TROMSØ TERRACE · Updated 12 November 2026
Privacy notice
This notice explains how Tromsø Terrace handles personal information when you use our website, contact us, or make a future direct booking.
Direct booking and Stripe Live payments are not yet enabled. Bookings made through Airbnb or Booking.com are subject to the respective platforms’ privacy policies.
Data controller
Edvard Einaren is the private host and data controller for direct-booking personal data at Tromsø Terrace. Contact: einaren.edvard@gmail.com, telephone +47 930 09 800.
Information and purposes
If you contact us, we use the information you provide to respond. Future direct bookings may require your name, email, phone number, language and optional country, party size, stay dates, booking reference, total amount and payment/refund status. Full card details are not stored in the Tromsø Terrace database. Information necessary for a booking is processed under GDPR Article 6(1)(b) (contract). Legally required records are processed under Article 6(1)(c), where applicable. Documented disputes or payment abuse may rely on Article 6(1)(f) following a case-specific balancing assessment.
Service providers and international transfers
Base44 is used to provide the website and data platform. Planned direct bookings use Stripe for payment and Resend for transactional email. Providers may have different legal roles for different processing activities. Resend states that email content and delivery logs are stored in the United States, with transfer safeguards described in its DPA. iCal exports do not contain guest contact details. Airbnb and Booking.com separately process bookings made through their platforms.
Retention and deletion
For future direct bookings, our approved internal policy normally calls for deleting or anonymising ordinary guest contact details 90 calendar days after checkout, or normally 90 days after a cancellation/refund case closes. The operational procedure is not yet enabled for real guests. Unresolved disputes and legally required records may require a separately assessed retention period. Accounting evidence is handled separately where legal retention applies. Supplier logs, email systems and backups follow their respective retention procedures; the same 90-day period cannot be guaranteed for all supplier copies.
Security
Access to booking records is restricted. The future direct-booking solution has been developed with encrypted contact information, data minimisation and server-side payment verification. Real guest intake and direct payments remain disabled until production checks have been completed.
Your rights
You may request access, correction, erasure, restriction and, where applicable, portability or object to processing. Contact Edvard at the address above. We may need to verify your identity. You can complain to the Norwegian Data Protection Authority at datatilsynet.no.
Cookies and analytics
Essential functions operate the website and remember your privacy selection. Optional analytics depend on your consent, which you can change at any time through “Cookie preferences”. Booking contact details are not used for advertising without a separate lawful basis.