Personvern

Privacy policy for Trysil Skishop Eiendom AS

This privacy policy describes how Trysil Skishop Eiendom AS processes personal data in accordance with the Norwegian Personal Data Act and the GDPR. This is a translation for information. In case of discrepancies, the Norwegian version applies.

Data controller

The data controller is Trysil Skishop Eiendom AS, Vestmovegen 24, NO-2420 Trysil. Email: info@skishop.no. Telephone: +47 91 92 92 91. Company no.: 981 443 489.

Shop goods are sold by Trysil Sportshop AS (company no. 914 141 656) from the same address. Our small shop "Lille Hjørnet" is located in Trysilsenteret, Storvegen 2, 2420 Trysil.

What data we process

• Contact data: name, email, telephone, address and the content of enquiries via forms, chat or email.
• Account and sign-in: email address, verified mobile number, sign-in method (email or Google) and security events.
• Order and payment data: what you have ordered, rental period, delivery or collection point, amount, payment status and receipts. We never store your card number; card payments are handled by Stripe.
• Body measurements for rentals: height, weight, date of birth/age and boot size for those who will use the equipment. This data is used solely to set bindings, dampers and other equipment correctly for safety reasons, and is necessary in order to deliver the rental. The data is transferred to the EasyRent rental system (Wintersteiger) to link the settings to the equipment. Measurements are stored on your profile only if you actively tick the box at checkout, and can be deleted under My page at any time. For participants under 24, height is recorded because binding settings require it.
• Shopping cart stored on your account: when you are signed in, the contents of your cart (items, dates, sizes and quantity) are stored in our database so that the cart follows you across devices. We also store the time you last changed the cart yourself.
• Shopping cart reminders: if you have consented to marketing by email, we may send you up to two reminders per cart, and a maximum of three reminders within 183 days, about items you have left behind. The email contains the items in the cart, the price and an unsubscribe link.
• SMS notifications: your mobile number is used to verify your account and to notify you about orders, collection and delivery.
• Documentation for exceptional cancellations: if we ask for documentation for an exceptional cancellation, for example a medical certificate, we assess it manually. We do not keep a copy and do not record health data – only whether the exception was granted or declined.
• Partner and tour operator customers: for companies and tour operators we process the contact person's name, email and telephone, agreement and signature data, invoicing data, and the names and necessary equipment measurements of the guests who will rent.
• Usage data and cookies: technical information about visits and usage patterns (page views, device, referrers), including optional analytics cookies.

Purposes

• Customer dialogue and delivery: answering enquiries, giving quotes and carrying out agreed services.
• Ordering, payment, delivery and accounting.
• Security: verifying identity and preventing misuse of accounts and orders.
• Communication and marketing: offers, campaigns and shopping cart reminders where consent has been given.
• Operation, security and improvement: statistics, error correction and development of the website.

Legal basis

• Contract or steps prior to a contract (GDPR art. 6(1)(b)): processing necessary to handle enquiries, orders, rentals and payment.
• Legal obligation (art. 6(1)(c)): bookkeeping and retention of sales documentation.
• Legitimate interest (art. 6(1)(f)): operation, security, improvement and reasonable retention of correspondence for follow-up, complaints and legal claims.
• Consent (art. 6(1)(a)): marketing by email and SMS, shopping cart reminders, storing measurements on your profile and optional analytics cookies. Consent may be withdrawn at any time.

• Body measurements linked to rentals: deleted or anonymised no later than 12 months after the rental period, unless you have chosen to store them on your profile. They are then stored until you delete them or your account.
• Shopping carts that are not paid: deleted automatically 90 days after you last changed them yourself.
• Enquiries and customer dialogue: up to 3 years from the last active contact, after which the data is deleted or anonymised.
• Marketing, newsletters and reminders: until consent is withdrawn, or at the latest 3 years after the last interaction.
• Technical logs and security: for as long as necessary for operation and security.
• Statutory data such as accounting records: retained for the applicable statutory periods.

Security

We implement technical and organisational measures to protect personal data against unauthorised access, alteration, loss or disclosure. Sensitive data is stored encrypted, and access is given only to those who need it for their work.

Your rights

You have the right to access, rectification, erasure, restriction, data portability and to object to processing based on legitimate interest. Where processing is based on consent, consent may be withdrawn at any time – for marketing and reminders you do this under My page or via the unsubscribe link in the email. Enquiries are addressed to info@skishop.no.

Deleting your account

When you choose "Delete my user" under My page, we delete everything the website has stored about you: account, profile, stored measurements and people, stored shopping cart, the link between your email address and your customer card in the rental system, consents and stored conversations. Data we are required to keep under the Bookkeeping Act – receipts, payment records and order history – is kept for the statutory period, but name, email, telephone and address are removed from it.

The shop's point of sale and rental system may in addition hold data from earlier rentals that must be retained under accounting rules. You may ask the shop to delete what does not have to be kept: info@skishop.no or +47 91 92 92 91.

If you later create a new account with the same email address, it starts completely blank. No measurements, people, history or pre-filling is taken from the deleted account.

Right to complain

If you believe the processing breaches the rules, you may complain to the Norwegian Data Protection Authority (Datatilsynet).

Contact

Trysil Skishop Eiendom AS, Vestmovegen 24, NO-2420 Trysil. Email: info@skishop.no. Telephone: +47 91 92 92 91. Company no.: 981 443 489.