Privacy policy
Last updated: 6 August 2026
This site belongs to Fagervika Rorbuferie AS. We rent out cabins and boats, and the site exists mainly for one purpose: so you can ask whether a date is free. We collect only what that requires, and we never sell your data.
1. Who is responsible for your data
The data controller is Fagervika Rorbuferie AS, Fagervikveien 628, 8890 Leirfjord, Nordland, Norway.
For anything concerning personal data, write to the address given on the Contact page – we answer every such message.
2. What we collect
When you send an enquiry about a date, we store what you type into the form:
- your name
- your e-mail address
- phone number – optional
- country – optional
- the dates you are interested in
- number of guests – optional
- which cabins and boats you are asking about
- the text of your message
- confirmation of your consent, together with its exact wording
Alongside the form we record technical details: the IP address the message came from, your browser, the date and time, and the language you were reading the site in. This serves one purpose – telling genuine enquiries apart from automated ones.
The server hosting the site also keeps its own connection logs, as every hosting service does.
We do not collect payment card details, identity document numbers, or any special category data (health, beliefs, origin).
3. Why we need it and on what legal basis
- To answer your enquiry and arrange a booking – Article 6(1)(b) GDPR: steps taken at your request before entering into a contract.
- To protect the site from abuse: a submission limit per IP address and a record of failed admin login attempts – Article 6(1)(f) GDPR, our legitimate interest in keeping the site running.
- To settle the stay if it goes ahead – Article 6(1)(c) GDPR, obligations under tax and accounting law.
- Visit statistics and marketing – Article 6(1)(a) GDPR, your consent. Without it those tools never start at all.
4. How long we keep it
- Booking enquiries – until the matter is closed, then for as long as claims arising from it remain possible. If you ask us to delete them earlier and nothing obliges us to keep them, we do.
- IP addresses in the form submission counter – 24 hours.
- Failed admin login attempts – 7 days.
- Accounting records, if a booking went ahead – for the period required by tax law.
- Server logs – according to the hosting provider's policy.
5. Who we share it with
We do not sell data and do not make it available for advertising. It is accessible only to:
- the hosting provider whose server runs the site and the database,
- the mail provider that carries messages from the form,
- Google – but only if you agree to display the map (see below).
Providers processing data on our behalf are bound by data processing agreements.
6. Cookies and browser storage
The site uses no tracking cookies. It relies on two things:
- fvsid – a session cookie. It is created only when you submit the form or log into the admin panel, and disappears when you close the browser. Without it the form could not protect itself against forged submissions. Being strictly necessary, it needs no consent.
- fv-zgoda – an entry in your browser's local storage. It remembers what you chose in the consent dialog so you are not asked on every visit. It never reaches our server.
Analytics and marketing tools start only after you consent. You can change your choice at any time using the button below.
7. Google Maps
The Contact page has a map showing how to reach us. It does not load by itself: until you click to display it, your browser makes no connection to Google and tells them nothing about you.
Once you click, Google receives your IP address and browser details, on the terms set out in Google's privacy policy. The data may be processed outside the European Economic Area.
We also give our address as plain text, so you can find us without turning the map on.
8. Fonts and other assets
We host our typefaces on our own server. Opening the site sends no request to Google Fonts or any other external service. The same goes for every image and script – the whole page loads from our server.
9. Your rights
At any time you may:
- ask for a copy of your data,
- correct data that is wrong,
- request its deletion,
- restrict how we process it,
- receive it in a format you can take elsewhere,
- object to processing based on our legitimate interest,
- withdraw consent – withdrawal does not undo what we lawfully did before it.
An e-mail to our address is enough. We reply within one month at the latest, free of charge.
If you believe we are handling your data unlawfully, you have the right to complain to the Norwegian supervisory authority, Datatilsynet.
datatilsynet.no (opens in a new tab)
10. Security
- The whole site runs over HTTPS – form data travels encrypted.
- Admin passwords are stored only as cryptographic hashes. The password cannot be read back from the database.
- Access to the panel is limited by a login attempt cap and expires after a period of inactivity.
- We store no payment card data – payments do not pass through this site.
11. Changes to this policy
If we change how we handle data, we will update this document and the date at the top of the page. Worth a glance before your next booking.
12. Contact about your data
Fagervika Rorbuferie AS
Fagervikveien 628
8890 Leirfjord
Norwegia