1. Who we are
This website is operated by Vacation Trysil AS, org. no. 934 304 454 MVA, Liavegen 69B, 2420 Trysil, Norway ("Vacation Trysil", "we", "us"). We are the data controller for personal data processed through this website.
For privacy questions, contact info@vacationtrysil.com.
2. What personal data we collect
When you sign up for Vacation Trysil Friends: your name, email address, language, signup location on the website, and the time, wording and version of your newsletter consent.
- When you make a booking or booking request: name, email, phone number, address, country, dates of stay, number of guests and special requests. Payment-related information is processed by our payment provider; we do not store full card numbers.
- When you contact us or fill in a form: name, email, phone number and message content. For property owners, also property details, address and information you choose to share.
- During your stay: communication by email, WhatsApp or booking platforms, and check-in information needed to give you access to the property, such as door codes sent to you.
- When you visit the website: IP address, browser and device type, pages visited, referring site and cookie data. Analytics is used only with your consent; see section 8.
- Via Airbnb, Booking.com or VRBO: booking details and messages the platform shares with us to fulfil your reservation.
3. Why we use your data and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Handling bookings, payments, check-in and guest service | Performance of a contract (Art. 6(1)(b)) |
| Answering enquiries and contact forms | Legitimate interest / steps prior to a contract (Art. 6(1)(f), 6(1)(b)) |
| Accounting and bookkeeping | Legal obligation (Art. 6(1)(c)) |
| Property owner onboarding and management | Performance of a contract / legitimate interest |
| Website analytics and improvement | Consent (Art. 6(1)(a)) |
| Marketing emails, offers and returning-guest communication | Consent or, where permitted, legitimate interest; you can always opt out |
| Preventing fraud, damage and misuse, and handling claims | Legitimate interest (Art. 6(1)(f)) |
5. International transfers
Some of our providers are located outside the EU/EEA, for example in the USA. Where this happens, transfers are protected by appropriate safeguards, such as the EU–US Data Privacy Framework where applicable or EU Standard Contractual Clauses.
6. How long we keep your data
- Booking and accounting records: as required by law; accounting records in Norway are normally retained for five years.
- Enquiries that did not lead to a booking: up to 12 months.
- Marketing consent: until you withdraw it.
- Website analytics: according to the analytics provider’s retention settings. Contact us for information about the current retention period.
- Protection against repeated form submissions: a hash of the IP address is stored temporarily for up to 60 seconds.
7. Your rights
Under GDPR you have the rights below. To exercise them, email info@vacationtrysil.com. We respond within 30 days. You also have the right to complain to the Norwegian Data Protection Authority, Datatilsynet.
- Access the data we hold about you.
- Correct inaccurate data.
- Request deletion where no legal obligation requires us to keep the data.
- Restrict or object to processing.
- Data portability.
- Withdraw consent at any time.
9. Security
We use appropriate technical and organisational measures to protect your data, including secure connections (HTTPS), access controls and trusted providers.
10. Changes to this policy
We may update this policy. The latest version is always published on this page with the date above.
11. Contact
Vacation Trysil AS
Org. no. 934 304 454 MVA
Liavegen 69B, 2420 Trysil, Norway