This privacy policy describes how Arctic Aurora ApS collects, uses and protects your personal data in connection with the management of our bookings and use of our website.

1. Data controller

Arctic Aurora ApS.gl Aqqusinersuaq 14 3950 Aasiaat, Greenland Phone: +299 52 84 00 E-mail: info@arctic-aurora.gl

2. Collection and processing of personal data

We collect and process personal data in the following cases:

• When you make a booking on our website

• When you contact us via our contact form

• When you upload images or other content to our website

• When you visit our website and accept cookies

• When you make a payment via our payment gateway Quickpay

• When we receive information via social media (e.g. Facebook)

The personal data is used solely to manage your booking, improve your user experience and ensure compliance with applicable legislation.

3. Legal basis for processing your data

The processing of your personal data is based on the following legal basis:

• Your consent (e.g. by accepting our privacy policy and cookies)

• Fulfilling a contract (booking and payment)

• Compliance with legal obligations

• Our legitimate interest in improving and securing our services

4. Cookies and tracking technologies

We use cookies to improve your experience on our website. Cookies can be:

• First-party cookies: Set by our website to improve functionality and user experience.

• Third-party cookies: Set by external services such as Google Analytics or Facebook.

You can manage or delete cookies at any time via your browser settings.

5. Disclosure of personal data

Your data is only disclosed to third parties when necessary and in accordance with legislation. We ensure that our business partners comply with applicable data protection regulations. This may include:

• Payment providers (Quickpay) to complete transactions

• IT and hosting providers for maintaining our systems

• Public authorities if required by law

We never sell your information to third parties.

6. Storage of your personal data

Your data is retained for as long as necessary for the purposes for which it was collected and according to legal requirements:

• Booking and payment information is stored for up to 5 years to comply with accounting legislation.

• Cookies are stored for up to 2 years unless you delete them manually.

• Contact form data is deleted after 1 year unless further processing is necessary.

7. Your rights

You have the following rights in relation to your personal data:

• Right of access – you can request a copy of the information we hold about you.

• Right to rectification – if information is inaccurate, you can ask us to correct it.

• Right to erasure – you can request to have your data deleted.

• Right to restriction of processing – you can request that we only process your data in certain cases.

• Right to data portability – you can ask to have your data transferred to another provider.

• Right to object – you can object to our processing of your data.

To exercise your rights, contact us at info@arctic-aurora.gl.

8. Security and protection of your data

We protect your information through:

• SSL encryption for data transfer

• Technical and organizational security measures to prevent unauthorized access

• Continuously assess and update security measures, including prevention of potential data breaches and procedures for handling security breaches

9. Changes to the privacy policy

We may update this privacy policy to ensure compliance with current legislation and any new data protection requirements that may come into force in 2025. The latest version will always be available on our website.

10. Right of appeal

If you are dissatisfied with how we handle your data, you can contact the Data Inspectorate in Greenland.

Last updated: February 2025