Privacy Policy

1. Introduction

This Privacy Policy explains how Bonatt collects, uses, stores, and shares personal data when you use Bonatt.com or contact us through our website.

Bonatt is a hotel, meeting venue, and event location sourcing service. We help clients find suitable hotels, meeting rooms, event venues, group accommodation, and related hospitality services.

We process personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) as implemented in Norway through the EEA framework.

2. Who Is Responsible for Your Personal Data

The data controller for personal data processed through Bonatt.com is:

Bonatt
Email: contact@bonatt.com

3. Personal Data We Collect

When you submit a request or contact Bonatt, we may collect the following types of personal data:

• name
• email address
• phone number
• company or organization name
• preferred location
• date or timeframe
• number of guests, participants, or rooms
• budget information, if provided
• details about your hotel, meeting, event, or accommodation request
• any other information you choose to provide in your message

We may also collect basic technical information when you visit our website, such as IP address, browser type, device information, and website usage data, depending on Shopify, cookies, and analytics tools used on the site.

4. How We Use Personal Data

We use personal data to:

• respond to your request
• understand your hotel, meeting, event, or accommodation needs
• contact relevant hotels, venues, suppliers, or partners
• request availability, prices, and offers
• send you suitable options
• assist with communication before a possible booking
• manage customer and partner communication
• improve our website and services
• comply with legal obligations

5. Legal Basis for Processing

We process personal data based on one or more of the following legal bases:

• Legitimate interest: to respond to requests, source hotel or venue options, communicate with clients and suppliers, and operate our business.
• Contract or steps before a contract: when processing is necessary to handle a request that may lead to a booking or agreement.
• Consent: where you have given consent, for example for certain cookies, marketing, or optional communications.
• Legal obligation: where processing is necessary to comply with applicable laws.

6. Sharing Personal Data with Hotels and Suppliers

To provide our service, we may share relevant request details with hotels, venues, suppliers, booking partners, or other relevant service providers.

We only share information that is reasonably necessary to source options, request offers, or assist with a possible booking.

You should not submit sensitive personal data unless it is necessary for your request.

7. Shopify and Other Service Providers

Bonatt.com is built on Shopify. Shopify may process certain personal data and technical information as part of hosting, operating, and securing the website.

We may also use service providers for email, analytics, website functionality, security, and business operations. These providers may process personal data on our behalf where necessary.

8. International Transfers

Some service providers may process personal data outside Norway or the EEA.

Where personal data is transferred outside the EEA, we aim to ensure that appropriate safeguards are used, such as adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms.

9. How Long We Keep Personal Data

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy.

Request and communication data may be kept for as long as needed to handle your request, follow up with hotels or suppliers, document business communication, manage potential bookings, and comply with legal obligations.

We may delete or anonymize personal data when it is no longer needed.

10. Cookies and Analytics

Bonatt.com may use cookies or similar technologies to operate the website, improve user experience, remember preferences, and understand website traffic.

Some cookies may be necessary for the website to function. Other cookies, such as analytics or marketing cookies, may require consent depending on how they are used.

You can manage cookies through your browser settings and, where available, through the website’s cookie settings.

11. Marketing Communication

Bonatt may send service-related communication in response to your request.

We will only send marketing communication where we have a valid legal basis to do so. You can unsubscribe from marketing communication at any time if such communication is offered.

12. Your Rights

Depending on the circumstances, you may have the right to:

• request access to personal data we hold about you
• request correction of inaccurate personal data
• request deletion of personal data
• request restriction of processing
• object to processing based on legitimate interests
• request data portability
• withdraw consent where processing is based on consent
• lodge a complaint with a data protection authority

To exercise your rights, contact us at contact@bonatt.com.

13. Data Security

We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.

No website or online service can be guaranteed to be completely secure, but we work to protect the information we process.

14. Children

Bonatt’s services are intended for businesses, organizations, and adults looking for hotel, meeting, event, or accommodation services.

We do not knowingly collect personal data from children.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

The latest version will be published on Bonatt.com with the updated date shown at the top of the page.

Back to homepage