1. Introduction

This privacy policy explains what personal data we process when you use Fribo, why we do it, how the data is stored and what rights you have.

Fribo is the service name of the platform previously known as Hyttetjenester, Brøyte.no and Friio. The three have now been merged into a single solution. The service is operated by Hyttetjenester AS.

2. Data controller

Hyttetjenester AS is the data controller for personal data processed in the Fribo app, the portal and on fribo.no.

3. Data protection officer

Hyttetjenester AS is not required to appoint a data protection officer, cf. Section 11 of the Norwegian Personal Data Act.

If you have questions about privacy or your rights, you can contact us at privacy@hyttetjenester.no. The data controller is bound by a duty of confidentiality.

4. When we collect personal data

We process personal data when:

• you buy snow clearing or other services through the platform
• you are a member of the customer club
• you create a user account
• you use the app, the portal or the website
• you contact us
• you apply for a job
• you are a journalist and get in touch

We may also receive information from suppliers where this is needed to correct errors.

5. How we process personal data

5.1 Purchase of services

We process contact details, location and cabin information, stay data and information about the services ordered.

Legal basis: GDPR Art. 6 (1) (b) – performance of a contract. The necessary information is shared with the supplier carrying out the service.

5.2 Customer club

By joining, you consent to the sharing of the necessary customer information. Consent is given separately for newsletters, for offers and communication, and for profiling and recommendations. Consent may be withdrawn at any time.

Legal basis: GDPR Art. 6 (1) (a).

5.3 User account

The required information is login details (Vipps or other authentication), name and email. Optional information is gender, date of birth, address, postcode and country.

Legal basis: Art. 6 (1) (b) for required data, Art. 6 (1) (a) for optional information.

5.4 Use of the website and app

We use cookies and local storage for functionality, analytics and marketing. Analytics and marketing cookies are only activated after consent is given through the consent banner.

Among other tools, we use Google Analytics and Meta Pixel. This may involve transferring data to third countries (the USA). Measures have been put in place to ensure an adequate level of protection.

Legal basis: GDPR Art. 6 (1) (a).

5.5 Email enquiries

Email is normally deleted within 12 months. All email is scanned for viruses and malware.

Legal basis: GDPR Art. 6 (1) (c).

5.6 Job applicants

We process applications, CVs, attachments, references and interview notes. Applications are stored in line with Finn.no's retention periods.

5.7 Journalists

Contact details are stored for up to five years for communication purposes.

Legal basis: GDPR Art. 6 (1) (f).

6. Sharing of personal data

Personal data is shared only where necessary: with service suppliers, with customer club providers after consent, with data processors, and with public authorities where the law requires it.

We never sell personal data.

7. Storage and deletion

Personal data is stored only for as long as necessary:

• customer account: deleted on request, anonymised within 12 months
• purchase data: 5 years
• service history: 3 years
• cookies: in line with consent
• marketing: until consent is withdrawn
• email: 12 months
• job applications: in line with Finn.no
• journalist register: 5 years

8. Your rights

You have the right of access, rectification, erasure, restriction, data portability, objection, and to withdraw consent.

Read more at datatilsynet.no. Contact us at privacy@hyttetjenester.no.

9. Complaints

If you believe the processing breaches the rules, you can complain to the Norwegian Data Protection Authority (Datatilsynet).

10. Changes

We may update this policy. Material changes will be announced in the app and on the website.