Privacy Policy
Last updated: 31 October 2026
This policy explains how Nordic Riviera Tours handles personal data when you visit our website or send us a request. We process personal data in accordance with the EU General Data Protection Regulation (GDPR), which applies in Norway through the Norwegian Personal Data Act (personopplysningsloven).
1. Who is responsible for your data
Nordic Riviera Tours is the commercial name of NORDIC RIVIERA TRANSPORT OG TOURS C/O ELIE PESCARMONA, a Norwegian sole proprietorship (ENK), organisation number 916 767 501, Middelthuns gate 25B, 0368 Oslo, Norway. This business is the data controller for the personal data described in this policy.
For any privacy question or request, contact us at info@nordicrivieratours.com.
2. What information we collect
We only collect the information you choose to give us through our forms or by email, plus limited technical data needed to run the website.
- Booking and information requests: name, email, phone number, country of residence, chosen tour and dates, number of motorcycles, riders and passengers, motorcycle choice or rental preference, optional upgrade request and message, website language and the estimated price shown.
- Contact form: name, email, phone number, tour of interest, your preferences (motorcycle, rider type, room, duration, route type), message and website language.
- Private Tour requests: first and last name, email, phone number, preferred region, duration, route type, motorcycle preference and comment.
- Women Riders registrations: first and last name, email, country, riding experience, preferred destination, message, and your consent to be contacted.
- Emails you send us: your email address and the content of your message.
- Technical data: when you visit the website, our hosting and security providers process your IP address, browser information and the pages requested, so the site can be delivered, protected and measured in anonymous statistics (see our Cookie Policy).
3. Why we use your information and our legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Answering booking and information requests, preparing an offer and organising a booked trip | Art. 6(1)(b): steps taken at your request before entering into a contract, and performance of the contract |
| Answering contact messages and Private Tour requests | Art. 6(1)(b) when your message concerns a trip; otherwise Art. 6(1)(f): our legitimate interest in answering enquiries |
| Informing you about women-only tours once they are available (Women Riders) | Art. 6(1)(a): your consent, which you can withdraw at any time |
| Keeping records of confirmed bookings for accounting and legal purposes | Art. 6(1)(c): legal obligations |
| Operating and securing the website and producing anonymous visit statistics | Art. 6(1)(f): our legitimate interest in a secure, working website |
| Establishing or defending legal claims | Art. 6(1)(f): our legitimate interest |
We do not run a newsletter or marketing email programme, and we will not send you marketing emails without your consent. We do not use automated decision-making or profiling.
Please do not include sensitive information (for example health information) in free-text fields unless it is necessary for your trip.
4. Where your information is stored and who can access it
- Form submissions are stored in our website database, hosted in the European Union (Frankfurt, Germany).
- A copy of each submission is sent by email to our business mailbox info@nordicrivieratours.com, provided by Domeneshop AS (Norway).
- Only the business owner, Elie Pescarmona, currently has administrative access to customer information. Access is protected by a personal password and role-based access controls; visitors cannot read other people's submissions.
- We use an AI tool to write an internal daily summary of activity. It only receives aggregated, non-identifying figures (for example the number of requests per tour) and never your name, email, phone number or message.
5. Service providers who process data for us
These providers process personal data on our behalf and only to provide their service to us:
- Lovable: website building and hosting, database and server functions (database located in Frankfurt, Germany), sending of notification emails from notify.nordicrivieratours.com, and cookie-free visitor statistics.
- Cloudflare: delivery of the website and protection against malicious traffic.
- Domeneshop AS: our domain and business email mailbox.
6. Sharing with hotels, motorcycle rental companies and other partners
When it is necessary to organise the trip you have requested or booked, we share the relevant details (for example your name, travel dates, number of rooms or motorcycle model) with selected hotels, motorcycle rental companies, guides and other service providers involved in the trip. They use this information to provide their own services and are responsible for how they handle it.
We never sell your personal data. We may disclose information to public authorities if we are legally required to do so.
7. International transfers
Our database is located in the European Union, and our partners on the tours are mainly located in the EU/EEA (for example in Spain and France). Some of our technical service providers, or their subcontractors, may process data outside the EU/EEA, for example in the United States. In that case, the transfer must be covered by a safeguard provided for in the GDPR, such as an adequacy decision of the European Commission (including the EU–US Data Privacy Framework for certified companies) or the European Commission's Standard Contractual Clauses. Contact us if you would like more information.
8. How long we keep your information
- Booking and information requests that do not lead to a confirmed booking, contact messages and Private Tour requests: 12 months after our last meaningful interaction with you.
- Women Riders registrations: 12 months after our last interaction with you, or earlier if you withdraw your consent.
- Confirmed bookings: for as long as required by applicable accounting, contractual and legal obligations.
- Copies of these requests in our email mailbox follow the same periods.
- Technical data processed by our hosting and security providers is kept by them for limited periods for operation and security.
9. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and receive a copy;
- have inaccurate data corrected;
- have your data deleted, unless we must keep it for legal reasons;
- restrict our processing of your data;
- object to processing based on our legitimate interest;
- receive the data you gave us in a structured, machine-readable format (data portability);
- withdraw your consent at any time, without affecting processing carried out before the withdrawal.
10. How to make a request
Send an email to info@nordicrivieratours.com, preferably with the subject "Privacy request", from the email address you used with us. We may ask you to confirm your identity. We will answer within one month, as required by the GDPR.
11. Right to complain
If you believe we handle your personal data unlawfully, you can complain to the Norwegian Data Protection Authority (Datatilsynet), Postboks 458 Sentrum, 0105 Oslo, Norway, www.datatilsynet.no. If you live in another EU/EEA country, you can also contact your local authority, for example the Swedish Authority for Privacy Protection (IMY, www.imy.se) or the French CNIL (www.cnil.fr). We would appreciate the chance to resolve your concern first.
12. Changes to this policy
We may update this policy when our services or legal requirements change. The date at the top shows the latest version.