Privacy Policy

Adopted 21 October 2026

This privacy policy applies from 21 October 2026 and replaces the policy of 1 May 2018.

This policy explains which personal data we process when you visit debergenske.no, use our AI concierge, book a hotel room, table or spa treatment, send us an enquiry or contact us in other ways. It also explains why we do it, who we share the data with, how long we keep it and what rights you have.

1. Who is responsible

De Bergenske AS (company no. 933 078 515), Zander Kaaes gate 6, 5015 Bergen, Norway, is the data controller for debergenske.no, the AI concierge and the cookies on the website.

The hotels and restaurants in De Bergenske (including Bergen Børs Hotel, Grand Hotel Terminus, Villa Terminus, Zander K Hotel, Heimen Hotel and Skostredet Hotel) are operated by separate companies in the group. When you book a stay, a table or a spa treatment, the company operating that venue is responsible for the data about your booking. You do not need to work out which company that is: contact us at the address below and we will make sure your request reaches the right place.

Privacy contact: post@debergenske.no, phone +47 55 21 25 50, or by post to De Bergenske AS, Zander Kaaes gate 6, 5015 Bergen, Norway.

2. What we process, why and for how long

Hotel bookings

When you book at book.debergenske.no or book.bergenbors.no, we process your name, email, phone number, address, dates, room type, number of guests, any requests you make and payment details. We use this to deliver your stay, send confirmations and practical information before, during and after your stay, and handle changes, cancellations and complaints.

Legal basis: performance of a contract with you (GDPR Article 6(1)(b)) and legal obligation (Article 6(1)(c)) for accounting. The data is kept as long as needed for your stay and any claims afterwards. Accounting records are kept for five years after the end of the financial year, as required by the Norwegian Bookkeeping Act. Card details are handled by the payment provider, not by us.

Table and spa bookings

When you book a table at one of our restaurants or a treatment at Skostredet Spa, we process your name, phone number, email, number of guests, time and any comments. Bookings are made in the Gastroplanner booking system.

Legal basis: performance of a contract (Article 6(1)(b)). If you tell us about allergies, food intolerances or other needs, we only use this to prepare for your visit, based on your explicit consent (Article 9(2)(a)). The data is kept as long as needed for your visit and any follow-up.

Meeting, event and group enquiries

When you send an enquiry through a form on the website, we process your name, company, contact details and what you tell us about the event. The forms are provided by JotForm.

Legal basis: steps taken before entering into a contract (Article 6(1)(b)). If no agreement is made, we delete the enquiry no later than 12 months after our last contact.

The AI concierge

On debergenske.no you can ask questions to a digital AI concierge. The concierge does not ask for personal data and does not collect any data about you beyond what you write in the conversation yourself. No login is needed, and we recommend that you do not share sensitive information in the chat.

What you write is sent to our language model, provided by Mistral AI in France, which processes the text on our behalf to generate the answer. The conversation is linked to a temporary session ID stored in your browser, which disappears when you close the tab. We do not use conversations for marketing or to build profiles of you.

Legal basis: our legitimate interest in giving you quick help and answers around the clock (Article 6(1)(f)). Answers are generated automatically and may contain errors. Bookings and agreements are always made in our booking systems or directly with us, never in the chat.

Customer service and enquiries

When you contact us by email, phone or social media, we process what you share with us in order to reply. Legal basis: contract or our legitimate interest in answering enquiries (Article 6(1)(b) and (f)). Enquiries are deleted when the matter is closed and no longer needed.

Newsletter

If you sign up for our newsletter, we use your email address and, if provided, your name to send you offers and news. Legal basis: consent (Article 6(1)(a)). You can unsubscribe at any time using the link in every email, and we will then remove you from the list.

Gift cards

Gift cards are bought and redeemed through the gift card solution Givn (givn.no). When you buy a gift card, your name, email and purchase details are processed, and when the gift card is used with us, the redemption is registered. Legal basis: performance of a contract (Article 6(1)(b)) and legal obligation for accounting (Article 6(1)(c)). Purchase records are kept for five years after the end of the financial year, as required by the Norwegian Bookkeeping Act.

Job applicants

If you apply for a job with us, we process your application, CV and other information you send in order to assess you for the position. Legal basis: steps taken before entering into an employment contract (Article 6(1)(b)). Applications are deleted no later than six months after the position has been filled, unless you consent to us keeping them longer.

Statistics, improvement and marketing

If you accept cookies, we measure how the website is used so that we can improve it, and we measure the effect of our advertising. Legal basis: consent (Article 6(1)(a) and section 3-15 of the Norwegian Electronic Communications Act). If you decline, we only set the cookies needed for the website to work. See section 3.

Operations and security

When you visit the website, the servers record technical data such as IP address, browser type and time. This is needed to deliver the pages, detect errors and protect the website from misuse. Legal basis: our legitimate interest in a secure and stable website (Article 6(1)(f)). Logs are kept for a short period.

3. Cookies

Cookies are small text files stored in your browser. The first time you visit debergenske.no, we ask whether you accept cookies for statistics and marketing. Declining is as easy as accepting, and the website works either way. Your choice applies for six months and is shared between debergenske.no and book.debergenske.no. The restaurant booking system has its own consent choice.

How to change your choice: Delete cookies for debergenske.no in your browser. The next time you visit the website, you will be asked again.

Necessary (always on)

  • db_consent_v1 (De Bergenske): remembers your consent choice. 6 months.

  • db-chat-session-id (De Bergenske): keeps your conversation with the AI concierge together. Deleted when you close the tab.

  • The booking systems use their own technical cookies for the basket, payment and login.

Functional

  • Mapbox: displays maps and stores technical data about the map view in your browser.

  • Cloudinary: delivers images and video and may store an anonymous ID in your browser for playback.

  • Adobe Fonts: delivers the fonts on the website. Sets no cookies, but your IP address is sent to Adobe when the fonts load.

Statistics (only with consent)

  • Google Analytics (_ga, _ga_*): measures visits, traffic sources and bookings across debergenske.no and the booking systems. 2 years. Data in Google Analytics is kept for 14 months.

  • Microsoft Clarity (_clck, _clsk, CLID): shows how pages are used, such as clicks and scrolling, so that we can fix errors and improve the user experience. Text you type into fields is masked. Up to 1 year.

Marketing (only with consent)

  • Google Ads (_gcl_au, _gcl_aw, _gcl_ls, and IDE on doubleclick.net): measures whether our ads lead to bookings and may be used to show you relevant ads. Up to 13 months.

  • Microsoft Advertising (_uetsid, _uetvid, MUID): measures whether our ads on Bing and Microsoft lead to bookings. Up to 13 months.

We use Google Consent Mode. If you decline, Google and Microsoft set no cookies for statistics or advertising, but the services may receive anonymous signals without cookies, which are used to model aggregated statistics.

4. Who we share data with

We never sell personal data. We use providers that process data on our behalf under a data processing agreement with us:

  • BookVisit (Sweden): hotel bookings

  • Gastroplanner (Norway): table and spa bookings

  • Givn (Norway): gift card solution

  • Payment providers such as Nets/Nexi: card payments

  • JotForm (EU): enquiry forms

  • Mistral AI (France): the language model behind the AI concierge

  • Vercel: website hosting

  • Storyblok (EU): content management for the website

  • Cloudinary, Mapbox and Adobe Fonts: images, video, maps and fonts

  • Google and Microsoft: statistics and ad measurement, only with consent

  • Maverix: the marketing and web agency that runs the website, tracking and advertising for us

The companies in De Bergenske share data with each other when needed to deliver our services, for example when a hotel guest books a table in the restaurant. We disclose data to the police or other authorities when required by law. If all or part of the business is sold or reorganised, data may be transferred to the new owner, who must follow this policy.

5. Transfers outside the EU/EEA

Most data is processed within the EU/EEA. Some providers, such as Google, Microsoft, Vercel, Cloudinary, Mapbox and Adobe, may process data in the United States. We safeguard such transfers with the EU-US Data Privacy Framework where the provider is certified, or with the European Commission's standard contractual clauses.

6. Security

We have technical and organisational measures in place to protect your data against loss, alteration and unauthorised access, including encrypted transfer, access control and agreements with our providers. Only employees who need the data for their work have access to it.

7. Your rights

You have the right to:

  • access the data we hold about you and receive a copy

  • have incorrect or incomplete data corrected

  • have data erased when we no longer have grounds to keep it

  • ask us to restrict processing

  • receive data you have given us in a machine-readable format (data portability)

  • object to processing based on our legitimate interest, and to direct marketing

  • withdraw consent at any time, without affecting processing before the withdrawal

Email us at post@debergenske.no. We reply without undue delay and within one month at the latest. It is free of charge. We may ask you to confirm your identity before we disclose any data.

If you believe we process your data in breach of the rules, you can complain to the Norwegian Data Protection Authority, Datatilsynet (datatilsynet.no). We appreciate it if you contact us first so that we can put things right.

8. Links to other websites

The website links to other services, such as social media and Givn. They have their own privacy policies, and we are not responsible for how they process data.

9. Changes

We update this policy when we start using new services or the rules change. The date at the top shows when the current version was adopted. If we make significant changes, we will let you know on the website.