- Last updated on 07.03.2024

Akvariet i Bergen (“AiB”) works to safeguard your privacy when you use services in connection with visits to us. This privacy policy is intended to give you an overview of how we process personal data about our customers, visitors to our websites and job applicants.

The privacy policy provides information about which personal data we collect, what they are used for, and your rights in connection with the processing of personal data.
 

RESPONSIBILITY AND CONTACT INFORMATION

AiB, represented by the managing director, is the data controller for the processing of personal data at AiB, and is responsible for ensuring that all processing of personal data is carried out in accordance with the applicable privacy legislation at any given time.

If you have questions related to the content of the policy, or our processing of personal data in general, you may address an enquiry to:

Akvariet i Bergen
Nordnesbakken 4
5005 Bergen

Phone: +47 55 55 71 71
Email: post@akvariet.no

A personal data item is any information or assessment that can be linked directly or indirectly to you as an individual. AiB processes personal data about customers, visitors and subscribers in connection with the following main purposes:

Online ticket purchases

When you purchase a ticket in our webshop or via other booking sites, such as Bergen Reiselivslag or Visitbergen, we will register, or receive, personal data about you that is necessary to process the order and complete the purchase. In this connection we register information about your name and email address, which type of ticket you have purchased, as well as your phone number if you have chosen to provide it.

The legal basis for the processing is to fulfil the purchase agreement entered into with the customer, cf. Article 6(1)(b) of the General Data Protection Regulation. The customer is obliged to provide such information in order for us to complete the purchase.

Purchase of annual passes

When purchasing an annual pass we will take a photo of you and register information about your name, email address, date of birth and postal code. Providing a phone number is optional. The information is processed in order to issue a personal annual pass and to be able to offer different price categories based on age. Contact information is required if you forget your annual pass during your visit.

The legal basis for the processing is to fulfil the purchase agreement with the customer, cf. Article 6(1)(b) of the General Data Protection Regulation. The customer is obliged to provide such information in order for us to complete the purchase.

When you purchase an annual pass you may at the same time sign up for our newsletter to receive information about good offers and the opportunities you have as an annual pass holder at Akvariet. These emails are only sent to customers who have consented to receiving such communications, cf. Article 6(1)(a) of the General Data Protection Regulation. You may withdraw your consent at any time via the unsubscribe button at the bottom of our emails, or by contacting AiB directly.

We also use the postal code to map where in the country our visitors come from. The legal basis for the processing is Article 6(1)(f) of the General Data Protection Regulation, which allows us to process personal data that is necessary to pursue a legitimate interest. Our legitimate interest is to gain insight so that we can improve our offering.

Events and functions

At AiB our customers can book various events, such as parties, children’s birthday parties, guided tours and other types of events. In that connection the booking is entered into our event calendar with information about the type of event, price, duration and contact information for the person placing the order in the form of name, email address and phone number.

The information is processed in order to carry out the event in accordance with the customer’s wishes pursuant to the purchase agreement, cf. Article 6(1)(b) of the General Data Protection Regulation. The customer is obliged to provide such information in order for us to fulfil the purchase agreement.

We offer free Wifi to our customers at Akvariet, so that you can connect your computer or device to the internet during your visit with us. In order to use this service it is necessary for us to process information that identifies you and your device (IP address, MAC address and device name). The information is stored for up to 12 hours, before it is deleted.

When using the guest network you have the option to log in via your Facebook profile; this is of course entirely voluntary and you are welcome to use the network without logging in to social media.

The legal basis for processing the information is your consent, cf. Article 6(1)(a) of the General Data Protection Regulation.

AiB’s public areas and the shop are equipped with camera surveillance. The purpose of the surveillance is to prevent and investigate criminal incidents, such as vandalism, theft, or similar.

Images and video from the video surveillance are deleted automatically after 7 days. In the event of incidents that may lead to investigation by the Police, recordings may be retained for up to 30 days.

The legal basis for the processing is Article 6(1)(f) of the General Data Protection Regulation, which allows us to process personal data that is necessary to pursue a legitimate interest. Our legitimate interest is to be able to prevent and investigate criminal incidents, and to protect life and health.

If you are registered as a subscriber to our newsletter, we will regularly send you newsletters with good offers, information about various events and about life in general at Akvariet. In order to send you newsletters by email, you must provide your email address. Providing name and phone number is optional.

The legal basis for sending the newsletters is your voluntary consent given in connection with your signup as a subscriber, cf. Article 6(1)(a) of the General Data Protection Regulation.

You may withdraw your consent at any time if you no longer wish to receive further emails. You can do this via the unsubscribe button at the bottom of our newsletters, or by contacting AiB directly. We will then stop sending newsletters and delete the information registered about you as a subscriber.

From time to time AiB wishes to carry out customer satisfaction surveys or other types of surveys.

To send out the customer surveys we use the email addresses stored for newsletter subscribers and/or email addresses registered for annual pass holders. The surveys are conducted anonymously and we will always inform you of the purpose of the survey. We emphasise that we never sell our customer data to other parties.

It is entirely voluntary to participate in these surveys, and the legal basis is your

consent, cf. Article 6(1)(a) of the General Data Protection Regulation.

We use different types of cookies so that our website, akvariet.no, can function optimally and to improve your user experience when you visit the website.
A cookie is a small text file that is stored on the device you use when you download our website. These cookies are used for various purposes, including allowing our website to recognise the device when you visit us again, ensuring that you are sent the correct content, and storing information about your preferences or services for you. You can read more about the purpose of the various cookies below.

Storage and processing of information through the use of cookies is not permitted unless the user of the website has been informed about, and has consented to, which information is processed, what the purpose of the processing is and who processes the information, cf. Section 2-7b of the Electronic Communications Act (ekomloven). By visiting our website you consent to cookies being placed in your browser – given that most browsers are set to automatically accept cookies. If you do not wish to accept the use of cookies, you may withdraw your consent by changing the settings in your browser here.

Please note, however, that this may result in a reduced user experience.

The legal basis for the processing is Article 6(1)(f) of the General Data Protection Regulation, which allows us to process personal data that is necessary to pursue a legitimate interest. Our legitimate interest is to make services on the website function optimally.

We use Google Analytics to analyse how our users use our websites. Google Analytics is an analytics tool provided by Google, Inc. (“Google”) and is used to produce statistics that we use to improve and further develop our website. The statistics give us information about which pages are most visited, how long the visit lasts, which links are clicked and at which times the websites have the most traffic, etc.

We cannot trace the information back to you as an individual. All information is anonymised and processed at an aggregated level. By aggregated is meant that all the information is combined into a group and is not processed individually. The information is sent to Google and stored on servers in the USA. Statistics related to our websites are stored in Google Analytics for 56 months, and are subject to Google’s privacy policy. If you do not wish to contribute to the statistics, you may opt out with Google.

The legal basis for the processing is Article 6(1)(f) of the General Data Protection Regulation, which allows us to process personal data that is necessary to pursue a legitimate interest. Our legitimate interest is to improve our website.

The following cookies are used on Akvariet.no:

PHPSESSID:       The cookie is necessary for the website to function optimally, and is used to distinguish users from each other during the browser session, as well as to remember the user’s choices during the browser session, e.g. purchases via the online store, forms, etc. The cookie is deleted when the browser is closed.

_ga:                  The cookie is used by Google Analytics to collect statistics on how visitors use our website

_gid:                 The cookie is used by Google Analytics to collect statistics on how visitors use our website

Targeted marketing and ad tracking

We also use cookies to conduct targeted marketing in various channels and to track how effectively our advertising works. We receive statistics that give us information about the number of impressions, how many have clicked on the ad and how many have completed a purchase, etc. All statistics are generated at a de-identified and aggregated level, and cannot be linked to you as an individual. For these purposes we use the following advertising services:

Google Adwords is used to target and track ads towards users who perform relevant searches via Google’s search engine.

Google Doubleclick is used to target and track ads towards users who have visited our website, in addition to tracking whether the audience that has seen the ad and does not click on it visits our website at a later occasion

Facebook Pixel Script is an advertising pixel used to target and track ads towards users who have visited our website, when they later log in to Facebook or Instagram. In addition to tracking whether the audience that has seen the ad and does not click on it visits our website at a later occasion.

If you do not wish to be tracked, you may opt out here .

The legal basis for the processing is Article 6(1)(f) of the General Data Protection Regulation, which allows us to process personal data that is necessary to pursue a legitimate interest. Our legitimate interest is to be able to target and improve our marketing.

AiB will not disclose personal data to other third parties unless there is a legal basis for such disclosure. Disclosure may occur as a result of statutory obligations to which AiB is subject, such as disclosure to tax authorities.

AiB also uses several data processors (providers of IT systems and services) to process personal data on our behalf and for the purposes we have determined shall apply. All data processors have entered into strict data processing agreements that ensure the safeguarding of information security and that the processing is carried out in accordance with our instructions, cf. Article 28 of the General Data Protection Regulation.

AiB’s data processors may use subcontractors that process the personal data both within and outside the EU/EEA area. Personal data will not under any circumstances be transferred to third countries (countries outside the EU/EEA area) without satisfactory safeguards having been established to ensure that privacy is protected. Such transfers shall always take place based on valid transfer mechanisms, such as the EU’s standard contractual clauses or pursuant to the Privacy Shield agreement (USA). You may gain access to the transfer basis by contacting us by email: post@akvariet.no.

We use the following data processors:

• Come2gether – Provider of the point-of-sale system

• Apility – Operation of website, e-commerce/online store, digital marketing, participant lists for events. The information is stored on servers at a subcontractor for 3 or 7 days. The subcontractor is Privacy Shield-certified

• Apriil - collects data about website visits and tracking of ads

• Atea – Provides Akvariet’s guest network

• Google (Google Analytics) – analyses the use of the website. The information is stored on Google’s servers in the USA. The provider is Privacy Shield-certified

Personal data will not be stored longer than is necessary to fulfil the purpose of the processing or the statutory obligations we are subject to; for example, we are obliged to retain purchase history and accounting information for up to 5 years.

Here you will find information about the retention period for various processing purposes:

• Annual passes – Deleted 12 months after the expiry date

• Events and functions – Deleted after 3 years

• Ticket purchases – deleted 6 months after the date of use

• Guest network (Wifi) – Deleted after 12 hours

• Newsletter – Deleted when the subscriber unsubscribes

• Camera recordings – Deleted after 7 days

• Job applications – Deleted when the recruitment is completed

• Akvariet’s ticket fund – Deleted after the end of the application period

Furthermore, we may delete personal data about you if you ask us to do so, unless there are compelling reasons or we are subject to a statutory duty to retain the information further. You can read more about this under section 7 on your rights.

You have several rights related to our processing of personal data about you. Below you can read more about which rights you have and how to proceed in order to exercise your rights vis-à-vis AiB.

If you wish to exercise your rights, or have questions about this privacy policy, you may contact us by email: post@akvariet.no. We will respond to your enquiry without undue delay, and no later than within 30 days. If necessary we may ask you to present identification or other information that enables us to confirm your identity before we can fulfil your rights.

• You have the right to gain access to which personal data we process about you, and the right to request to receive a copy of your information

• If you believe that information registered about you is incorrect, incomplete or inaccurate, you may ask us to rectify your information

• In some cases you have the right to have information about you deleted before our ordinary deletion deadlines take effect, cf. section 6. The right to erasure may however be limited if, for example, we are subject to a statutory duty to retain the information, or there are other compelling reasons

• In some cases you may ask us to restrict the processing of your information. The right may for example be invoked if you believe that the information is incorrect or that there is no lawful basis for processing the information. Upon a request for restricted processing we will immediately halt the processing (except storage) until we have examined the objections.

• You have the right to object to our processing of information about you that is based on a balancing of interests, and you have the right to object to processing of your information for direct marketing. This means that we may no longer process the information.

• Data portability: You have the right to request that your personal data be transferred to another data controller or to yourself, if the processing is based on consent or an agreement with you. The information will be disclosed in a structured, commonly used and machine-readable format

• Withdrawal of consent: If the processing is based on consent, you have the right to withdraw your consent at any time. We must then stop further processing and delete your information.

• Complaint to Datatilsynet: If you are not satisfied with the way we process personal data or believe that we are breaching privacy legislation, you have the right to lodge a complaint with Datatilsynet. Information on how to proceed in order to complain can be found at www.datatilsynet.no.

The privacy policy will be amended as needed, for example in the event of changes in processing or regulations. The latest version of the policy is always available on our website, that is, exactly where you are now on akvariet.no. We will provide specific notice in the event of major changes.