Privacy Policy

Last updated: 26/08/2026

Opero Drift AS, organisation number 931 019 627, is the data controller for the processing of personal data as described in this privacy policy.

1. Introduction

This privacy policy describes how HytteHjelpen collects, uses and protects your personal data when you use our services, visit our website or use our app.

We are committed to protecting your privacy and process all personal data in accordance with the Norwegian Personal Data Act and the EU General Data Protection Regulation (GDPR).

2. What personal data do we collect?

2.1 Information you provide to us directly

When you order services from us, we collect the following information:

• Name
• Email address
• Phone number
• Address of cabin/property
• Payment information (processed by our payment provider)
• Correspondence with us (email, phone, chat)

2.2 Information collected automatically

When you use our website or our app, we may automatically collect:

• IP address
• Browser type and version
• Operating system
• Time and duration of visits
• Pages you visit
• Information from cookies

3. Purposes of the processing

We process your personal data for the following purposes:

3.1 Delivery of services

• Process and fulfil your orders
• Communicate with you about the services
• Handle payment
• Handle customer service and complaints

Legal basis: The processing is necessary to fulfil the agreement with you (GDPR art. 6(1)(b)).

3.2 Marketing

• Send you information about our services
• Inform you about offers and campaigns
• Send newsletters (if you have consented to this)

Legal basis: Your consent (GDPR art. 6(1)(a)) or our legitimate interest (GDPR art. 6(1)(f)).

3.3 Improvement of services

• Analyse use of the website and app
• Improve the user experience
• Develop new services

Legal basis: Our legitimate interest in improving our services (GDPR art. 6(1)(f)).

3.4 Legal obligations

• Comply with the Norwegian Bookkeeping Act
• Comply with tax and accounting rules
• Respond to requests from authorities

Legal basis: Legal obligation (GDPR art. 6(1)(c)).

4. Sharing of personal data

We do not share your personal data with third parties unless:

• It is necessary to deliver the service (for example payment providers such as Vipps)
• We are legally obliged to do so
• You have given your consent

4.1 Data processors

We use the following types of data processors who process personal data on our behalf:

• Web hosting and cloud storage services
• Payment providers (Vipps)
• Email providers
• Analytics tools

All data processors are bound by data processing agreements ensuring that they process personal data in accordance with the GDPR.

5. Transfers to countries outside the EU/EEA

We strive to keep all personal data within the EU/EEA area. If, in certain cases, it is necessary to transfer data to countries outside the EU/EEA, we ensure that adequate protection mechanisms are in place in accordance with the GDPR, for example the EU Commission's standard contractual clauses.

6. Retention period

We retain your personal data only as long as necessary for the purposes described in this policy, unless the law requires or permits longer retention.

• Customer data: As long as you are an active customer, and for up to 5 years after the last service (the Norwegian Bookkeeping Act)
• Marketing consent: Until you withdraw your consent
• Technical information (logs): Up to 12 months
• Correspondence: Up to 3 years after the end of the customer relationship

7. Security

We have implemented technical and organisational security measures to protect your personal data against loss, manipulation and unauthorised access. This includes:

• Encrypted data transmission (SSL/TLS)
• Secure storage with access control
• Regular security updates of systems
• Restricting access to personal data to only those employees who need it

8. Your rights

You have the following rights in relation to our processing of your personal data:

8.1 Right of access

You have the right to know what personal data we process about you.

8.2 Right to rectification

You have the right to have inaccurate or incomplete personal data corrected.

8.3 Right to erasure

Under certain circumstances, you have the right to have personal data about you deleted.

8.4 Right to restriction

Under certain circumstances, you have the right to demand that the processing of your personal data be restricted.

8.5 Right to data portability

You have the right to receive your personal data in a structured, commonly used and machine-readable format.

8.6 Right to object

You have the right to object to processing of your personal data that is based on our legitimate interests.

8.7 Right to withdraw consent

Where the processing is based on consent, you have the right to withdraw your consent at any time.

8.8 Right to complain

You have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) if you believe we process your personal data in breach of data protection legislation.

9. Cookies

We use cookies to improve the user experience on our website. Read more in our cookie policy.

10. Changes to the privacy policy

We may update this privacy policy from time to time. Changes will be published on this page with an updated date. We encourage you to review the policy regularly.

11. Contact information

If you have questions about this privacy policy or wish to exercise your rights, you can contact us:

The Norwegian Data Protection Authority (Datatilsynet)

Datatilsynet is the supervisory authority for data protection in Norway. You can contact them at: