1. Introduction

AS PARKS, along with its subsidiaries—including Skimore AS, TryvannWyller AS, Drammen Skisenter AS, Kongsberg Skisenter AS (Skimore Oslo, Skimore Drammen, and Skimore Kongsberg)—is committed to handling your personal data in a safe and secure manner, in accordance with applicable regulations. Below you will find information on how we, as the data controller, process personal data collected from users of the Skimore app, as well as use and rental of our other services: ski rental, ski school, bike rental, climbing parks, etc.

2. What personal data we collect and why
2.1 Registration and Use

When you enter into a membership agreement with us or register to use our services, we collect personal data from you to complete your booking and fulfill our obligations under the agreement. These obligations include providing access to the application, identifying you as a valid member, and contacting you regarding matters related to your membership. This may also include providing correctly fitted rental equipment or the appropriate level of ski school instruction.

The personal data we process in this context includes: name, email, mobile number, profile picture, date of birth, account details, skill level, size, and height.

The legal basis for this processing is GDPR Article 6(1)(b) (contract). Providing your personal data is voluntary, but if we do not receive the necessary information, we may not be able to fulfill the agreement.

If the booking includes minors, we also collect their personal data, provided it is necessary to fulfill the agreement with you. The legal basis for this processing is also GDPR Article 6(1)(b) (contract).

2.2 Activity Tracking

We may also process information about your activity at AS PARKS facilities for purposes such as analysis, targeted advertising, and personalized content. This is done to provide you with a better user experience through the app and for product development. The legal basis for this processing is Article 6(1)(b) (contract), while targeted advertising is also legally grounded in the Marketing Act § 15(3) (existing customer relationship).

We will not process personal data for other marketing purposes unless we have obtained your consent or there is an existing customer relationship in accordance with the Marketing Act.

2.3 Website Visits – Log Data and Cookies

When you visit our services or websites, we collect information sent by your browser, called log data. This log data may include information such as your device’s IP address, geolocation, browser version, which pages of our service you visited, date and time of your visit, time spent on these pages, and other statistics.

Cookies are small files containing data, typically used as an anonymous unique identifier. They are sent to your browser from the website you visit and stored on your device.

Our website uses cookies to collect information and improve your user experience. You can delete cookies in your browser after they are sent to your device. If you choose to reject our cookies, you may miss out on certain features and a full user experience.

Our use of cookies is based on GDPR Article 6(1)(a) (consent).

3. Sharing Personal Data

To complete your booking, we may need to share your personal data with our suppliers and partners. We only share personal data to the extent necessary for them to provide their services to you and us, and they receive only the data required for that purpose.

We may also disclose personal data to other companies within the same group when necessary for internal administrative purposes or to satisfy group-based governance, control, or reporting requirements established by law. The legal basis for this processing is GDPR Article 6(1)(f) (legitimate interest).

We use the following subprocessors and individuals to:

Assist with our services: Google Tag Manager, Google Analytics.

Deliver services and process payments on our behalf: Skidata, NETS.

Provide service-related tasks or help analyze how our service is used or analyze your performance: MailGun, Firebase, Teletopia.

These subprocessors process personal data on our behalf and only in accordance with our instructions. In accordance with GDPR Article 28, data processing agreements have been signed with all recipients of your personal data.

4. How long we store your personal data

We never store personal data longer than necessary to fulfill the membership agreement or other services with you. Personal data that is no longer needed will be permanently anonymized or securely deleted.

When you cancel your Skimore membership, your personal data will be deleted after 2 years or when it is no longer necessary for the purpose for which it was collected.

5. Your Rights

You also have rights regarding how your personal data is used, including:

The right to object to our processing of your personal data. Note that in cases where personal data is required, such objection may prevent you from purchasing or renting the service. The exception is purchasing “Guest Passes” online; in this case, you can buy the pass at the counter without providing personal data.

The right to request deletion of your data or restriction of its use.

The right to request a copy of the information we hold about you.

The right to correct, change, or update information you have provided to us.

The right to contest any automated decision we make about you. An automated decision is one made without human intervention and with legal consequences (e.g., credit checks). We generally do not use automated decision-making, but if we do, we will inform you.

6. How we store your information

Your information is stored in Skimore’s database, as well as with Skidata, Wintersteiger (Easy Rent), and Walthard (Ski School). All our solutions are secured by Cloudflare’s CDN, and all data is stored in Google Cloud, except Wintersteiger and Walthard data, which are stored locally. A limited number of service administrators have access to this data, and all have signed data processing agreements.

7. How to access and control your information

You can access your personal data in the Skimore app under Account -> My Account.

If you have questions about this privacy statement, wish to exercise your rights under Section 5, or have other inquiries, please contact us at personvern@skimoreoslo.no
. You also have the right to file a complaint with a supervisory authority, in Norway the Data Protection Authority, in accordance with GDPR Article 13(2)(d).

Updated 07.05.21