Privacy Policy

Protection and Use of Personal Data

This data protection and use policy applies to the domains paisesnordicos.pt and paisesnordicos.com.br, visitthenordics.com and any redirects in the possession of Kettlingur Ferðir ehf. they may give rise to.

The Kettlingur Ferðir ehf. is committed to the rigor, confidentiality and security of the personal data that the company receives about its users. This description of our privacy and confidentiality policy is intended to inform the user about what data the company receives and what data the company maintains in its possession and control, for use in connection with booking, refunds and marketing purposes. as well as who has access to this same data.

Therefore, this data protection policy applies to Visit the Nordics users and customers. Furthermore, we will refer to Kettlingur ehf. and to your Visit the Nordics brand as “we” and to visitors and customers as “you” or “you”.

For any clarification of doubts you may have, we suggest sending an email to [email protected] specifying in the subject “GDPR – Clarifications and Questions”.

1. Legal Framework

Visit the Nordics aims to legally comply with all applicable legislation. For this purpose, this data protection and use policy is based on standard 77/2000 of Icelandic law regarding the protection and use of personal data.

2. Concept of Personal Data

Within the framework of this legal policy, personal data is any data that can lead to the identification of an individual, whether directly or indirectly linked to that individual. Therefore, under this notion, data that, as they are not identifiable or do not contain a link to a specific individual, known as anonymous, are excluded, and are not considered personal data.

3. Personal data we collect and process

From the moment the user visits our website, on any of its domains, data is retained about the user. This data, in many cases, is obtained directly by third parties, and both the collection of data carried out by us and by these third parties (for example, Google search engine, Skyscanner) largely depends on the relationship that the user maintains with us.

We recognize that the majority of our users are individual users looking to find trips and activities to do in Scandinavia. On the other hand, some of these users will be legal entities, commonly known as companies. In these cases, these entities will have their legal representatives and/or employees whose information provided (e.g. name, telephone, email, function) will also be retained for professional and contact purposes and, possibly, for marketing purposes.

Even though the tours listed on our website are mostly operated externally by tour operators who assume responsibility for carrying out these same tours, when booking, there is information that is required prior to the tour. This information includes not only individual identification and contact data but also any information that may be relevant to the completion of the tour in optimal conditions.

This information may include, for example, contact information, such as name, identification number, postal address, telephone number and email address, as well as identification and control elements such as duration of travel, airline ticket number, weight , age, physical shape, country of residence, billing information, or even others such as IP address, information about religious beliefs or dietary restrictions, interests and also information regarding group travel preferences or even, for example, information about the your health status provided by your doctor and verified by you. Please note that these are mere examples of the information that may be required and that, to use the Visit the Nordics website to its fullest extent and, to carry out the tours and activities proposed therein, you undertake to accept this policy of data use and protection and provide the required data, under penalty of not being able to join the chosen trip.

In addition to the information mentioned above, Visit the Nordics reserves the right to store and use other types of information that you provide to the company, for example photographs or publications on social networks that concern us directly or indirectly, as well as other types of information necessary for the proper functioning of the company, tours and activities.

In a broad sense, Visit the Nordics obtains the data through you. We strive to actively research what data is collected by third-party companies (e.g. other tour operators, online booking platform, Google, Skyscanner, etc.) and make equal efforts to keep you informed of these occurrences. However, we consider it common sense that, when searching for our company using a search engine or through a social network, as well as when using the browser on your computer, cell phone, tablet or any other device, as well as when entering your data in the Skyscanner search engine or in the tour and activity booking system, the user is deliberately providing identification data directly and indirectly.

4. Necessity of data collection and processing

The information we retain about the individual user or about the companies or legal entities for which the user works is, for the most part, provided with consent and mutual agreement. This information includes, for example, contact and payment information.

Please note that, when information related to the user and/or the parties they represent, whether companies or other individuals, is necessary, we reserve the right to collect it under penalty of the impossibility of providing our services. If the user does not provide the correct and necessary information, as required, Visit the Nordics reserves the right not to provide the contracted service due to lack of information, thus not being able to fulfill its part of the agreement.

In the same way, personal information is also retained and used based on the need for mutual agreement between the parties, for example, any and all information relevant to carrying out a tour or activity. As mentioned above, for example, duration of trips, beliefs, desires and/or special requests or physical condition, are some of the personal information that may be relevant. This information will tend to require your consent and will be requested when it is considered relevant to the good professional performance of the company.

Even so, information may be used to provide services that are in accordance with your legitimate interests, such as sending satisfaction surveys, or even marketing campaigns. On the other hand, with this information being provided by the user, the user reserves the right to information about their cessation of consent, at which point Visit the Nordics will seek to remove that user’s information from its database. However, we ask for your understanding that this process may take a few days. All information regarding the withdrawal of your consent must be provided in writing to [email protected].

Along these lines, Kettlingur Ferðir ehf. ensures that all use of data operated by it aims to comply with the need and appropriateness of use, with current law, and with principles of transparency and honesty.

5. Transfer of information to third parties

As mentioned above, Visit the Nordics may provide your personal information to its employees, consultants, external operators and all other parties necessary for the proper functioning of the company. In this way, your personal information may be shared with third parties who work together with us as well as, and mainly, the tour operators with whom you schedule your tours and activities.

Most of these companies are located in the European Economic Area (hereinafter, EEA), although outside Portugal and, sometimes, outside the European Union. Visit the Nordics seeks not to address sensitive and/or personal information to entities located outside the European Economic Area, but emphasizes the fact that, through its website, users can reach service providers located outside of the EEA, for which Visit the Nordics assumes no responsibility, whether direct or indirect.

On the other hand, in the event of a dispute, your information may be used for legal proceedings within the applicable legal procedures and also in the event of an emergency, as it is necessary to guarantee the safety of the user or any party involved, for example employees of Visit the Nordics, another company in question or individuals involved, for example, in a particular accident.

6. Data security

Visit the Nordics controls the means of access to your personal information through encrypted channels and passwords. Therefore, this information is safe. Even so, the maintenance and hosting of the website and marketing, accounting and other services are supported by third parties. This includes cases such as, for example, possible computer attacks, for which the accommodation system may not be prepared and does not depend entirely on Visit the Nordics.

In any case, Visit the Nordics systems are equipped with external and independent protection systems aimed at protecting data and information transactions. These systems aim to protect your information against unintentional destruction or alteration, as well as unauthorized access, duplication, use or disclosure to third parties without the intention of the company or interested parties or the user.

7. Storage of personal data

Your personal data will be retained by Visit the Nordics for as long as necessary for its useful use, unless permitted or required by law. This same data retention can, and should, be consulted here.

8. User rights to your information

The user has rights over their own information. Therefore, the holder of the information may request access to the information we retain about him or her as well as a copy of the personal information and rights that he or she provided. All indirect information is excluded from this information, such as indirect and non-identifiable demographic data used for statistical purposes.

In certain circumstances, such as in the event of a dispute, the user may have the right to request that information that directly concerns him or her be erased without delay. Likewise, the user can request the change of data if that same information is out of date. Visit the Nordics asks its users to keep us updated on changes to personal and contact information that may arise during the user’s relationship with Visit the Nordics (e.g. before tours and activities or, for example, even then, for marketing purposes), so that relevant communications can take place efficiently.

Likewise, the user may request that this information be transmitted to them electronically, for example, in a plain text file or PDF, or even request that we transmit their information to third parties in the same way.

The use of user information for direct marketing purposes is, however, independent of any standards or guidelines other than your own consent for this purpose.

The user may also have the right to request, at any time, that Visit the Nordics not keep or use their personal information. Even so, you should know that these rights are limited and that certain laws and regulations may authorize or oblige the company to refuse your right, for example, in the case of non-payment, fraud, or others.

9. Other questions and possible complaints about data protection and use

Since the user has the right to make requests regarding the processing of their data, as referred to in point 8. of this article, they should contact Visit the Nordics via email address [email protected]. Likewise, if there are questions about the use of data and its protection, we welcome you to contact us in the same way. Your contact does not exempt you from consulting the information contained here.

10. Complaints about data abuse

If, even after contacting Visit the Nordics and reading the information regarding data use on the aforementioned website, the user considers that it is necessary to escalate their complaint, they can do so, in English or Icelandic, at Icelandic Data Protection Authority.

11. Communication routes with Visit the Nordics, Kettlingur Ferðir ehf.

Kettlingur Ferðir ehf., based in Reykjavík, is proud to be a paper-free company, meaning digital media is the only form of contact. Thank you for contacting us using your email address. [email protected].

12. Revisions to the current privacy policy

Visit the Nordics reserves the right to revise this privacy policy in accordance with changes to applicable laws and regulations or in accordance with changes that the company undergoes in the way it manages and processes personal information. These changes will be presented by email if you subscribe to our newsletter or when you visit the website again. Any and all changes to the privacy policy will take effect immediately upon publication.

Reykjavík, November 21, 2021