Last updated 14 August 2026
This policy explains how AuroraSpot handles the personal data you provide when registering on our website.
We only collect what you enter into the registration form yourself:
We do not use tracking cookies, and we collect no data unless you actively submit the form.
The website uses simple, self-hosted visitor analytics with no cookies and no third parties. Your IP address is never stored — only an anonymised value that resets daily and cannot be traced back to you. The analytics show us visit counts and which parts of the site are used.
When we email companies and organisations, links may contain a tag showing us that someone from that organisation visited the site. We use this only to follow up interest, based on our legitimate interest (GDPR Art. 6(1)(f)). Let us know at hei@auroraspot.no if you prefer we don't, and we'll stop.
The data is used solely to contact you about AuroraSpot and your interest in the service for the northern lights season. Processing is based on the consent you give when you submit the form (GDPR Article 6(1)(a)).
Registrations are stored in a spreadsheet in Google Workspace. Google is our data processor and processes the data on our behalf. We do not share your data with any other third parties, and we never sell it.
We keep the data for as long as necessary for the purpose — normally through the relevant season. If you do not become a customer, or you withdraw your consent, we delete your data.
You have the right to access, rectify and erase the data we hold about you, and you may withdraw your consent at any time. Contact us at hei@auroraspot.no and we'll take care of it. If you believe we are processing your data incorrectly, you can lodge a complaint with the Norwegian Data Protection Authority.