Privacy policy

The data controller is the business or organisation that offers venues or resources for rent through Digilist, and that decides the purpose of processing personal data and the means used to do it.

Who the controller is for a particular booking is stated in the information attached to that venue.

Digilist acts as the technical platform and is a data processor on behalf of the operator, who is the controller.

Data processor:

Xala Technologies AS

Company registration number: 920 972 454

Digilist processes personal data only under the data processing agreements in place and the applicable regulations.

Digilist uses sub-processors for operations, storage and technical infrastructure. Personal data is stored on servers located within the EU/EEA and processed in line with the applicable data protection rules.

Sub-processors may be used for, among other things:

• operations and hosting
• payment processing
• sending notifications

All sub-processors are bound by data processing agreements that require adequate information security.

When you create a user in Digilist, or use the service to book a venue, you are asked for personal data that is stored in the system. By using one of the available sign-in methods you consent to Digilist receiving the identity and contact details it needs.

Some operators may require further authentication in order to:

• confirm identity
• verify age
• ensure correct invoicing

Personal data is used, among other things, to:

• make contact possible between the person renting and the operator
• carry out and administer bookings
• handle payment and invoicing
• send notifications about a booking and about access
• provide traceability and meet statutory requirements

Digilist will never sell or rent personal data to third parties for marketing purposes.

Contact details are shared with the relevant operator in connection with a booking.

Payment details are handled by approved payment providers and are not shared with the operator beyond what is necessary for invoicing and follow-up.

To use Digilist, the following data may be processed:

• name
• mobile number
• email address
• age or age bracket
• address, where the operator requires it
• company registration number, for organisations
• booking and transaction history

Payment details are handled by external payment providers under their own terms and security procedures.

Digilist uses cookies and similar technologies to provide functionality and improve the experience of using the service. This may include:

• technical session cookies
• temporary identifiers tied to a booking in progress
• analysis of usage patterns

Cookies are not used for marketing without separate consent.

Data connected to bookings is kept for as long as it is needed in order to:

• meet contractual obligations
• meet statutory requirements, including accounting and archiving duties

User data is kept until the user deletes their own account, unless longer storage is required by law.

As a signed-in user you have the right to see which personal data is stored about you. You can do this through your user account.

You have the right to receive the personal data you have given Digilist in a structured, machine-readable format, where that is technically possible and there is a legal basis for it.

You can correct inaccurate or incomplete data yourself through your user account.

You can also ask for your account and personal data to be deleted. Some data cannot be deleted immediately where storage is required by law.

By using Digilist you consent to the processing of personal data described in this policy. If you do not consent, you can still use the service to search and see availability, but not to complete a booking.

Consent can be withdrawn at any time by deleting your user account.

Digilist may update this privacy policy when the service or the regulations change. The updated version is published on the website.