If you submit the contact form, we process your name, email address, any phone number and the content of your message — plus anything you fill in any additional form fields. For ordinary visits, technical data is processed briefly in the operational logs of our hosting provider.

Solely to answer and follow up your enquiry. The legal basis is GDPR Article 6(1)(b) (steps prior to entering into a contract) and 6(1)(f) (legitimate interest in answering enquiries). We never sell your data, and you receive no marketing unless you ask for it.

No. This website sets no cookies for ordinary visitors and uses no Google Analytics, Facebook pixel or other tracking tools. Visitor statistics are anonymous and aggregated: we see how many visited on a given day, never who. Neither IP addresses nor identifiers are stored. That is why no consent banner is shown — consent is only required for cookies that are not strictly necessary. Where we embed content from other services on individual pages (for example a form, a video or a map), that service may set its own cookies when you open that page; we state so here.

This website is operated by Avent Digital AS (org. no. 915 920 934) on the Avently platform, which acts as our data processor and only processes data on our instructions, governed by a data processing agreement. Beneath Avent Digital, we use Vercel (hosting, EU), Supabase (database, servers in the EU), Resend (email notifications) and Anthropic (AI tools that may process the site's texts and contact details when we edit with AI — never your enquiries; servers in the US under the EU Standard Contractual Clauses). Data is otherwise only disclosed where required by law.

Enquiries are stored for as long as they are relevant to our dialogue with you, and deleted in periodic reviews at the latest 24 months after last contact — unless the enquiry leads to a customer relationship. In that case we keep what is necessary for the duration of the relationship, and accounting records per the Norwegian Bookkeeping Act.

You have the right to access the data we hold about you, and to have it corrected, deleted or restricted. You may request it in a machine-readable format, and object to processing based on legitimate interest. Contact us at contact@maloyadventure.no · +47 46 90 20 25 and we will respond without undue delay and within 30 days at the latest.

Please contact us first so we can put it right. You also have the right to lodge a complaint with the Norwegian Data Protection Authority (datatilsynet.no) if you believe we process personal data unlawfully.