At a glance
• We collect only what’s needed to handle bookings and deliver your trip.
• Payments are processed via IterQuest; we do not store card data.
• You can request access, correction, deletion (GDPR).
• Data is mainly stored in the EEA and deleted when no longer needed.
1. Data Controller
Spak Consultants (Rjukan Adventure). Contact: org@spakconsultants.no.
2. Data we collect
- 2.1 Identity & contact: name, email, phone, country.
- 2.2 Booking details: selected trip, date, participants, add-ons.
- 2.3 Payment info: handled by IterQuest and payment partners; we don’t store card numbers.
- 2.4 Communications: inquiries, confirmations, practical info.
- 2.5 Technical logs: necessary cookies and security logs.
3. Purpose & legal basis
To manage bookings, take payment, deliver services and ensure safety. Basis: performance of contract, legitimate interests, and legal obligations.
4. Sharing
Only when necessary: guides/providers involved in the trip, IterQuest (booking/payment), and IT vendors under data-processing agreements.
5. Retention
Personal data is deleted or anonymised when no longer needed, typically within 24 months after the activity, except where law requires longer (e.g., accounting).
6. Transfers outside EEA
If used, transfers rely on valid safeguards (e.g., EU Standard Contractual Clauses).
7. Your rights
- Access, rectification, erasure, restriction, portability, and objection.
- Contact: org@spakconsultants.no. You may also complain to your supervisory authority.
8. Cookies
We use necessary cookies for operation and security. Analytics/marketing only where enabled and consented.
9. Security
We use encryption, access control, and logging. Payments are handled by IterQuest and payment partners.
Last updated: 29 August 2025