why we use your data (purposes)

We use personal data for the following purposes:

  1. To manage bookings and deliver our services (reservation management, stay-related communication, guest support)

  2. To communicate with you (answer inquiries, provide customer service)

  3. To operate, secure and improve our website and business (security, fraud prevention, troubleshooting, service improvement)

  4. To comply with legal obligations (accounting, tax, statutory retention)

  5. Marketing and advertising (only where permitted and/or where you consent):

    • Website analytics (GA4)

    • Advertising measurement and optimisation (Google Ads)

    • Remarketing/retargeting (Google Ads, Meta Pixel), depending on your cookie choices

4. Legal bases for processing (GDPR)

We only process personal data when we have a lawful basis, including:

  • Contract: to provide the accommodation/services you request and manage your booking.

  • Legal obligation: where required for accounting, tax, and other statutory duties.

  • Legitimate interests: to run our business (e.g., website security, preventing misuse, improving services), balanced against your rights.

  • Consent: for non-essential cookies (analytics and marketing/advertising) and related tracking technologies, and for certain marketing activities where required.

You can withdraw consent at any time via our cookie settings (see Section 6). Consent withdrawal does not affect processing carried out before withdrawal.

5) Marketing, analytics & advertising (GA4, Google Ads, Meta Pixel)

A) Google Analytics 4 (GA4)

We use GA4 to understand how visitors use our website and to improve performance and user experience. GA4 may process website usage data (events), device information and online identifiers. GA4 is only activated if you consent to analytics cookies via our cookie settings.

B) Google Ads (conversion measurement and remarketing)

We use Google Ads to measure the effectiveness of our advertising (conversion tracking) and, if you consent, to run remarketing/retargeting campaigns to users who have visited our website.

Depending on your choices, Google tags may process online identifiers (cookie IDs), device/browser information, IP address, and website interaction events (e.g., page views, completed bookings).

EEA consent signals / Consent Mode
For users in the EEA/UK/Switzerland, we pass your consent choices to Google so Google tags behave according to your selection (Consent Mode v2 parameters include ad_storage, analytics_storage, ad_user_data, ad_personalization).

C) Meta Pixel (Facebook/Instagram advertising)

We use the Meta Pixel to measure and improve our Meta advertising and, if you consent, to enable remarketing/retargeting on Meta platforms.

Meta requires that you obtain user consent before setting/reading cookies or other trackers for non-essential purposes. We therefore only activate the Meta Pixel when you consent to marketing/advertising cookies.

D) Profiling

If you consent to marketing/advertising cookies, we and our partners may use website interaction data to build audiences and display more relevant ads (remarketing). This may be considered profiling. You can withdraw consent at any time via cookie settings.

5B) Customer lists for advertising (Customer Match)

If you explicitly agree, we may use certain contact details (such as email address and/or phone number) to create “customer lists” with advertising platforms (e.g., Google Ads) to:

  • show relevant offers,

  • exclude existing customers from certain ads, and/or

  • measure campaign performance.

This is done only with your consent, and you can withdraw it at any time by contacting us (Section 1) and/or via the relevant settings where applicable.

6) Cookies & similar technologies (CookieYes)

We use cookies and similar technologies (pixels, tags, scripts). We use CookieYes as our Consent Management Platform (CMP) to collect, store and manage your cookie preferences.

Your choices (consent and withdrawal)

Non-essential cookies (including analytics and marketing/advertising cookies) are only used if you provide valid consent via our cookie banner/settings. You can change or withdraw consent at any time using the “Cookie Settings” option on our website.

Cookie categories

  • Strictly necessary: required for basic functionality and security.

  • Preferences/functional: remember your choices.

  • Analytics: measure website usage (e.g., GA4).

  • Marketing/advertising: advertising measurement and remarketing (Google Ads, Meta Pixel).

Google Consent Mode v2 via CookieYes

We use CookieYes to communicate your consent choices to Google tags (Consent Mode v2) so tags adjust behaviour based on your selection.

Cookie details

A detailed list of cookies (name, provider, purpose, duration, category) is available in our Cookie Settings / Cookie Declaration.

7. Sharing of personal data

We may share personal data with:

  • Service providers (processors) that help us operate our website and services (hosting, booking systems, email tools, analytics).

  • Advertising and measurement partners (Google, Meta) where you consent to marketing/advertising cookies and related technologies.

  • Authorities where required by law.

We do not sell personal data.

8. International transfers

Some providers (e.g., Google and Meta) may process data outside the EEA. Where international transfers occur, we rely on appropriate safeguards (such as Standard Contractual Clauses and any additional measures required) to protect your personal data.

9. Data retention

We keep personal data only as long as necessary for the purposes described in this policy:

  • Booking and accounting data: retained as required by law and for documentation.

  • Customer service communications: retained as needed to handle your case and improve service.

  • Analytics/marketing cookie data: retained according to your consent choices and cookie durations described in our Cookie Declaration.

We apply data minimisation and storage limitation principles.

10. Security

We implement appropriate technical and organisational measures to protect personal data, including access control, secure storage and vendor management.

11. Your rights (GDPR)

Subject to applicable law, you have the right to:

  • access your personal data,

  • request correction,

  • request deletion,

  • restrict processing,

  • object to certain processing,

  • receive a copy of your data (data portability),

  • withdraw consent at any time (where processing is based on consent),

  • and rights related to automated decision-making and profiling.

To exercise your rights, contact us using the details in Section 1.

12. Complaints

f you believe our processing violates data protection law, you can contact us first so we can try to resolve it. You also have the right to lodge a complaint with your supervisory authority (in Norway: Datatilsynet).

13. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website with an updated “Last updated” date.

Contact Us

If you have any questions about this Privacy Policy, You can contact us:

  • By email: reception@skaarungen.no