Privacy Policy

Data controller: Haugastøl Turistsenter AS

Org. no.: 931 039 849

Address: Haugastølvegen 200, 3595 Haugastøl

Email: mail@haugastol.no

Phone: 32 08 75 64

A) Data you give us directly

• Name, email, phone and message content when you submit forms or enquiries.

• For EV charging: email if you request a receipt, payment and session references, charging point, timestamps, kWh, price lines, status/events and any refund information. We do not receive card numbers, CVC or Vipps login credentials.

B) Technical data (when using the website)

• IP address (often shortened/technically processed), browser type, device, language, timestamps, page views, referring page (referrer), and events on the site (clicks/scroll/outbound links, etc.).

C) Marketing/measurement data (only with consent)

• Events used for measurement and advertising (e.g. page views, clicks, booking-related events, campaign parameters).

• Hashed contact details from forms on the website (typically email, phone, name and address/postcode) when you have consented to marketing and Meta Pixel is active – for attribution and remarketing.

We process personal data to:

1. Deliver and secure the website (operation, troubleshooting, security).

2. Deliver, control and settle EV charging, send receipts, handle refunds/accounting and provide support.

3. Respond to enquiries and follow up requests.

4. Understand use of the website (statistics and improvements).

5. Measure and improve marketing (conversion measurement, remarketing) – only with consent.

We base processing on:

• Contract/request: when you purchase charging, request a receipt or contact us.

• Legal obligation: necessary payment, refund and accounting documentation.

• Legitimate interest: operation, security, abuse prevention, support and necessary troubleshooting (minimal and proportionate).

• Consent: for statistics cookies and marketing cookies/pixels. Consent must be voluntary and can be withdrawn at any time. (This is in line with Norwegian guidance on cookies and consent practice.)

What are cookies?

Cookies are small text files stored in your browser. Some are necessary for the website to function, while others are used for statistics and marketing.

Consent and choices

We use a cookie/consent solution where:

• Necessary cookies may be used without consent.

• Statistics and marketing are activated only after you have consented.

• You can change or withdraw consent at any time via

A) Google Tag Manager (GTM)

Used to load and manage statistics tags (such as GA4) based on consent.

B) Google Analytics 4 (GA4) (Statistics – requires consent)

Used to understand traffic and usage patterns (which pages are used, what is clicked, etc.). You may be measured across pages via cookies/identifiers when you consent. GA4 also has data retention settings that we configure in GA.

C) Meta Pixel (Facebook/Instagram) (Marketing – requires consent)

Loaded directly from the website only after marketing consent (not with "Statistics only" or "Necessary only"). Used for conversion measurement, ad optimisation and remarketing (e.g. to show ads to people who have visited the site). The pixel sends events about actions on the website (e.g. page views).

We may share personal data with suppliers necessary to provide the services:

• DigitalOcean and Vercel for hosting/infrastructure

• Postmark for email receipts

• Stripe and Vipps MobilePay for payments and refunds

• Easee and Zaptec for charger control and metering/event data

• analytics and tag suppliers (e.g. Google) and marketing suppliers (e.g. Meta) where the required consent has been given

We retain personal data for as long as necessary for the purposes:

• Payment, refund and accounting documentation: for as long as required by bookkeeping rules.

• Completed charging sessions: email, card last four digits, RFID UID and detailed provider events are automatically anonymised after 365 days. Unresolved payment/support cases are retained until resolved. Access-restricted backups may contain the fields for up to 14 additional days.

• Enquiries: normally 12 months after the dialogue has ended, unless otherwise required (e.g. documentation).

• Analytics/marketing data: according to the settings in the tools and as short as practically possible for the purpose. (GA4 has its own retention settings.)

You may have the right to:

• access, rectification and erasure

• restriction and objection

• data portability (where relevant)

• withdraw consent (without affecting the lawfulness of processing before withdrawal)