Privacy policy
Last updated: 17 June 2026
OmCider AS (company registration number 923 459 472, Bygdavegen 36, 4130 Hjelmeland, Norway) — "we", "us" — is the data controller for personal data collected on omcider.no. This page explains what we collect, why, and your rights.
Booking experiences
When you book a tasting, tour or event, we collect your name, email address, phone number and any comments (e.g. allergies). The data is used to manage your booking, send confirmation and reminder emails, and contact you about changes or cancellations. The legal basis is our agreement with you (GDPR art. 6(1)(b)). Data is stored in our database (Supabase, within the EU/EEA) and deleted or anonymised when no longer needed.
Payment (Vipps and Stripe)
If you pay for an experience in advance, the payment itself is processed by the payment providers Vipps MobilePay and/or Stripe. These are independent data controllers for the payment transaction. OmCider receives a confirmation of payment and a payment reference, but does not store full card numbers — card details are handled directly by the payment provider.
Use of Vipps and Stripe is governed by their own privacy terms (vipps.no and stripe.com/privacy). Payment and accounting records are kept for as long as the Norwegian Bookkeeping Act requires — generally five years after the accounting year.
Confirmations, reminders and cancellation notices are sent via the email service Resend. Your email address is only used to deliver these messages — we do not send marketing without consent.
Chatbot
The chatbot on this site is powered by OpenAI. Messages you write are sent to OpenAI to generate replies and should not contain sensitive personal data. Conversations are not linked to your name and are not used for marketing.
reCAPTCHA (Google)
To protect the booking form and chatbot from bot abuse we use Google reCAPTCHA v3. The service assesses whether traffic comes from a human by analysing behaviour on the page, and may set cookies and collect device information and IP address processed by Google. Use is governed by the Google Privacy Policy (policies.google.com/privacy) and Terms of Service (policies.google.com/terms). The legal basis is our legitimate interest in preventing abuse (art. 6(1)(f)).
Hosting and logs
The website is hosted by Vercel. As part of normal operations, technical logs (including IP address and timestamps) may be stored for a short period for security purposes. Apart from reCAPTCHA, the site sets no tracking or marketing cookies; your language choice is stored locally in your browser.
Your rights
Under data protection law you have the right to:
- request access to the personal data we process about you,
- have inaccurate data corrected or completed,
- have data erased ("the right to be forgotten"),
- request restriction of, or object to, the processing,
- request data portability (receive your data in a machine-readable format), and
- withdraw a consent you have given.
To cancel a booking or have data deleted, contact us at post@omcider.no or +47 971 12 475. If you believe we process personal data unlawfully, you may complain to the Norwegian Data Protection Authority (Datatilsynet, datatilsynet.no). We would, however, appreciate you contacting us first so we can put any mistakes right.
Contact us
If you have questions about how we process personal data, or wish to access, correct or delete your data, email us at post@omcider.no and we will help you.