Legal
Privacy Policy
Last updated: June 2026 · Version 2026-06
1. Who we are
Rentell is a holiday-rental booking platform specialising in vacation properties, primarily on the west coast of Norway. This privacy policy explains how we collect, use and protect your personal data in accordance with the EU/EEA General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act (personopplysningsloven).
Data controller:
Rentell AS (Norwegian org. no.: 920 772 137)
Email: info@rentell.no
Phone: +47 45 777 888
Address: Hjellestadvegen 313, 5259 Hjellestad, Norway
2. What we collect
When you enquire or book
- Full name
- Email address
- Telephone number
- Billing address
- Payment information — processed by our payment provider and never stored by us
- Check-in and check-out dates, number of guests
- Any special requests you provide
When you subscribe to our newsletter
- Email address
- Destination preferences (optional)
When you visit our website
- IP address (anonymised in analytics)
- Browser information and pages visited
- Cookies — see our cookie policy
3. Legal basis for processing
Under GDPR Article 6, we rely on the following lawful bases:
| Purpose | Lawful basis | Article |
|---|---|---|
| Fulfilling your booking and processing payment | Performance of a contract | Art. 6(1)(b) |
| Guest communications about your stay | Performance of a contract | Art. 6(1)(b) |
| Marketing newsletters | Consent | Art. 6(1)(a) |
| Website analytics | Consent | Art. 6(1)(a) |
| Accounting obligations (5 years) | Legal obligation | Art. 6(1)(c) |
| Service improvements | Legitimate interest | Art. 6(1)(f) |
4. How we use your data
- Booking & stay: Managing your reservation, sending confirmation, check-in details and receipts.
- Communication: Responding to enquiries and providing practical information about your stay.
- Newsletter: Sending availability updates, new properties and seasonal tips — only with your consent.
- Cross-selling: Suggesting other Rentell properties based on your preferences — only with consent.
- Website improvement: Analysing usage patterns — only with consent (cookies).
5. Who we share data with
We share personal data with the following third parties, all subject to data-processing agreements:
| Third party | Purpose | Location |
|---|---|---|
| Payment provider (Stripe / Vipps / Nets) | Payment processing | EU/EEA |
| Guesty | Channel synchronisation and booking management | USA (adequate safeguards) |
| Enso Connect | Automated guest messaging | EU/EEA |
| Hosting platform | Website operations | EU/EEA |
| Airbnb / Booking.com / VRBO | Bookings via their platforms | USA/EU |
We never sell your personal data to third parties.
6. International transfers
Rentell is based in Norway within the EEA. Your data is primarily processed and stored within the EEA.
Where data is transferred outside the EEA (e.g. to the United States via Guesty), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or an adequacy decision.
7. Retention and deletion
| Data type | Retention period | Basis |
|---|---|---|
| Guest profile and booking data | 3 years after last booking | Legitimate interest |
| Reservation data and invoices | 5 years | Norwegian Bookkeeping Act § 13 |
| Message history | 2 years | Legitimate interest |
| Consent records | 5 years after last activity | Accountability obligation |
| Newsletter subscription | Until unsubscription + 30 days | Consent |
8. Your rights
Under the GDPR (Articles 15–21) and the Norwegian Personal Data Act, you have the following rights:
- Access (Art. 15): Request a copy of all personal data we hold about you (Subject Access Request).
- Rectification (Art. 16): Correct inaccurate or incomplete data.
- Erasure (Art. 17): Request deletion of your data (“right to be forgotten”), subject to legal retention requirements.
- Restriction (Art. 18): Request temporary restriction of processing.
- Data portability (Art. 20): Receive your data in a machine-readable format.
- Objection (Art. 21): Object to processing based on legitimate interest.
- Withdraw consent: You may withdraw consent at any time without affecting the lawfulness of prior processing.
We will respond to any request within one calendar month, in accordance with GDPR Art. 12(3).
9. Right of withdrawal & accommodation bookings
Under Norwegian and EU consumer law (angrerettloven / the Distance Selling Directive), consumers generally have a 14-day right of withdrawal for contracts concluded at a distance.
However, angrerettloven § 22 (f) provides that the right of withdrawal does not apply to contracts for the provision of accommodation for a specific date or period. Because our holiday-rental bookings are for specific check-in and check-out dates, the statutory right of withdrawal does not apply to confirmed reservations.
Our cancellation terms are set out in the booking confirmation and any applicable listing conditions. We encourage you to review these before confirming a booking.
10. Security
We use encryption (TLS/HTTPS) for all data transmission and role-based access controls for staff. Payment data is handled exclusively by PCI DSS-certified providers and is never stored on our servers.
In the event of a personal-data breach posing a risk to your rights and freedoms, we will notify Datatilsynet (the Norwegian Data Protection Authority) within 72 hours and inform you without undue delay, in accordance with GDPR Articles 33–34.
11. Contact & complaints
Questions about your data? Contact us:
info@rentell.no
+47 45 777 888
Supervisory authority:
If you are dissatisfied with how we handle your data, you have the right to lodge a complaint with Datatilsynet (the Norwegian Data Protection Authority):
Postboks 458 Sentrum, 0105 Oslo
Phone: 22 39 69 00
datatilsynet.no/klage
See also our cookie policy.