Privacy Notice

Effective Date: January 1, 2026

1. Who We Are (Data Controller)

This website is operated by Biber Arctic Tours Norway (operating as Face of North), located in Gratangen, Norway. You can contact us at info@faceofnorth.com or by phone at +47 90719512.

2. Scope

This Privacy Notice explains how we collect and use personal data when you:

• visit or browse our website,
• send us a message via the contact form,
• submit a Safari pre-registration (inquiry),
• use cookie/consent settings and similar website preferences.

3. Personal Data We Collect

3.1 Website usage & technical data (server logs / security)

When you access the site, our systems may process technical data necessary for operation and security, such as: IP address (or a pseudonymised identifier), timestamps, requested page, referrer, and basic browser/device information.

3.2 Contact form data

If you use the website contact form, we process the data you provide such as your name, email address, and message content. The contact form on this site posts to a server-side endpoint (e.g., contact.php). :contentReference[oaicite:2]{index=2}

3.3 Safari pre-registration (inquiry) data

If you submit a Safari pre-registration, we process the data you provide including selected experience, preferred date/period, number of guests (and guest names if provided), extras, contact details (email/phone), and your message. The pre-registration form submits to a server-side endpoint (e.g., send_safari_mail.php). :contentReference[oaicite:3]{index=3}

3.4 Preferences (language / consent)

To improve usability, we store certain preferences in your browser, such as your selected language (e.g., using local storage) and your cookie/consent choice (e.g., via a cookie such as cookie_consent).

3.5 Third-party websites and embedded content

Our website may contain:

• Third-party links (e.g., Booking.com). When you click such links, the third party processes data under its own privacy notice. :contentReference[oaicite:4]{index=4}
• Embedded maps (e.g., Google Maps iframe). Interacting with embedded content may allow the provider to collect data (including cookies) under their terms. :contentReference[oaicite:5]{index=5}

4. Cookies and Consent (What We Use and Why)

We use cookies and similar technologies for:

• Necessary: to operate core site functions, including remembering your consent choice.
• Analytics (optional): only if you enable it in the cookie banner/settings, to understand basic site usage (e.g., page visits).
• Marketing (optional): only if you enable it and only if we implement marketing tools in the future.

5. Purposes and Legal Bases (GDPR)

• Site operation, security, and abuse prevention – Legitimate interests (GDPR Art. 6(1)(f)).
• Responding to inquiries (contact form) – Legitimate interests and/or steps prior to contract (Art. 6(1)(f) / 6(1)(b)).
• Handling Safari pre-registrations – steps prior to contract (Art. 6(1)(b)) and legitimate interests (Art. 6(1)(f)).
• Optional analytics/marketing – Consent (Art. 6(1)(a)), only where enabled.

6. Recipients (Who We Share Data With)

We may share personal data with:

• hosting/infrastructure providers (website hosting, security),
• email service providers (to receive and respond to form submissions),
• professional advisers (legal/accounting) where necessary,
• authorities if required by law or to protect rights and users.

We do not sell personal data.

7. International Transfers

We are based in Norway (EEA). Some suppliers may process data outside the EEA. Where this occurs, we apply appropriate safeguards required by GDPR (e.g., adequacy decisions or Standard Contractual Clauses), depending on the provider and location.

8. Retention (How Long We Keep Data)

• Server/security logs: retained for a limited time, typically 30–90 days unless needed longer for security/legal reasons.
• Contact messages: retained as long as needed to handle the request and maintain a reasonable correspondence record.
• Safari pre-registrations: retained during handling and any resulting customer relationship/contract, plus any legally required period (e.g., accounting) and dispute handling.
• Consent/preferences: stored in your browser until expiry or deletion, depending on your settings.

9. Security

We apply reasonable technical and organisational measures to protect personal data. No system is 100% secure; please avoid sending sensitive information via forms unless necessary.

10. Your Rights

Depending on applicable law (including GDPR), you may have the right to access, correct, delete, restrict processing, object to processing based on legitimate interests, request data portability, and withdraw consent at any time.

To exercise your rights, contact info@faceofnorth.com.

11. Complaints

You may lodge a complaint with the competent supervisory authority. In Norway, this is typically the Norwegian Data Protection Authority (Datatilsynet).

12. Children

Our services are not directed to children, and we do not knowingly collect personal data from children without appropriate consent.

13. Changes to This Notice

We may update this Privacy Notice from time to time. The current version is published on this page with an updated effective date.

---