Sundvolden's privacy statement

We at Sundvolden Hotel processes your personal data in different contexts, for example when you book the services of us, staying in our hotels, eat in our restaurant, using the services we provide and in certain other contexts. In this privacy statement provides information about how we treatments personal information and contact information if you have any questions or would require disclosure.
We process your personal data in accordance with the at any time applicable Norwegian personal data act (GDPR).

Your security is important for us. It is SUNDVOLDEN Hotel's policy to take care of your privacy when you visit our website, and all of the information we collect via our website, http://www.sundvolden.no and other sites we own and operate.

We just ask for personal information when we truly need it to provide a service. We collect it in a legal and secure ways, with your consent. We let you know why we collect it and how it is used. We retain only collected information for as long as necessary to provide you with the requested service. What data we store, we'll protect within commercially acceptable means to prevent loss and theft, as well as unauthorized access, disclosure, copying, use or modification. We do not share personally identifying information publicly or with third-parties, except when required by law.

Our website may connect to external sites that are not operated by us. Please note that we have no control over the content and practices of these sites, and cannot accept responsibility or liability for their respective privacy policy. You are free to refuse our request for your personal information, with the understanding that we may not be able to provide you with some of your desired services. Your continued use of our website will be regarded as acceptance of our practices around privacy and personal information.

If you have any questions about how we handle user data and personal information, you can contact us or read more on this page.

In this case, has the daily responsibility for Sundvoldens treatments of personal data on the sundvolden.no, unless other is stated below. It is voluntary for those who visit the websites to enter personal data in connection with the services, for example to receive the newsletter. Behandlingsgrunnlaget is the consent of the individual, unless otherwise specified.

Peakend is Sundvoldens data processor, and is our supplier for the development and maintenance of the site. Peakend is our operations contractor for the Sundvolden.no.

Information collected in connection with the operation of the website, are stored on their own servers operated by the contractor. It is only Peakend that has access to the data that is collected. A separate databehandleravtale between Sundvolden and Peakend regulates what information the contractor has access to and how it should be treated.

Web analytics

Sundvolden Hotel collects avidentifiserte information about visitors to Sundvolden.no. The purpose of this is to develop statistics that we use to improve and further develop the informasjonstilbudet on the website. Examples of what the statistics give the answer to, is how many people visit different pages, how long the visit lasts, what websites users come from and what browsers are used.

Information is processed in avidentifisert and aggregated form. With avidentifisert means that we can not track the information we collect back to the individual user. We collect all your IP-address, but the IP address avidentifiseres so that only the first three groups in the address are used to generate statistics. It will say that if the IP address consists of numbers 195.159.103.82, used only 195.159.103.xx. In addition, any IP addresses on an aggregated level, it will say that all the data is merged into a group and not to be treated individually.

We use analyseverktøyeene to Google on our site. Information from this tool not passed from the Sundvolden Hotel to the other actors.

Newsletter

Sundvolden Hotel are sending out newsletters about 1 times per month via e-mail. For that we will be able to send e-mail, you must register an e-mail address. E-mail address is stored in a separate database, not shared with others and deleted when you unsubscribe. E-mail address will also be deleted if we receive feedback that it is not active.

The submission of the form from the website

Meldesystemet makes it possible for individuals/customers and clients to maintain the dialogue or come in contact with the hotel. Sundvolden Hotel won't make any endorsement of the messages that are sent, but use meldesystemet to communicate with customers, to clarify details or receive inquiries from guests.

All information reported to meldesystemet is not published. The information relates to the business as such, and is not personal data, in personopplysningslovens sense. Messages received in the paper size being loaded electronic and follow the same procedure as the other messages.

Sundvoldens meldesystem uses cookies to make it possible for the user to enter message.

E-mail and telephone

Sundvolden Hotel use e-mail and telephone as a part of the daily work in order to fulfill our guests and customers ' wishes and requirements. The department head in the department where the e-mail or phone call is received has the daily responsibility for the processing of personal data in this context. Relevant information arising out of phone calls and email exchange that happens as part of the proceedings.

Sundvolden Hotel's employees use e-mail in the ordinary dialogue with internal and external contacts. The individual is responsible for deleting messages that are no longer relevant, and at least every year to review and delete unnecessary content in the mailbox. In the event of retirement deleted e-mail accounts, but some relevant e-mails will generally be transmitted to the colleagues.

Sensitive personal data should not be sent by e-mail.

We make you aware that regular e-mail is unencrypted. We therefore urge you not to send branded, sensitive or other confidential information via e-mail.

Phone calls (phone number, from and to, as well as the time of the call) is logged in our call centre. This log is necessary for the administration and operation of the system. After a period anonymized external numbers by using the last four digits are deleted. Complete log will be deleted after one year. In addition, the employees an overview of recent calls on their phones. If a phone call is related to a enkeltsak, it could be written a note after the conversation journalføres. There are no other systematic registration of phone calls where the caller can be identified.

History, and not critical, personal information will be stored on customer relationship management.

The processing of personal data relating to the booking and stay

When you book your stay with us, we will process your reservation and order information. This includes information about the room type, hotel, rates and dates for your order. In addition, we process information about the additional services that romoppgraderinger and products you purchase, and any comments you post in the comments about your medical needs or kostholdsmessige requests you have.

This is to be able to fulfill the agreement of the booking and purchase of services. This is the information you have provided to us directly or that you have provided to us via the travel agency or agent.

We treat this information as long as it is necessary to fulfill the agreement of booking with you, and in addition, so long as the applicable laws or myndighetspålegg requires us this.

Lists of seminar participants/overnights

When you sign up for the course, the stored information for use for the booking of accommodation and meals, and to take paid.

Sundvoldens responsibility: Sundvolden Hotel is the controller for the processing of personal data in order to implement the booking of meeting rooms and make and manage attendance from the participants at our customers ' courses. The information should only be used by the Sundvolden Hotel for this purpose.

We use the computer system Opera by Microsoft. In this solution, you can enroll in the course by providing your name, contact information and employer. Mobile number must be registered, along with the address. In addition, we ask you to provide information about optional. allergies and the need for provision. Personal information to manage your registration is stored in a closed system.

Opera's responsibilities: the Opera has arrangements for the processing of personal data in connection with the finances and payments from or to the participants and meeting facilities, accounting and bookkeeping, including storage for bokføringsregelverk. If it comes to the use of personal data, which the Opera is the controller for directed any enquiries concerning the rights for the personal data act of the Opera

The processing of personal data about our suppliers, customers and contacts in the business world

We process information about contacts with our suppliers, customers, partners, participants at our events are aimed at the business sector as well as other persons acting in a business. We do this to be able to work efficiently, to enter into and enforce contracts, conducting our business and develop our business and our professional network. Such information represents typical of the names, contact information, job title, company, competence, business interests and participation in our events for the business community or the former case of interest for us and our employees.

We save such information as long as we consider that the person is a business contact with us. The basis for this is legitimate interest.

Camera

At the entrances and in the public areas at Sundvolden Hotel is the mounted camera. The image of the entrance are shown in real time, and recording is taken up and stored in a week. After 1 week slittes the recording in its entirety automatically. Supplier our our overvåkingstjenester is Hønefoss security company.

Personvernombudsordningen

Sundvolden Hotel manages personvernombudsordningen according to personopplysningsforskriften § 7-12 and it is the manager who has the daily responsibility. The scheme is voluntary and aims to increase the personvernkompetansen in different activities. Sundvoldens the processing of personal data in connection with this scheme is samtykkebasert.

Aneta R. Kosinska is our personvernombud. One of personvernombudets tasks is to assist with the protection of the rights for the information registered with the company. The need, the need to be able to get in contact with personvernombudet.

The principles for the handling of personal data on e-mail and telephone also applies for communication with ombudene.

Information on employees

Sundvolden Hotel the processing of personal data about their employees to manage payroll and personnel responsibility. Legal basis provided by the personal data act, section 8, first paragraph and section 8 a), b) or f) and § 9 (a), b) and f). It is the department heads, the administration has the daily responsibility for this. It recorded the information necessary for the payment of wages, for example, basic data, compensation, time and attendance, tax rate, tax municipality and fagforeningstilhørighet. Other information about the employees is related to the employee's of the company and the facilitation of their work.

Besides, the recorded information in relation to the key management of the in - and utpasseringer and information about the access restriction in the IT system. The information is retrieved from the employees themselves. The information may be disclosed only in connection with the salary and other specific disclosures. Sletterutiner for personalopplysninger follows the Norwegian accounting act and arkivloven. Information about the name, position and work area is considered to be public information and may be published on our website.

Exceptions:

• All stillingssøknader deleted continuously

• All former and current employees have a profile with electronic documents in our online timesystem – Planday.

Other relevant legislation

In addition to the personal data act has, among other things, the following laws meaning for Sundvoldens the processing of personal data.

Arkivloven provides the rules on how arkivskaper shall process and store the supporting documents, as well as handing over to the arkivinstitusjon.

Your rights

You, as a person has more rights after personopplysningsregelverket.

You have the right to require access, correction or deletion of the personal data we process about you. You have a further right to demand limited processing, the right opposition against the treatment and claim the right to dataportabilitet.

If you want access to our processing of your personal data you can send to us by email to sundvolden@sundvolden.no. We will respond to your enquiry to us as soon as possible, and no later than within 30 days.

We are going to ask you to confirm your identity and ask you to provide additional information before we let you make use of your rights against us. We have to do this to make sure that we only provide access to your personal data to you - and not someone pretending to be you.

If you believe that our processing of your personal data does not match what we have described here or that we otherwise violates the data protection law, then you can alternatively complaint to the data Inspectorate in Norway, or the supervisory authority in the country you are staying at a hotel in. You will find information on how to contact the data Inspectorate on Datatilsynets websites www.datatilsynet.no.