Privacy Policy

Last updated: March 7, 2026

1. Introduction

Oslo Sea Experience AS (org. nr. pending) operates the website seaexperience.no. We respect your privacy and are committed to protecting your personal data in accordance with the Norwegian Personal Data Act (Personopplysningsloven) and the EU General Data Protection Regulation (GDPR). This policy explains what data we collect, how we use it, and your rights.

2. Data controller

Oslo Sea Experience is the data controller for personal data collected through this website. Contact us at oslo@seaexperience.no or Tjuvholmen allé, Oslo 0252, Norway.

3. Data we collect

We collect the following categories of personal data:

• Identity & contact data: Name, email address, phone number — when you fill out a booking or contact form.
• Booking data: Tour preferences, dates, group size, dietary requirements — when you make a booking through our partner Bokun (see Section 6).
• Payment data: Payment is processed by Bokun and their payment provider. We do not store credit card details on our servers.
• Technical data: IP address, browser type and version, device type, operating system, referring URL, pages visited, and time spent on pages — collected automatically via cookies and analytics tools (see Section 5).

4. How we use your data

We use your personal data for the following purposes:

• To process and confirm your booking (contractual necessity).
• To respond to your inquiries via the contact form or email (legitimate interest).
• To send you booking confirmations and tour-related communications (contractual necessity).
• To improve our website and services through analytics (legitimate interest, with consent for non-essential cookies).
• To show you relevant advertising on other platforms, if you consent to marketing cookies (consent).

5. Cookies and tracking technologies

We use a consent banner that lets you choose which cookies to accept. We use the following tracking technologies:

• Google Analytics 4 (GA4) — measures website traffic and user behaviour. Uses Google Consent Mode v2, meaning no data is collected until you accept analytics cookies. Data is processed by Google LLC.
• Meta Pixel (Facebook) — tracks conversions from our advertising on Facebook and Instagram. Only activated if you accept marketing cookies. Data is processed by Meta Platforms Inc.
• LinkedIn Insight Tag — measures the effectiveness of our LinkedIn advertising. Only activated if you accept marketing cookies. Data is processed by LinkedIn Corporation.

You can withdraw your cookie consent at any time by clearing your browser cookies and revisiting the site, which will trigger the consent banner again.

6. Third-party data processors

We share your data with the following third parties, who process it on our behalf:

• Bokun (TripAdvisor / Viator) — our booking platform. Processes booking and payment data. Privacy policy: bokun.io/privacy.
• Resend — our email delivery service. Processes name and email when you submit a contact form. Privacy policy: resend.com/legal/privacy-policy.
• Vercel — hosts our website. May process technical data (IP addresses, request logs). Privacy policy: vercel.com/legal/privacy-policy.
• Google, Meta, LinkedIn — analytics and advertising as described in Section 5.

7. Data retention

We retain your personal data only as long as necessary for the purposes described above. Booking data is retained for the duration required by Norwegian accounting law (5 years). Contact form inquiries are retained for up to 12 months. Analytics data is anonymised after 14 months (GA4 default).

8. Your rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict processing of your data.
• Data portability — receive your data in a machine-readable format.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) at datatilsynet.no.

To exercise any of these rights, contact us at oslo@seaexperience.no.

9. Data security

We use HTTPS encryption on all pages, host on Vercel's secure infrastructure, and limit access to personal data to authorised personnel only. Payment data is handled entirely by our booking platform's PCI-compliant payment processors.

10. Contact

If you have questions about this privacy policy or want to exercise your rights, contact us at:

Email: oslo@seaexperience.no

Phone: +47 917 17 154

Address: Tjuvholmen allé, Oslo 0252, Norway