--- title: "Privacy Policy" url: https://nordvik-stay.kimisuite.si/privacy/ language: en description: "Privacy Policy – Nordvik Stay" --- # Privacy Policy Notice: This text was generated automatically from the information provided by the site owner. It is not legal advice and does not replace it. The site owner remains responsible for its accuracy and completeness. ## Controller - Controller: **KIMISUITE Ltd** (Nordvik Stay), Strandvegen 14, 6300 Lakeside, United Kingdom - Email: [hello@nordvikstay.com](mailto:hello@nordvikstay.com) - Phone: [+386 1 234 5678](tel:+38612345678) Protecting your personal data matters to us. We process it only to the extent permitted by law. This notice explains which data we process when you use this website. ## Legal bases We process personal data on the basis of the data protection law that applies where our business is based (United Kingdom) and, where it applies to this website (for example when we offer goods or services to people in the European Union), the General Data Protection Regulation (GDPR). The article references in this notice refer to the GDPR. Depending on the purpose we rely on your consent (Art. 6(1)(a) GDPR), on performance of a contract or pre-contractual steps (point (b)), on a legal obligation (point (c)) or on our legitimate interest (point (f)). Information on your device that is not strictly necessary is only stored or read with your consent. ## Hosting This website is operated as a static website via the KIMISUITE platform. The hosting provider is Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany; the servers are located in data centres in Germany and Finland. KIMISUITE and the hosting provider process data solely on our behalf and on our instructions (Art. 28 GDPR): a data processing agreement is in place with KIMISUITE, and the hosting provider is engaged as a sub-processor. Information on the hosting provider's data processing: [data processing agreement](https://www.hetzner.com/AV/DPA_en.pdf). ## Server log files When you visit this website the server processes technically necessary connection data: IP address, date and time, page requested, amount of data transferred, status code, browser and operating system. This is required to deliver the site and to keep it secure and stable (Art. 6(1)(f) GDPR). The log files are deleted after 7 days at the latest. ## Contact by email or phone If you contact us by email or phone we process your details (e.g. name, contact data, content of your request) to handle your request and for follow-up questions (Art. 6(1)(b) or (f) GDPR). We do not pass this data on without your consent and delete it as soon as it is no longer needed and no statutory retention duty applies. ## Contact form Your details in the contact form (e.g. name, email address, phone number, message) are received by a form service of the KIMISUITE platform on servers in the EU and forwarded straight to our own mailbox by email; your message is then deleted there and is not stored permanently at KIMISUITE. We process it in our mailbox to answer your request (Art. 6(1)(b) or (f) GDPR) and delete it when it is no longer needed. To protect against spam we use an invisible check field, a small automatic computing task (ALTCHA) and rate limits. No cookies are set and no third-party providers are involved; IP addresses are kept only as a non-reversible hash and only for a few days (Art. 6(1)(f) GDPR, protection against abuse). ## Cookies, consent and withdrawal Our website uses a consent dialog. Services that are not strictly necessary (categories: external content) are only loaded after you consent; declining is equally easy. Technically necessary storage (e.g. your choice in the consent dialog) does not require consent. Widgets of the KIMISUITE platform (e.g. appointment booking or reservations) are only loaded after your click or consent (category external content). The contact form sets no cookies and can be used without consent. You can change or withdraw your decision at any time with effect for the future via the "Cookie settings" link in the footer of this website. The lawfulness of processing carried out until withdrawal remains unaffected (Art. 7(3) GDPR). ## KIMISUITE widgets We embed widgets of the KIMISUITE platform (e.g. forms, appointment booking or menu) which are loaded from servers in the EU. We process your entries in them (e.g. name, contact details, requested date or reservation) to handle your request (Art. 6(1)(b) GDPR); technical connection data is transmitted to the platform’s servers, which act on our behalf. ## Map (OpenStreetMap) With your consent (two-click solution) we load map tiles from OpenStreetMap, a service of the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. Your IP address is transmitted to the OpenStreetMap servers. The EU Commission has issued an adequacy decision for the United Kingdom. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the cookie settings. ## Your rights Depending on the applicable law, you have in particular the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21). You can withdraw any consent at any time with effect for the future. To exercise your rights write to us at [hello@nordvikstay.com](mailto:hello@nordvikstay.com). ## Right to lodge a complaint If you believe that the processing of your data violates data protection law, you can lodge a complaint with the data protection authority where our business is based (United Kingdom), if there is one. Where the GDPR applies, you can also contact the data protection authority of the EU member state where you live or work (overview: [edpb.europa.eu](https://edpb.europa.eu/about-edpb/about-edpb/members_en)). ## Changes to this notice We update this privacy notice when our website or the legal situation changes. Last updated: 2026-10-28. --- **Nordvik Stay** - Address: Strandvegen 14, Lakeside 6300 - Phone: +386 1 234 5678 - Email: hello@nordvikstay.com