Home / Privacy Policy
Legal · Last updated 1 January 2026Privacy Policy
What we collect, why we collect it, how long we keep it, and how to make us stop.
Home / Privacy Policy
Legal · Last updated 1 January 2026What we collect, why we collect it, how long we keep it, and how to make us stop.
This site, sunnyrosterbrowsng.lat, is published by Nordlys Editorial Media AS, Strandgaten 42, 5013 Bergen, Norway, company number 928 734 115. We are the data controller for personal data processed through this website. You can reach us at [email protected].
| Category | What it includes | Why | Legal basis |
|---|---|---|---|
| Contact form data | Name, email, subject, travel dates, message text | To answer your enquiry | Consent and legitimate interest |
| Consent record | Your cookie choices and the date they were made | To honour your preferences and evidence compliance | Legal obligation |
| Analytics (optional) | Pages viewed, referrer, approximate region, device type | To understand which guides are read | Consent |
| Server logs | IP address, timestamp, requested URL, user agent | Security, abuse prevention, fault diagnosis | Legitimate interest |
We do not collect payment data, we do not operate user accounts, and we do not knowingly collect data from children under 16.
If — and only if — you accept analytics cookies, we record aggregated, anonymised statistics about which pages are read, in what order, and from roughly which country. IP addresses are truncated before storage. The purpose is editorial: knowing that the ferry dispatch is read three times as often as the food guide tells us what to write next. Analytics are disabled entirely for visitors who reject them or who have not yet chosen.
This site uses a small number of strictly necessary items plus optional categories you control. Your choice is stored in your browser's local storage under the key cookieConsent together with the date and the categories you selected. Full detail, including how to change or withdraw your choice, is in the cookie policy.
Three external services can receive technical data when you load a page:
Where any transfer outside the EEA occurs, it is covered by Standard Contractual Clauses or an adequacy decision.
| Data | Retention |
|---|---|
| Contact form correspondence | 24 months from last contact, then deleted |
| Consent record | 12 months, then you are asked again |
| Analytics (aggregated) | 14 months |
| Server logs | 30 days |
Under the GDPR and the Norwegian Personal Data Act you have the right to: access the data we hold about you; have inaccurate data corrected; have data erased; restrict or object to processing; receive your data in a portable format; and withdraw consent at any time without affecting processing already carried out.
To exercise any of these, email [email protected]. We will respond within 30 days. If you are unhappy with our response you may complain to the Norwegian Data Protection Authority (Datatilsynet) or to the supervisory authority in your own country.
The site is served over HTTPS. Access to correspondence is restricted to editorial staff, protected by two-factor authentication. We keep the minimum amount of data for the minimum time, which remains the most effective security measure available to a publication of this size.
If this policy changes materially we will update the date at the top of this page and, where the change affects how consent is handled, re-display the consent banner. The version in force is always the one published here.
Last reviewed: 1 January 2026. Related: Cookie Policy · Terms of Service.