Privacy Policy
Last updated and reviewed: 4. December 2025
Introduction
Data Controller Information
What Personal Data We Collect
How We Use Your Personal Data
Legal Bases for Processing
Cookies and Tracking Technologies
Sharing and Disclosure of Data
International Data Transfers
Data Retention
Your Rights under GDPR
Data Security
Links to Other Websites & Third Party Tools
Children’s Privacy
AI and Data Privacy
Changes to This Policy
Contact Information
1. Introduction
At The Way Travel we value your privacy and are committed to protecting your personal data.
This Privacy Policy explains how we collect, use, and safeguard your personal data when you visit our website https://www.twtravel.net, communicate with us, or use our services.
We process your personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act.
Please read this policy carefully to understand how we handle your data.
Definition
In this Privacy Policy:
“We,” “Us,” “Our” refer to The Way Travel (https://thewaytravel.net), the owner and operator of this website (the “Site”).
“Site” refers to our website, including all pages, content, and services accessible at The Way Travel (https://www.twtravel.net).
“You,” “Your,” “User,” “Customer,” or “End User” refer to any individual who accesses, browses, or uses the Site, or communicates with us through it (including by submitting a contact form or subscribing to our newsletter).
“Personal Data” means any information that can identify you directly or indirectly, such as your name, email address, or IP address, as defined under applicable data protection laws (including the EU General Data Protection Regulation, or GDPR).
By using our Site, you acknowledge that you have read and understood this Privacy Policy and agree to how we process your personal data as described herein.
2. Data Controller Information
The data controller responsible for the processing of your personal data is:
The Way Travel
Email: info@twtravel.net
Website: https://www.twtravel.net
If you have questions about how we handle your data, please contact us at the email above.
3. What Personal Data We Collect
We may collect and process the following categories of personal data when you use our Site or interact with us:
We do not intentionally collect or process sensitive personal data (e.g., health information, religious beliefs, political opinions).
4. How We Use Your Personal Data
We use your personal data only for lawful purposes and only to the extent necessary to provide and improve our services.
The main purposes for which we process data are:
We do not sell or rent your personal data to third parties.
Contact Form and Business Inquiries
If you contact us through our website’s contact form—for example, to ask a question, request information, or make a business inquiry—we collect the personal data you provide, such as your name, email address, and any other information you include in your message.
We use this information solely for the purpose of responding to your inquiry and maintaining business correspondence. Your data will not be used for marketing purposes unless you explicitly consent to receive marketing communications (for example, by signing up for our newsletter).
How Your Data Is Handled
Storage and Processing: The data you submit via the contact form is securely stored and processed for the purpose of managing and responding to your request.
Third-Party Email Provider: We use Google Workspace as our email service provider to manage and respond to inquiries. This means your email address and message content may be processed by Google according to their privacy practices. For more information, please review Google Privacy Policy.
Website Platform: Our website is hosted on Squarespace, which may process some technical data (such as IP addresses, form submission logs, and device information) in accordance with their own policies. You can read more about how Squarespace handles data here: Squarespace Privacy Policy.
We retain your messages only for as long as necessary to handle your request or maintain a record of correspondence, unless a longer retention period is required by law or for legitimate business purposes.
Your Rights
If you are located in the EEA or UK, you have the right to:
Request access to, correction of, or deletion of your personal data.
Object to or restrict our processing of your data.
Request data portability (where applicable).
Withdraw consent at any time (if processing is based on consent).
If you wish to have your data deleted, corrected or exercise these rights, please contact us directly at info@twtravel.net.
Newsletter Subscriptions
If you subscribe to our newsletter, we will collect your email address and, if you choose to provide it, your name. This data is used solely to send you periodic updates, news, or promotional content that you have opted in to receive.
Legal Basis for Processing (GDPR)
Our processing of your personal data for newsletter purposes is based on your consent under Article 6(1)(a) GDPR.
You can withdraw your consent at any time by clicking the “unsubscribe” link included in our emails or by contacting us directly at info@twtravel.net. Withdrawing consent will not affect the lawfulness of processing before withdrawal.
How Your Data Is Handled
We use Squarespace and Google Workspace to manage and distribute our newsletters. This means your email address and name (if provided) may be processed by that provider in accordance with their privacy policy. Technical data related to signup forms hosted on our site may also be processed by Squarespace in accordance with their Privacy Policy.
Data Retention
We retain your data for as long as you remain subscribed. When you unsubscribe, your details will be deleted from our mailing list within a reasonable timeframe, unless a longer retention period is required for compliance or legal reasons.
Your Rights
If you are located in the EEA or UK, you have the right to:
Access, correct, or request deletion of your personal data;
Withdraw your consent at any time (for newsletter subscriptions);
Object to or restrict processing based on legitimate interest;
Request data portability (where applicable);
Lodge a complaint with your local data protection authority.
To exercise your rights, please contact us at info@twtravel.net.
5. Legal Bases for Processing (Article 6 GDPR)
We rely on the following legal grounds when processing your personal data:
If you are located in the European Economic Area (EEA) or the United Kingdom, our processing of your personal data submitted through the contact form is based on:
Article 6(1)(f) GDPR – Legitimate Interest: We have a legitimate interest in responding to inquiries and maintaining business relationships.
Article 6(1)(b) GDPR – Performance of a Contract: If your inquiry relates to an existing or potential contract, processing is necessary to take steps at your request prior to entering into a contract.
6. Cookies and Tracking Technologies
What Are Cookies?
Cookies are small text files placed on your device that help us provide certain functionalities, remember your preferences, and analyze traffic on our Site.Types of Cookies We Use
Essential cookies – Required for the operation of the Site (e.g., session management, security).
Analytical cookies – Help us understand how visitors use the Site
Functional cookies – Store preferences such as language or region.
Marketing cookies – Track user behavior across sites to deliver personalized advertising (only used with consent).
Consent for Cookies
When you visit our Site, a cookie banner will appear asking for your consent to use non-essential cookies. You can accept or reject these cookies at any time.Managing Cookies
You can delete or block cookies in your browser settings. Please note that disabling cookies may limit the functionality of our Site.Third-Party Tools
We may use third-party analytics providers (e.g., Google Analytics) to analyze website usage. These providers may use cookies and collect anonymized statistics.
Data may be transferred to servers outside the EEA, in which case we ensure appropriate safeguards (e.g., Standard Contractual Clauses) are in place.
7. Sharing and Disclosure of Data
We treat your personal data confidentially and only share it when necessary and lawful.
We may disclose your data in the following limited circumstances:
Service Providers (Data Processors)
We engage trusted third-party service providers who assist us in operating the Site and delivering services.
These may include:Website hosting providers
Email and newsletter platforms
Analytics tools (Google Analytics)
IT and customer support providers
Each provider only processes your data according to our instructions and under a data processing agreement (DPA) as required by Article 28 GDPR.
Legal Obligations
We may disclose your data when required by law, court order, or governmental authority.Business Transfers
In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the new owner under the same privacy protections.Your Consent
We will never share your data with third parties for marketing purposes without your explicit consent.
8. International Data Transfers
Data Location
As a rule, we store and process your personal data within the European Economic Area (EEA).Transfers Outside the EEA
If data is transferred to countries outside the EEA (for example, when using third-party services like Google Analytics or email marketing tools), we ensure an adequate level of data protection by:Using service providers located in countries recognized by the European Commission as providing adequate protection; or
Implementing Standard Contractual Clauses (SCCs) approved by the European Commission; or
Obtaining your explicit consent where required.
Your Rights on Transfers
You can request more information about international transfers or obtain a copy of the applicable safeguards by contacting us at info@twtravel.net.
9. Data Retention
Retention Periods
We keep your personal data only for as long as necessary for the purposes outlined in this Privacy Policy, or as required by applicable laws (such as accounting or tax regulations).Typical retention examples:
Customer inquiries: up to 12 months after the last contact
Newsletter data: until you withdraw consent or unsubscribe
Analytics data: typically retained for 14–26 months, depending on tool settings
Booking or transaction records: as required by Norwegian accounting law (usually 5 years)
Deletion and Anonymization
When data is no longer needed, we will delete or anonymize it securely.Backup Copies
Data in backups will be deleted as part of routine backup cycles and not retained longer than necessary.
10. Your Rights under GDPR
As an individual located in the EEA, you have the following rights regarding your personal data:
To exercise your rights, please contact us at info@twtravel.net.
We will respond to your request within 30 days, in accordance with GDPR requirements.
11. Data Security
We take appropriate technical and organizational measures to protect your personal data against loss, misuse, unauthorized access, disclosure, alteration, or destruction.
These measures may include:
Secure (HTTPS) website connections
Access control and authentication
Data encryption and anonymization where appropriate
Regular backups and system monitoring
Employee confidentiality agreements and training
While we strive to ensure full security, please note that no method of data transmission over the internet is 100% secure.
12. Third-Party Links to Other Websites & Third Party Tools And Analytics
Our website may contain links to third-party websites or services that are not operated by The Way Travel (https://www.twtravel.net).
We are not responsible for the privacy practices or content of those external sites.
We encourage you to review the privacy policies of any site you visit.
Affiliate Disclosure
Posts on this website may contain affiliate links. This means that if you click on a link and make a purchase, we may earn a commission — at no extra cost to you. These commissions help support the maintenance and growth of our site. We only recommend products and services that we genuinely believe in and that fit our standard of quality and relevance.
Sponsored Content Disclaimer
Some articles, features, or social media posts on this website may be created in collaboration with brands, destinations, or tourism boards as part of paid partnerships or sponsored campaigns. When content is sponsored, it will always be clearly disclosed at the beginning of the article or post.
All sponsored features are produced with the same level of editorial integrity and quality as our independent content. Any opinions, recommendations, or reviews shared are entirely our own, based on genuine experiences and personal perspectives.
We collaborate only with partners who reflect our values of authenticity, excellence, and refined travel. Sponsorships allow us to continue creating thoughtful, inspiring content — but they never determine what we write or how we write it.
Use of Third-Party Tools and Services
We use certain third-party tools and services to operate our website efficiently, manage communications, and enhance user experience. These providers may process limited personal data on our behalf, such as contact information, technical data, or usage metrics, depending on the function of the service.
We carefully select all third-party providers and ensure they process data in compliance with applicable data protection laws (including GDPR, where relevant).
Website Hosting and Platform (Squarespace)
Our website is hosted and managed through Squarespace, which provides website infrastructure, analytics, and content management functionality. Squarespace may collect technical data such as IP addresses, device information, and browsing activity as necessary to ensure the site’s proper operation.
You can read more in the Squarespace Privacy Policy.
Other Third-Party Integrations
From time to time, we may integrate additional third-party services to improve our website’s functionality — such as embedded booking forms, payment processors, social media widgets, or analytics tools.
When these features are used, your browser may connect directly to the provider’s servers, which may collect limited personal or technical information (such as IP address or interaction data) as necessary for the feature to work.
We will only use reputable third-party services that align with our privacy standards. Each provider processes your data according to its own privacy policy, which we encourage you to review before using any integrated features.
Use of Google Services
We use certain Google services on our website to analyze performance, improve user experience, and, where applicable, serve relevant advertising. These services may use cookies or similar technologies to collect information such as your IP address, browser type, device information, and on-site interactions.
Google Analytics
We use Google Analytics to understand how visitors interact with our website. This service collects anonymous statistical data such as page views, time spent on site, and referring pages. Your IP address may be anonymized before being stored.
For more information, see the Google Analytics Privacy Policy.
Google AdSense / Google Ads
If we display advertising on our site, Google AdSense or Google Ads may place cookies to deliver personalized or non-personalized ads. You can learn more about how Google uses information from sites or apps that use its services here: How Google uses data when you use our partners' sites or apps.
Google Fonts, Maps, or YouTube Embeds
Our website may use Google Fonts, Google Maps, or embedded YouTube videos to enhance design and functionality. When these features are loaded, your browser connects directly to Google’s servers, which may collect your IP address and other technical data necessary to deliver this content.
For details, see the Google Privacy Policy.
13. Children’s Privacy
Our services are not directed at children under 18 years of age, and we do not knowingly collect personal data from minors.
If we become aware that we have collected personal data from a child without appropriate parental consent, we will delete it promptly.
14. AI and Data Privacy
If AI technologies are used on this website — for example, in chat features, personalized recommendations, or analytics — these tools may process limited data to improve the user experience. We do not use AI to make automated decisions that have legal or significant personal effects.
We take your privacy seriously and comply with applicable data protection laws, including the GDPR and other international standards. Any personal data processed through AI tools is handled securely, and you may contact us at any time to learn more about how your data is used or to request its deletion.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons.
When we make material changes:
We will post the updated version on our website; and
If required, we will notify you via email or through the Site before the changes take effect.
The date of the last update will always be shown at the top of the policy.
16. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
The Way Travel
Email: info@twtravel.net
Website: https://www.twtravel.net