Privacy Policy

Last updated:

This Privacy Policy describes how Drillingsafe, operating at drillingsafe.world and located at Laksevågneset 12, 5160 Laksevåg, Norway, collects, uses, stores, and protects personal data in connection with our active recreation programs, adventure packages, trail sessions, and related services. We are committed to handling your information responsibly and in compliance with the General Data Protection Regulation (GDPR), the Norwegian Personal Data Act (Personopplysningsloven), and other applicable data protection legislation.

Data Controller

The data controller responsible for your personal data is Drillingsafe. For any privacy-related inquiries, you may contact us at Laksevågneset 12, 5160 Laksevåg, Norway, by phone at +4792412112, or via the contact form on our website. Our designated privacy contact processes all requests within the statutory timeframes established under Norwegian and European law.

Scope of This Policy

This policy applies to all personal data processed when you visit drillingsafe.world, submit inquiries through our contact form, register for active recreation programs such as the Fjord Kayak Discovery, Nordic Trail Running Pack, or Coastal Cycling Adventure packages, participate in guided trail sessions, subscribe to program updates, or otherwise interact with Drillingsafe services. It does not apply to third-party websites linked from our platform, which maintain their own independent privacy practices.

Categories of Personal Data We Collect

Identity and Contact Data

When you contact us or book a recreation program, we may collect your full name, email address, telephone number, postal address, and any other contact details you voluntarily provide through our contact form or during the booking process.

Booking and Program Data

We collect information related to your selected active recreation package, preferred session dates, group size, fitness level disclosures, accessibility requirements, emergency contact details, and any special instructions relevant to your participation in trail programs, kayaking sessions, or cycling adventures.

Technical and Usage Data

When you browse drillingsafe.world, we may automatically collect your IP address, browser type and version, operating system, device identifiers, referring URLs, pages viewed, time spent on pages, and interaction patterns. This data is collected through cookies and similar technologies as described in our Cookies Policy.

Communication Data

We retain records of correspondence between you and Drillingsafe, including messages submitted through our contact form, email exchanges, and telephone notes related to program inquiries, booking confirmations, and post-session feedback.

Payment Data

When you purchase adventure packages, payment processing may involve transaction references, billing addresses, and payment confirmation details. Full payment card numbers are processed exclusively by authorized payment service providers and are not stored on our servers.

Legal Bases for Processing

We process your personal data only when a valid legal basis applies under Article 6 of the GDPR:

• Contractual necessity: Processing required to fulfill bookings for active recreation programs, deliver adventure packages, and manage your participation in trail sessions.
• Consent: Processing based on your explicit consent, such as when you check the data processing consent box on our contact form or opt in to program newsletters.
• Legitimate interests: Processing necessary for our legitimate business interests, including improving our recreation services, ensuring website security, and analyzing usage patterns, provided your rights do not override these interests.
• Legal obligation: Processing required to comply with Norwegian accounting, tax, and consumer protection laws applicable to recreation service providers.

How We Use Your Personal Data

Drillingsafe uses collected personal data for the following purposes related to our active recreation programs:

• Processing and confirming bookings for trail programs, kayaking sessions, cycling adventures, and outdoor fitness circuits.
• Communicating session details, meeting points, equipment requirements, weather advisories, and schedule changes.
• Ensuring participant safety during outdoor activities by maintaining emergency contact information and relevant health disclosures you provide voluntarily.
• Responding to inquiries submitted through our contact form and providing post-session support.
• Analyzing feedback and participation patterns to improve program quality, route selection, and instructor training.
• Maintaining records required by Norwegian commercial and tax regulations.
• Operating and securing drillingsafe.world, including fraud prevention and technical troubleshooting.

Data Sharing and Third Parties

We do not sell your personal data. We may share information with the following categories of recipients when necessary to deliver our active recreation services:

• Recreation instructors and guides assigned to your booked sessions, limited to information required for safe program delivery.
• Payment service providers that process transactions for adventure package purchases under their own privacy policies.
• Hosting providers, email delivery services, and analytics platforms that support website operation under data processing agreements.
• Government authorities, courts, or law enforcement when required by applicable Norwegian or European law.

Where data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission or adequacy decisions covering the recipient country.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this policy:

• Booking and program participation records are retained for five years after the final session date to comply with Norwegian accounting requirements and handle potential disputes.
• Contact form submissions are retained for two years unless a booking relationship is established, in which case data is retained under booking record terms.
• Marketing communication preferences are retained until you withdraw consent or for three years of inactivity, whichever occurs first.
• Server logs and analytics data are retained for up to twelve months before anonymization or deletion.

Your Rights

Under the GDPR and Norwegian data protection law, you have the following rights regarding your personal data held by Drillingsafe:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your data where no overriding legal basis for retention exists.
• Right to restriction: Request limitation of processing under specific circumstances.
• Right to portability: Receive your data in a structured, machine-readable format where processing is based on consent or contract.
• Right to object: Object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us through the form at reach-out.html or by post to our Laksevåg address. We respond within thirty days. You also have the right to lodge a complaint with Datatilsynet, the Norwegian Data Protection Authority, at datatilsynet.no.

Data Security

Drillingsafe implements appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include HTTPS encryption across drillingsafe.world, access controls limiting employee data access to authorized personnel, secure storage of booking records, and regular review of our data handling practices. While we take reasonable precautions, no method of electronic transmission or storage is completely secure.

Children Privacy

Our active recreation programs may accommodate participants under eighteen years of age when accompanied by a parent or legal guardian or when appropriate parental consent has been obtained. We do not knowingly collect personal data from children under sixteen without verifiable parental consent. If you believe we have collected data from a child without proper authorization, contact us immediately for prompt deletion.

Automated Decision Making

Drillingsafe does not use automated decision-making or profiling that produces legal or similarly significant effects on individuals in connection with our recreation program services.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our active recreation services, legal requirements, or data processing practices. Material changes will be communicated through a notice on drillingsafe.ddd. The date at the top of this page indicates the most recent revision. Continued use of our services after changes constitutes acknowledgment of the updated policy.

Contact Us

For privacy-related questions or to exercise your data protection rights, contact Drillingsafe at Laksevågneset 12, 5160 Laksevåg, Norway, phone +4792412112, or through our contact page at reach-out.html.