Nordic Privé is a boutique luxury destination management company (DMC) covering Finland, Norway, Sweden, Iceland, Denmark, Greenland, the Faroe Islands, Svalbard and the Baltic States. We are personally operated by our senior team.
For the purposes of data protection law, Nordic Privé is the data controller responsible for your personal information. We take that responsibility seriously.
When this policy refers to "we", "us" or "our", it means Nordic Privé. When it refers to "you", it means anyone whose personal data we hold — including travel agents and tour operators who work with us, their clients whose journey details we handle, and visitors to our website.
When you contact us — through our website enquiry form, by email, or through a trade partner — you may provide us with personal information including:
When you visit our website, we may collect certain technical information automatically, including your IP address, browser type, pages visited and time spent on the site. We use Google Analytics 4 for this purpose. See the Cookies section below for more detail.
Trade partners — travel agents and tour operators — may share their clients' personal information with us in order for us to design and operate travel programmes. In these cases, we act as a data processor on their behalf for that client information, and as a data controller for the trade partner's own information.
We use the information we hold to:
We do not use your personal information for automated decision-making or profiling. We do not sell your data to third parties. We do not use your data for purposes unrelated to the services we provide.
If you are in the European Economic Area or the United Kingdom, we process your personal data under the following legal bases:
We share personal information only where necessary to operate our services. This includes:
We do not share your personal information with third parties for their own marketing purposes. We do not sell personal data.
Because we operate programmes across multiple countries in the Nordic and Baltic region, some personal information will be shared with accommodation providers, guides and suppliers based outside the European Economic Area — including in Norway, Iceland, Greenland, the Faroe Islands and Svalbard.
Where this involves transfers outside of countries with adequacy decisions under GDPR, we rely on the legitimate necessity of the transfer for the performance of your travel contract, or we ensure appropriate safeguards are in place.
If you have questions about specific transfers, please contact us at sales@nordicprive.com.
We keep personal data for as long as necessary for the purpose for which it was collected, and to comply with our legal obligations.
When data is no longer required, we delete or anonymise it securely.
Under applicable data protection law, you have the following rights regarding your personal data:
To exercise any of these rights, please contact us at sales@nordicprive.com. We will respond within one month. You also have the right to lodge a complaint with your local data protection authority.
Our website uses cookies — small text files stored on your device — to help us understand how the site is used and to improve it.
We do not use advertising cookies or third-party tracking cookies for marketing purposes.
You can control cookies through your browser settings. Disabling analytics cookies will not affect your ability to use the website.
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure. All data transmitted through our website is encrypted via HTTPS.
No method of transmission over the internet is completely secure. If you have concerns about the security of information you have shared with us, please contact us directly.
Our website and services are directed at adults and at professional travel trade partners. We do not knowingly collect personal data directly from children under 16.
Where children are included in a travel programme as part of a family group, their details are handled only as necessary for programme delivery, provided to us by the responsible adult or trade partner.
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "last updated" date at the top of this page.
We encourage you to review this policy periodically. Continued use of our website after changes have been posted constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy, wish to exercise your data rights, or have a concern about how we handle your information, please contact us:
We aim to respond to all data protection enquiries within one month. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant supervisory authority in your country.