Privacy Policy

1. Introduction and Data Controller

Pickledgertempon Arctic Expeditions Ltd ("Pickledgertempon", "we", "our", or "us"), operating under Norwegian Business Registration Number NO-928471902, with registered offices at Storgata 64, 9008 Tromsø, Norway, is the designated Data Controller under the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Norwegian Personal Data Act (Personopplysningsloven).

We are dedicated to safeguarding the privacy and digital rights of our global website visitors, expedition clients, and correspondents. This document sets forth how personal information is obtained, utilized, protected, and when it may be disclosed to legitimate third parties.

2. Categories of Information We Collect

We collect personal information through direct interactions and technical logs:

• Directly Supplied Information: When you complete our contact inquiry form, request expedition advisories, or email us directly, we capture your name, email address, telecommunication numbers, inquiry subject, travel dates, and any personal travel notes you volunteer.
• Technical and Device Metadata: When navigating Pickledgertempon.sbs, our web servers collect standard Internet protocol (IP) addresses, operating system specifications, browser user-agent tokens, referring URLs, time spent per page, and access timestamps.
• Cookie and Local Storage States: As outlined in our Cookie Policy, we record technical preferences regarding cookies and local browser flags to preserve display states across sessions.

3. Legal Grounds for Processing (GDPR Article 6)

We process personal data solely in compliance with recognized lawful bases:

• Consent (Art. 6(1)(a)): Where you have voluntarily submitted inquiries or opted into analytical cookie tracking. You maintain the right to revoke consent at any moment.
• Contractual Performance (Art. 6(1)(b)): Where processing is required to deliver requested expedition consultations, route advisories, or response communications.
• Legal Obligation (Art. 6(1)(c)): To satisfy statutory accounting, tax, and regulatory compliance duties under Norwegian commercial law.
• Legitimate Interests (Art. 6(1)(f)): To maintain web infrastructure security, block malicious cyber attacks, and optimize editorial delivery for northern lights travelers.

4. Third-Party Processors and Data Transfers

We do not sell, rent, or trade your personal data to commercial brokers or advertisers. Data is shared solely with vetted technological infrastructure processors who adhere to strict data security frameworks:

• Cloud hosting, network delivery, and distributed denial-of-service mitigation providers located within the European Economic Area (EEA) or bound by Standard Contractual Clauses (SCCs).
• Encrypted email dispatch systems and administrative communication gateways.
• Norwegian regulatory bodies or law enforcement authorities only when compelled by lawful subpoenas or statutory mandates.

5. Data Retention Periods

We retain your personal records only for the period necessary to fulfill the operational purposes for which they were collected. Contact inquiries and field request emails are archived for a maximum of twenty-four (24) months from the date of final resolution, after which they are securely scrubbed or permanently anonymized. Web server access logs are systematically recycled every ninety (90) days unless active security investigations dictate retention.

6. Individual Rights Under GDPR and CCPA

Depending on your geographic residency, you hold specific statutory rights concerning your personal information:

• Right of Access: You may request formal verification of whether personal data concerning you is processed, including complete copies thereof.
• Right to Rectification: You may demand correction of erroneous, outdated, or incomplete records.
• Right to Erasure ('Right to be Forgotten'): You may request the deletion of your personal records where legal grounds for retention have expired.
• Right to Restriction and Objection: You may challenge processing founded upon legitimate interests or demand temporary suspension of data handling.
• Right to Data Portability: You may receive your provided personal data in a structured, commonly used, and machine-readable format.

7. Data Protection Officer (DPO) and Inquiries

For questions regarding this policy, to exercise your statutory rights, or to submit a formal inquiry, please contact our designated privacy team:

If you believe our processing violates data protection legislation, you hold the right to lodge a formal complaint with the Norwegian Data Protection Authority (Datatilsynet, Postboks 458 Sentrum, 0105 Oslo, Norway, www.datatilsynet.no).