1. Identification of Data Controller
The entity responsible for processing personal data under European Union Regulation (EU) 2016/679 (General Data Protection Regulation or GDPR) and relevant national data protection laws is:
- Legal Entity: Sortscouttempon Nordic AS
- Company Registration Number: 928 412 805 MVA
- Registered Address: Strandgaten 196, 5004 Bergen, Norway
- Data Protection Contact: [email protected]
2. Categories of Data Collected
We believe in minimal data footprint architectures. We do not require registration or account creation to access our fjord guides. We collect data solely in the following defined scenarios:
- Voluntary Form Submissions: When you communicate with us via the contact form on sortscouttempon.com, we collect your name, email address, selected fjord interest category, and message body.
- Server Log Files: In accordance with network security standards, our edge servers automatically record technical connection data, including truncated IP addresses, timestamp, HTTP request headers, browser type, and referring URLs.
- Aggregate Operational Metrics: Where consented, we gather non-identifying telemetry regarding page reading completion rates to evaluate guide readability across mobile devices.
3. Legal Bases for Processing
We process personal information under the following legal frameworks established in Article 6 of the GDPR:
- Consent (Art. 6(1)(a)): Explicit consent granted for non-essential cookies and analytics preferences stored in local client settings.
- Legitimate Interests (Art. 6(1)(f)): Securing our web infrastructure against distributed denial-of-service (DDoS) attempts and responding to user-initiated correspondence.
- Legal Obligations (Art. 6(1)(c)): Compliance with Norwegian statutory bookkeeping, corporate filing, and tax documentation requirements.
4. Third-Party Processors & International Transfers
Sortscouttempon does not sell, trade, or monetize personal information. We partner strictly with infrastructure providers who maintain binding data processing agreements conforming to European standards:
- Hosting & Content Delivery: Cloud hosting facilities deployed within European Economic Area (EEA) zones under strict encryption-at-rest protocols.
- Transactional Email Services: Encrypted SMTP relay processors used exclusively for dispatching direct replies to user inquiries.
5. Retention Durations
Contact correspondence is retained for twenty-four (24) months following resolution to facilitate ongoing itinerary consultation, after which records are permanently purged or aggregated. Server access log files are retained for a rolling window of thirty (30) days for intrusion detection before being overwritten.
6. Individual Rights Under GDPR and CCPA
As an individual user, you possess enforceable rights concerning your personal data:
- Right of Access & Portability: You may request a machine-readable summary of data held regarding your identity.
- Right to Rectification: You may request corrections to inaccurate contact or communication logs.
- Right to Erasure ("Right to be Forgotten"): You may request prompt deletion of correspondence logs subject to statutory recordkeeping requirements.
- Right to Withdraw Consent: You may alter your cookie preferences at any time by triggering the preferences panel on our site or clearing your local browser storage.
- Right to Lodge a Complaint: European residents have the right to lodge a formal complaint with Datatilsynet (the Norwegian Data Protection Authority) or their local supervisory authority.
7. Data Protection Officer
For inquiries regarding data privacy compliance, write to our designated data coordinator at [email protected] referencing "Data Protection Inquiry" in your subject line.