ARKT LOFOTEN · 15.10.2026
Privacy and cookies – ARKT Lofoten
This information concerns ARKT Lofoten, operated by SeeLofoten AS.
Pre-launch draft: Supplier log retention, international transfers and our deletion procedures must be documented before this notice can be considered final.
Controller and contact
SeeLofoten AS, organisation number 927 266 121, Mjånesveien 30, 8370 Leknes, Norway, is the controller for our enquiries and our use of personal information. Contact cecilie@seelofoten.no or +47 95 75 51 25.
The enquiry box and email
Your name, email address, topic and message are used to prepare an email locally in your browser. The box does not send your message to SeeLofoten. You must send it from your email app. The copy button places the text on your device’s clipboard. This website has no enquiry database. Please do not enter payment card details, passport numbers or health information.
When we receive an enquiry
When you send the email, we receive the information you choose to provide. Email is handled through one.com. We use the information to respond and follow up your request. For enquiries about a stay or agreement, the basis is steps before a contract or performance of a contract under GDPR Article 6(1)(b). The basis for other enquiries depends on their purpose; any legitimate interest in handling relevant correspondence must be documented. Contacting us does not subscribe you to marketing.
Bookings and payments
Property links open seelofotenbooking.lodgify.com in a new tab. Information entered there is handled in the booking service. Stripe is used for payments on direct bookings. The ARKT website has no payment form and does not receive card details. Read Lodgify’s privacy information and Stripe’s privacy information. Their notices do not replace information about our own processing.
Hosting and security
This site is hosted through OpenAI’s ChatGPT Sites. Technical information such as IP addresses, request times, requested URLs and browser information may be processed by the delivery infrastructure to operate and secure the service. Our site code includes no Google Analytics, Meta Pixel, advertising, embedded external maps or social media embeds. Images and fonts are served by the website itself.
Cookies
Our site code does not use cookies or browser storage for analytics or marketing. The delivery infrastructure returned Cloudflare’s __cf_bm cookie during the check on 15 October 2026. It protects against automated traffic and, according to Cloudflare, expires after 30 minutes of inactivity. Authentication for the private review site is managed by the platform and may use its own cookies. The public site must be checked again before launch. Optional tracking must be assessed before it is added.
Retention and deletion
Personal information should not be kept longer than necessary for its purpose. SeeLofoten aims to delete or anonymise ordinary guest information within one year after a stay. Implementation across email, Lodgify and other copies must be confirmed; automatic deletion has not been established. Relevant records may need to be retained longer for legal requirements or unresolved claims and payments. Retention for other enquiries, backups and technical logs must be finalised before launch. This is not a confirmation that all information is automatically deleted after one year.
Access, suppliers and transfers
Access should be limited to people who need the information. SeeLofoten uses OpenAI for hosting, one.com for email, Lodgify for booking and Stripe for payment. Applicable agreements, subprocessors, processing locations and safeguards for transfers outside the EEA must be documented for the services in use. OpenAI publishes a business data processing addendum. Its applicability to this account and the suppliers’ specific retention periods still need verification.
Your rights
Contact us to request access or correction and, where the conditions apply, deletion, restriction, portability or to object to processing. Consent can be withdrawn where it is the legal basis. You can complain to the Norwegian Data Protection Authority. Our site code does not make decisions with legal or similarly significant effects through automated processing.