Luneo (luneo.no) is operated by Digikrutt.no, c/o Andreas Forvik, post@digikrutt.no. This policy explains what data we process, why, and what rights you have.
Luneo is used by activity centres (our customers) to take bookings from their guests. That gives two roles:
To carry out and manage the booking, send the confirmation and link to your booking, let you change or cancel, handle payment, gift cards and the loyalty club, and give the activity centre reports on its own operations. The legal basis is the contract with you (the booking), consent where obtained (newsletter), and legitimate interest in secure operations.
Old bookings are archived and deleted automatically after retention periods the activity centre sets in the system. Accounting data is kept as long as the Norwegian Bookkeeping Act requires. Newsletter data is deleted when you unsubscribe.
We never sell data. We use sub-processors for hosting (cloud storage), sending e-mail and payment (Dintero, which in turn uses Vipps, card networks, Klarna and others). Sub-processors only process data under agreement with us.
luneo.no uses no tracking cookies. The booking form embedded on customers’ websites contains no tracking and no marketing cookies. The booking pages use only what is technically necessary for the booking to work.
You have the right to access, rectification, erasure, restriction, data portability and to object to the processing. Consent can be withdrawn at any time. For a booking, contact the activity centre. For luneo.no or the customer relationship, write to post@digikrutt.no. You can also complain to the Norwegian Data Protection Authority (Datatilsynet).
This policy may be updated. The date at the top shows the latest change.
