Privacy Policy

Last updated: April 2026

ActiveNorth AS (“we”, “us”, “our”) is committed to protecting the privacy of our customers and website visitors. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights under the General Data Protection Regulation (GDPR).

This policy applies to all services offered by ActiveNorth, including dog sledding tours (winter and summer), snowmobile safaris, e-bike rentals, and boat rentals, as well as our website at activenorth.no.

We are a small, family-run business based in Skibotn, Norway. We collect only what we need and nothing more.

1. Who We Are (Data Controller)

ActiveNorth AS is the data controller responsible for your personal data.

  • Company name: ActiveNorth AS
  • Address: Gammelveien 142, Skibotn, Troms, Norway
  • Phone: +47 95 11 50 55
  • Website: https://www.activenorth.no

For any questions about this Privacy Policy or how we handle your data, please contact us at the details above.

2. What Personal Data We Collect

2.1 Booking and reservation data

When you book a tour or activity through our booking system (iTicket, operated by Visit Group), we collect:

  • Full name
  • Email address
  • Phone number
  • Date of birth or age (required for certain tours due to minimum age requirements)
  • Number and ages of participants in your group
  • Payment information (processed securely by our payment provider; we do not store full card details)
  • Booking preferences and any special requests you provide

2.2 Communication data

If you contact us directly via phone or email, we may retain records of that communication to respond to your enquiry and improve our service.

2.3 Website usage data

When you visit activenorth.no, we automatically collect certain technical data through Google Analytics and Google Tag Manager:

  • Pages visited and time spent on each page
  • General geographic location (country/city level, not precise location)
  • Device type, browser, and operating system
  • Referral source (how you found our website)

This data is anonymised and aggregated. We cannot identify you personally from this data.

3. Why We Collect Your Data (Legal Basis)

We rely on the following legal bases under GDPR:

3.1 Performance of a contract

We need your name, contact details, age information, and payment data to process your booking, confirm your reservation, and deliver the activity you have purchased. Without this data, we cannot provide our services.

3.2 Legitimate interests

We use website analytics (Google Analytics) to understand how visitors use our site and to improve the user experience. This is based on our legitimate interest in running an effective website. You can opt out of analytics tracking via your browser settings or a cookie management tool.

3.3 Legal obligation

We may retain certain booking and financial records as required by Norwegian accounting and tax law.

4. How We Use Your Data

We use your personal data only for the following purposes:

  • To process and confirm your booking
  • To send you booking confirmation emails and relevant pre-tour information (automated via iTicket)
  • To contact you if there are changes to your booking, such as weather-related cancellations
  • To verify age eligibility for tours with minimum age requirements
  • To process refunds or handle cancellations
  • To respond to enquiries you send us directly
  • To analyse website traffic and improve our website (via Google Analytics)
  • To comply with legal and accounting obligations

We do not use your personal data for automated decision-making or profiling.

5. Who We Share Your Data With

We do not sell your personal data to third parties. We share your data only with the following service providers who process it on our behalf, under strict data processing agreements:

5.1 iTicket (Visit Group)

Our booking and ticketing system. Visit Group processes booking data on our behalf and sends automated booking confirmation emails to customers. Visit Group is based in Sweden and operates under GDPR. For more information, see their privacy policy at visitgroup.com.

5.2 Google (Analytics and Tag Manager)

We use Google Analytics and Google Tag Manager to understand website usage. Google processes anonymised, aggregated usage data. Google is certified under the EU-U.S. Data Privacy Framework. For more information, see Google’s privacy policy at policies.google.com/privacy.

5.3 Payment processor

Payment card data is processed securely by the payment provider integrated with iTicket. We do not receive or store your full card details.

We do not share your personal data with any other third parties, including marketing companies, data brokers, or other tour operators.

6. How Long We Keep Your Data

We retain your personal data only for as long as necessary:

  • Booking records: retained for 5 years to comply with Norwegian accounting law (Bokforingsloven)
  • Communication records (emails, phone enquiries): retained for up to 2 years
  • Website analytics data: retained for 26 months by Google Analytics (standard setting)

After the applicable retention period, your data is securely deleted or anonymised.

7. Cookies and Tracking

Our website uses cookies and similar tracking technologies through Google Analytics and Google Tag Manager. Cookies are small files stored on your device that help us understand how visitors use our site.

7.1 Types of cookies we use

  • Analytics cookies: Collect anonymised data about how visitors use our website (Google Analytics)
  • Tag management: Google Tag Manager coordinates which tracking scripts run on our site

7.2 Your cookie choices

You can control or disable cookies through your browser settings. You can also opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on, available at tools.google.com/dlpage/gaoptout.

Disabling analytics cookies does not affect your ability to browse our website or make a booking.

8. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights:

  • Right of access: You can request a copy of the personal data we hold about you.
  • Right to rectification: You can ask us to correct inaccurate or incomplete data.
  • Right to erasure: You can ask us to delete your personal data, subject to our legal obligations (e.g. accounting records we must retain).
  • Right to restriction: You can ask us to restrict how we process your data in certain circumstances.
  • Right to data portability: You can request your data in a structured, machine-readable format.
  • Right to object: You can object to processing based on legitimate interests (e.g. analytics).
  • Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, please contact us at +47 95 11 50 55 or via the contact details in Section 1. We will respond within 30 days.

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) at datatilsynet.no.

9. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These include:

  • Encrypted connections (HTTPS) on our website
  • Secure, password-protected access to our booking system
  • Limited access to personal data, restricted to those who need it to perform their duties

No method of transmission over the internet is 100% secure. However, we are committed to protecting your data to the best of our ability.

10. International Data Transfers

Google Analytics and iTicket (Visit Group) may process data outside Norway. Both providers operate under appropriate GDPR safeguards, including the EU-U.S. Data Privacy Framework and standard contractual clauses approved by the European Commission.

11. Children’s Privacy

Many of our tours are family-friendly and welcome children. We collect age or date of birth information only to verify eligibility for certain activities and to ensure the safety of young participants.

We do not knowingly collect personal data directly from children under the age of 16 without parental consent. Bookings for children must be made by a parent or legal guardian.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or best practices. When we make significant changes, we will update the “Last updated” date at the top of this page.

We encourage you to review this policy periodically. Continued use of our website or services after any changes constitutes acceptance of the updated policy.

13. Contact Us

ActiveNorth AS

  • Address: Gammelveien 142, Skibotn, Troms, Norway
  • Phone: +47 95 11 50 55
  • Website: activenorth.no

ActiveNorth AS  |  Skibotn, Norway  |  activenorth.no