PRIVACY POLICY

Effective Date: January 1, 2026

This Privacy Policy describes how My Arctic AS ("we," "us," or "our") collects, uses, and protects your personal data when you visit our website (myarctic.eu) and use our services. We are committed to ensuring that your privacy is protected and that your personal data is handled in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

Data Controller The Data Controller responsible for processing your personal data is: My Arctic AS Longyearbyen, Svalbard Email: [p m @ myarctic.eu]
What Data We Collect and How We Use It We collect and process your personal information for the following purposes:

Booking and Customer Support: When you book a tour or contact us via our forms, we collect your name, email address, phone number, and any other details you provide to fulfill our contract with you and respond to your inquiries.
Website Operation: We collect technical data, such as your IP address, browser type, and time zone, to ensure our website functions securely and efficiently.

Google Services (Analytics and Advertising) Our website uses Google Analytics 4 and Google advertising services. Subject to your consent (expressed via the cookie banner), we collect data about your website usage, and Google may link this with the data of logged-in Google account users for ad personalization purposes (Google Signals). Data provided voluntarily in forms (e.g., email address) may be transmitted to Google solely in an encrypted form (SHA-256 hash) to measure advertising effectiveness. For more information, visit: policies.google.com/privacy. You can withdraw your consent at any time in the cookie settings.
Cookies and Tracking Technologies Aside from the Google Services mentioned above, we use essential cookies necessary for the basic functioning of the website. For any non-essential cookies (such as analytics and marketing), we will always ask for your explicit consent before placing them on your device. You can manage your preferences at any time via our cookie banner or browser settings.
Data Sharing and Transfers We do not sell your personal data to third parties. We may share your data with trusted service providers who assist us in operating our business, such as payment processors, booking platforms, and IT support services. These providers are contractually obligated to protect your data.
Data Retention We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including satisfying any legal, accounting, or reporting requirements.
Your Rights Under applicable data protection laws, you have the right to:

Access the personal data we hold about you.
Correct any inaccurate or incomplete data.
Request deletion of your personal data ("right to be forgotten").
Restrict or object to our processing of your data.
Withdraw consent at any time (this does not affect the lawfulness of processing based on consent before its withdrawal).

To exercise any of these rights, please contact us at p m @ myarctic.eu

Changes to This Privacy Policy We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Effective Date." We encourage you to review this policy periodically.