Privacy Policy

Data controllers

We process personal data when you rent a bicycle from us. The data controller depends on where you rent:

Flåm Bike Rental — rentals in Flåm and related Flåm Bike Rental locations. Email: mail@flambikerental.com. Website: https://flambikerental.com

Haugastøl Turistsenter AS — rentals at Haugastøl and Finse (Rallarvegen). Email: mail@haugastol.no. Website: https://haugastol.no

In this policy, we refer to both as “we” when describing how customer data is processed.

Who this policy is for

This privacy policy applies to you as a customer or guest who rents a bicycle, signs a rental agreement/waiver digitally, or contacts us about a rental.

It does not cover internal staff accounts or staff operational tools. Employee data is handled under separate internal rules.

Data we collect

• Name, phone number, and email address
• Address (street, postal code, city, country) when required for the agreement
• Digital signature on the rental agreement/waiver
• Rental details: bikes, dates/times, pickup and return location, price and payment information where applicable
• Booking reference and pickup details from Sharefox when you rent via pre-booking with Haugastøl Turistsenter AS (Haugastøl/Finse)
• Communications with us related to your rental

Why we process your data

• Enter into and perform the rental agreement
• Carry out pickup, return, and applicable charges (e.g. late fees where relevant)
• Send contract, receipt, and necessary rental information
• Comply with Norwegian accounting and bookkeeping requirements
• Maintain safety, quality, and customer service
• Handle enquiries and complaints

Legal basis

• Contract — to provide the rental service you requested or agreed to
• Legal obligation — especially accounting and bookkeeping rules
• Legitimate interest — limited operations, security, and troubleshooting where this does not override your interests
• Consent — where we ask explicitly (e.g. optional communication beyond what the contract requires)

Who has access

We do not share data with third parties for marketing. We may share data with:

• Authorised staff at Flåm Bike Rental or Haugastøl Turistsenter AS who need the data to perform the rental
• Sharefox — booking system for pre-bookings (Haugastøl/Finse). We read booking information; we do not write customer data back to Sharefox from our system
• Postmark — transactional email (contract, receipt, etc.)
• DigitalOcean — API and database hosting for rental data
• Vercel — hosting of digital waiver pages and this privacy policy
• Public authorities when required by law

Retention

We retain personal data as long as necessary for the purposes above, typically up to 3 years after your last rental activity, in line with Norwegian accounting rules. Data is then deleted or anonymised unless longer retention is required by law.

Your rights

Under the GDPR you may have the right to access, rectify, erase, restrict, port, or object to certain processing, within legal limits.

Contact mail@flambikerental.com (Flåm) or mail@haugastol.no (Haugastøl/Finse). You may also lodge a complaint with your supervisory authority.

Security

• Encryption in transit (HTTPS/TLS)
• Access controls and logging of sensitive system actions
• Infrastructure operated by established providers

Cookies

The waiver site may use essential technical storage/cookies required for the form to work. We do not use third-party advertising or cross-site tracking cookies on customer-facing pages.

Changes

We may update this policy. The new version will be published here with an updated date.

Contact

Flåm Bike Rental — mail@flambikerental.com — https://flambikerental.com

Haugastøl Turistsenter AS (Haugastøl & Finse) — mail@haugastol.no — https://haugastol.no

Haugastølvegen 200, 3595 Haugastøl, Norway. Phone: +47 32 22 31 11