Privacy Policy

and Cookies

Privacy Policy and Cookies

How we protect your personal data

When you visit hemsedal.com, subscribe to our newsletters or use our services, we want you to feel confident about how your personal data is handled.

This Privacy Policy explains what personal data we collect, why we collect it, who we share it with and what rights you have.

1. Who is responsible for your personal data?

Hemsedal.com is owned and operated by Hemsedal Turisttrafikklag SA (Destination Hemsedal), which is the data controller for personal data processed through our own services.

Contact details

Hemsedal Turisttrafikklag SA
Company registration number: 970 107 711
Høvlerivegen 6, 3560 Hemsedal, Norway
Email: info@hemsedal.com
Phone: +47 32 05 50 30

If you have any questions about privacy or wish to exercise your rights, please contact us by email.

2. What personal data do we collect?

Depending on how you use our website, we may process the following information:

• Your email address when you subscribe to our newsletters.
• Information about your consent to newsletters and cookies.
• Technical information, such as your IP address, browser, device and website usage.
• Information about the pages you visit and how you interact with our content, if you have consented to analytics and marketing tracking.
• Contact and account information for business partners and administrators with access to the website.
• Information you provide when contacting us.

We only collect personal data that is necessary for the relevant purposes.

3. Newsletters and cabin owner newsletters

You can subscribe to newsletters from Destination Hemsedal through hemsedal.com.

We offer a general newsletter featuring inspiration, travel tips and news from Hemsedal, as well as a dedicated newsletter with relevant information for cabin owners.

When you subscribe, we collect your email address and the information needed to document your consent.

We use MakeNewsmail (make.as) to manage subscriptions and distribute our newsletters.

Legal basis: Consent, in accordance with Article 6(1)(a) of the General Data Protection Regulation (GDPR).

You can unsubscribe at any time using the unsubscribe link included in our newsletters or by contacting us directly.

When you unsubscribe, we stop sending newsletters and delete or anonymise personal data that is no longer required. We may retain limited records of consent and unsubscribing where necessary to comply with legal obligations or demonstrate compliance with applicable regulations.

We do not sell our subscriber lists to third parties.

4. Analytics and statistics

We use Google Analytics 4 to understand how hemsedal.com is used and to improve our content and user experience.

This may include information about:

• The number of visits and which pages are viewed.
• How visitors find our website.
• The types of devices and browsers used.
• How visitors navigate our website.

Google Analytics may process technical identifiers and information about website usage.

We only use analytics tracking that requires consent when you have provided valid consent.

Legal basis: Consent, in accordance with Article 6(1)(a) of the GDPR.

5. Advertising and marketing

We use Google Ads and Meta Pixel to measure the effectiveness of our marketing and, where applicable, display relevant advertisements.

If you consent to marketing tracking, these technologies may collect information about your visits to our website and how you interact with our content.

This information may be used to:

• Measure the effectiveness of advertising campaigns.
• Understand which marketing activities generate website visits.
• Create audiences and display relevant advertisements, including remarketing.

Google and Meta may process personal data in accordance with their respective roles, agreements and privacy policies.

Legal basis: Consent, in accordance with Article 6(1)(a) of the GDPR, for tracking and related processing activities based on consent.

You can withdraw your consent at any time through the cookie settings on our website.

6. Login access for business partners and administrators

Hemsedal.com provides login access for authorised business partners and administrators who need to manage information and content on the website.

For this purpose, we may process names, email addresses, account details, access permissions and necessary security information.

The purpose is to manage access, maintain security and ensure the proper operation of the website.

The legal basis depends on the relevant user group and purpose of access. This may include the necessity to fulfil a contract or a documented legitimate interest.

Visitors cannot create personal user accounts on hemsedal.com.

7. When you contact us

If you contact us by email or through other communication channels, we process the information you provide to respond to and follow up on your enquiry.

The legal basis depends on the nature of your enquiry and may include the necessity to fulfil a contract, take steps before entering into a contract or our legitimate interest in responding to enquiries.

We retain this information for as long as necessary to handle your enquiry and comply with any applicable legal obligations.

8. Who do we share your personal data with?

We use external service providers for website operations, analytics, marketing and communication.

These may include:

• MakeNewsmail (make.as) – newsletter subscription management and distribution.
• Google – analytics and advertising through Google Analytics 4 and Google Ads.
• Meta – advertising measurement and marketing through Meta Pixel.
• Cookie Information – cookie consent management.
• Website publishing, hosting and technical service providers.

Where service providers process personal data on our behalf, the processing must be governed by the necessary data processing agreements.

We do not share personal data with third parties without a valid legal basis.

9. Transfers of personal data outside the EEA

Some of our technology providers are international companies.

If personal data is transferred to countries outside the European Economic Area (EEA), the transfer must have a valid legal basis and be protected by appropriate transfer mechanisms and necessary safeguards.

These may include an adequacy decision or the European Commission's Standard Contractual Clauses, where applicable.

10. How long do we retain personal data?

We only retain personal data for as long as necessary for the purpose for which it was collected, or as required by law.

Retention periods vary depending on the type of information:

• Newsletters: For as long as you remain subscribed, with limited retention of necessary records after unsubscribing where applicable.
• Business partner and administrator accounts: For as long as access is required, with any necessary security logs retained for an appropriate period.
• Enquiries: For as long as necessary to handle the enquiry and fulfil relevant obligations.
• Analytics and marketing data: In accordance with the retention periods configured in the relevant services.
• Cookies: In accordance with the retention periods listed in the cookie overview below.

11. Your rights

Under data protection legislation, you have the right to:

• Receive information about how your personal data is processed.
• Request access to the personal data we hold about you.
• Request correction of inaccurate information.
• Request deletion of your personal data when the relevant conditions are met.
• Request restriction of processing in certain circumstances.
• Object to processing based on legitimate interests.
• Receive your personal data in a structured format where the right to data portability applies.
• Withdraw your consent at any time where processing is based on consent.

Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

If you wish to exercise your rights, please contact us at info@hemsedal.com.

You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) if you believe your personal data is being processed unlawfully.

For more information, visit www.datatilsynet.no.

12. Cookies

Hemsedal.com uses cookies and similar technologies to ensure essential website functionality and, with your consent, analyse website traffic and measure marketing activities.

A cookie is a small data file that may be stored in your browser or on your device when you visit a website.

We divide cookies into the following categories:

- Necessary cookies

These cookies support essential website functions, such as security and consent management. Cookies that are strictly necessary to provide a service you have requested may be used without your consent.

- Statistics

These cookies help us understand how visitors use our website so that we can improve our content and functionality. We use services such as Google Analytics 4 for this purpose.

- Marketing

These cookies are used to measure advertising performance and, with your consent, personalise marketing through services such as Google Ads and Meta Pixel.

Non-essential cookies and similar tracking technologies are only used after you have provided valid consent.

Manage your cookie consent

You can choose which categories of cookies you want to allow and change or withdraw your consent at any time.

To update your preferences, scroll to the bottom of hemsedal.com and click "Update cookies". This will open the cookie settings, where you can choose which cookies you want to allow.

You can also delete cookies through your browser settings.

13. Changes to this Privacy Policy

We may update this Privacy Policy when we change our services, technologies or how we process personal data, or when required by applicable legislation.

The latest version will always be available on hemsedal.com.

Last updated: 21.10.2026