Privacy Policy

1. Who we are

The data controller for this website is:

Privacy questions:info@sbkbase.com

2. Information we collect

2.1 Information you give us

When you use our contact form, we collect:

• Full name
• Email address
• Phone number
• Subject / enquiry type
• Message content

If you email or call us directly, we also process the details you choose to share in that conversation.

2.2 Information collected automatically

When you visit the site, our hosting provider may process technical data such as IP address, browser type, device information, approximate location derived from IP, and request logs needed to deliver and secure the site. We do not run Google Analytics, Ahrefs Analytics, or a cookie consent banner CMP on this site.

2.3 Bookings (Bookspot)

Online bookings are handled by Bookspot, an independent service. If you book through Bookspot, Bookspot collects and processes personal data under its own privacy policy. Seebookspot.io/privacy. We may receive booking-related details from Bookspot as needed to deliver the activity or service you booked.

2.4 Special categories of data

We do not intentionally collect special-category data (such as health, biometric, or precise location history) through the website. Please do not include sensitive information in the contact form unless we have expressly asked for it for a specific booking or safety reason.

3. How we collect information

• Directly from you via the contact form, email, phone, or social channels
• Automatically via our website hosting and security infrastructure
• From Bookspot when you make a booking that relates to our services

4. How we use information

We use personal data to:

• Respond to enquiries and provide customer support
• Send a confirmation that we received your contact form message
• Plan and deliver bookings, courses, shuttles, and events
• Send marketing or news updates about SBK Base (only where allowed — see Legal bases below)
• Operate, secure, and troubleshoot the website
• Comply with legal obligations and defend legal claims

5. Legal bases for processing

Under the GDPR / Norwegian Personal Data Act, we rely on these bases:

• Contract / steps prior to contract— handling booking-related requests and delivering paid services
• Legitimate interests— responding to general website enquiries, securing the site, and basic operational communications, where your rights do not override those interests
• Consent— email marketing / news where consent is required; you can withdraw consent at any time
• Legal obligation— where we must keep records for accounting, tax, or other law

6. Sharing and processors

We share personal data only as needed with:

• Resend— email delivery for contact-form notifications and confirmations (and other emails we send)
• Cloudflare— website hosting, CDN, and security
• Bookspot— independent booking provider (controller of booking data it collects; see their policy linked above)
• Professional advisers or authorities when required by law or to protect our rights

We do not sell your personal data.

7. International transfers

Some providers (for example email or hosting infrastructure) may process data outside Norway / the EEA. Where that happens, we rely on appropriate safeguards such as an adequacy decision or Standard Contractual Clauses, as applicable.

8. How long we keep data

• Contact form messages— until the enquiry is closed, then for 12 months (unless a longer period is needed for an ongoing matter or legal claim)
• Booking records— as needed to deliver the service and meet accounting / legal retention rules
• Marketing lists— until you unsubscribe or withdraw consent, and for a short period afterward to honour suppression requests
• Server / security logs— for a limited period consistent with security and operational needs

9. Your rights

Under GDPR you may have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase data in certain cases
• Restrict or object to certain processing
• Data portability, where applicable
• Withdraw consent where processing is based on consent
• Lodge a complaint withDatatilsynet(Norwegian Data Protection Authority)

To exercise these rights, emailinfo@sbkbase.com. We may need to verify your identity before responding.

10. Cookies and similar technologies

We aim to keep the marketing site free of analytics and advertising cookies. The site may still use strictly necessary technologies for security, load balancing, and basic functionality (including technologies set by Cloudflare). Bookspot may set its own cookies or local storage when you interact with the booking widget; those are governed by Bookspot’s policy.

11. Security

We use reasonable technical and organisational measures to protect personal data, including HTTPS in transit and access controls on systems we operate. No method of transmission or storage is completely secure.

12. Children

This website is not directed at children under 16. We do not knowingly collect personal data from children under 16 via the site. If you believe a child has submitted personal data to us, contactinfo@sbkbase.comand we will delete it where appropriate.

13. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. For material changes we may provide additional notice on the website or by email where appropriate.

14. Contact

SBK BASE AS
Kraftverksvegen 33, 4127 Lysebotn, Norway
Email:info@sbkbase.com