Privacy Policy

Risør Trebåtfestivalen takes privacy seriously. This statement describes how we collect, use and protect your personal information when you use trebatfestivalen.no.

Last updated: March 17, 2026

1. Data controller

Risør Wooden Boat Festival is the data controller for personal information we collect via the website.

2. What information do we collect?

We collect the following types of personal data:

A) Boat registration

• Owner's name, email, phone number
• Boat information (name, type, year of construction, shipyard, club affiliation)
• Pictures of the boat (optional)

B) Festival pass

• Name, email, phone number
• Payment information (processed by Checkin.no)

C) Cookies and analytics tools

• Google Analytics 4: Anonymized usage data (page views, visit time, device)
• No data is sold to third parties

3. Purpose and legal basis

We process personal data to:

• Process boat registrations and publish fleet list (consent)
• Manage festival pass purchases (agreement)
• Improve the website user experience (legitimate interest)
• Fulfilling statutory obligations (legal obligation)

4. Sharing of information

We do not share personal information with third parties, except for:

• Checkin.no (payment provider for festival passes)
• Google Analytics (anonymized statistics)
• Bunny CDN (image delivery)

5. Your rights

You have the right to:

• Insight into what information we have about you
• Correction of incorrect information
• Deletion of information (“right to be forgotten”)
• Limitation of processing
• Data portability
• Withdrawing consent

To exercise your rights, contact us at personvern@trebatfestivalen.no

6. Storage and deletion

We store personal data only for as long as necessary:

• Boat registrations: Published during the festival, archived in public fleet archive
• Festival pass: Deleted 3 months after the end of the festival
• Analytics: Anonymized data is retained for 26 months (Google standard)

7. Cookies

We use cookies for:

• Necessary cookies: Remembers your consent to privacy
• Analytical cookies: Google Analytics (only if approved)

You can change your cookie preferences at any time by deleting the website's data in your browser.

8. Security

We use modern security measures to protect your personal data:

• SSL/TLS encryption (HTTPS)
• Supabase-based database with access control
• Regular security updates

9. Right of appeal

If you believe that we are processing personal data in violation of the privacy regulations, you can complain to the Norwegian Data Protection Authority:

10. Changes to the Privacy Policy

We may update this statement from time to time. Changes will be posted on this page with the updated date.