Privacy Policy

1. Data We Collect

When you rent a bicycle from us, we collect the following personal information:

• Name (first name and last name)
• Phone number
• Email address
• Address (street, city, postal code, country)
• Digital signature
• Rental history and transaction records

2. Why We Collect This Data

We collect and process your personal data for the following purposes:

• To fulfill the rental agreement and provide our services
• To handle returns and process payments
• To comply with Norwegian accounting and tax regulations
• To communicate with you about your rental
• To ensure safety and security

3. Who Has Access to Your Data

Your personal data is accessed by:

• Flåm Bike Rental / Rallarvegen Bike Rental staff members (for operational purposes)
• IT service providers (hosting, email services) - under strict confidentiality agreements
• Government authorities (when required by law)

We do not sell or share your personal data with third parties for marketing purposes.

4. Data Retention

We retain your personal data for 3 years after your last rental activity, as required by Norwegian accounting and tax regulations. After this period, your data will be securely deleted.

5. Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right to Access: You can request a copy of all personal data we hold about you
• Right to Rectification: You can request correction of inaccurate data
• Right to Erasure: You can request deletion of your personal data (subject to legal obligations)
• Right to Data Portability: You can request your data in a machine-readable format
• Right to Object: You can object to certain types of processing

To exercise these rights, please contact us using the information below or use your pickup code to access our GDPR endpoints.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (HTTPS)
• Secure password hashing
• Access controls and authentication
• Regular security audits
• Audit logging of all data access

7. Contact Information

If you have any questions about this privacy policy or wish to exercise your rights, please contact us:

8. Changes to This Policy

We may update this privacy policy from time to time. The "Last updated" date at the top of this page indicates when changes were made. We encourage you to review this policy periodically.