Privacy Policy

Key information

Below you will find the key information about how Ease of Travel processes personal data. Detailed rules are described later in this Privacy Policy.

Personal data is processed only to the extent necessary to contact the user, prepare an offer, provide services, handle payments, send the newsletter and fulfil obligations arising from applicable law.

Data provided in forms is used to prepare individual travel proposals and perform the selected service.

Data may be shared only with trusted technology partners supporting the operation of Ease of Travel.

The newsletter and marketing information are sent only after the user has given voluntary consent.

The user may exercise their rights under applicable personal data protection laws at any time.

Detailed information about Cookies is provided in a separate Cookie Policy.

Table of contents

For clarity, this Privacy Policy is divided into numbered sections and subsections, so it is easier to return to a specific part when needed.

1.Data Controller 2.Scope of Data Processed 3.Purposes of Data Processing 4.Legal Bases for Processing 5.Data Recipients 6.Transfers Outside the European Economic Area 7.Data Retention Period 8.User Rights 9.Newsletter 10.Cookies 11.Data Security 12.Automated decision-making and profiling 13.Contact 14.Changes to the Privacy Policy

1.Data Controller

The controller of personal data is CHMIEL SERVICES, a sole proprietorship registered in Norway under organisation number 934654838, operating under the Ease of Travel brand.

The Controller is responsible for processing personal data in accordance with applicable law, in particular Regulation (EU) 2016/679 (GDPR), to the extent it applies, and Norwegian personal data protection law.

The Controller can be contacted about personal data protection matters at: contact.easeoftravel@gmail.com.

2.Scope of Data Processed

The Controller processes only personal data necessary to provide services, contact the user and fulfil obligations arising from applicable law.

The scope of processed data depends on how the website is used and which services are ordered.

2.1Identification and contact data

The Controller may process, among other things:

first and last name,
email address,
phone number,
preferred communication language,
other information voluntarily provided during contact.

2.2Travel-related data

The Controller may process information provided by the user in the order form and further correspondence, including:

planned trip,
budget,
dates,
number of participants,
travel preferences,
and other information necessary to prepare an individual travel plan.

2.3Order-related data

The Controller may process data connected with order handling, in particular:

selected package,
cooperation history,
order status,
communication history,
payment information,
accounting documents,
consents given by the user.

2.4Technical data

When using the website, technical data may be processed automatically, in particular:

IP address,
cookie identifiers,
device information,
browser information,
website usage data,
diagnostic data,
information generated by analytics tools used.

Technical data is used only to ensure security, proper website operation, statistical analysis and improvement of the services provided.

3.Purposes of Data Processing

The Controller processes personal data only to the extent necessary to conduct the activities of Ease of Travel.

Data may be processed in particular for the purpose of:

responding to messages and inquiries,
preparing an offer,
performing the ordered service,
preparing individual travel plans,
conducting correspondence connected with service performance,
handling payments,
maintaining accounting documentation,
handling complaints,
handling withdrawal from the contract and refunds,
sending the newsletter after obtaining appropriate consent,
ensuring website security,
conducting statistical analysis,
improving the services provided,
pursuing or defending against possible claims.

4.Legal Bases for Processing

The Controller processes personal data only when there is an appropriate legal basis under applicable law.

4.1Performance of a contract or steps before entering into it

Data is processed to the extent necessary to prepare an offer, answer an inquiry, conclude a contract and perform ordered services.

4.2Legal obligation

The Controller processes personal data to fulfil obligations arising from applicable law, in particular tax, accounting, consumer and personal data protection regulations.

4.3Legitimate interest of the Controller

The Controller may process personal data on the basis of a legitimate interest including in particular:

ensuring website security,
conducting correspondence with users,
conducting statistical analysis,
developing and improving services,
pursuing or defending against possible claims.

4.4User consent

Where applicable law requires consent, data is processed only after it has been given voluntarily.

This applies in particular to:

sending the newsletter,
marketing communication,
use of analytics cookies,
use of marketing cookies,
use of analytics tools,
use of marketing tools.

The user may withdraw consent at any time without affecting the lawfulness of processing carried out before consent was withdrawn.

5.Data Recipients

The Controller uses only trusted partners supporting the operation of the website and the provision of Ease of Travel services.

Personal data may be shared only to the extent necessary to achieve specific purposes.

As of the publication date of this Privacy Policy, the Controller uses, among others, the following services:

Vercel - website hosting and technical infrastructure,
Supabase - database and form handling,
Stripe - online payment processing,
Brevo - email and newsletter handling,
Google Maps - map display,
Google Analytics - analysis of visit statistics,
Microsoft Clarity - analysis of anonymous user behaviour on the website,
accounting service providers - fulfilment of accounting and tax obligations,
IT service providers - maintenance, development and security of the website.

If new services or tools are implemented, this Privacy Policy will be updated accordingly.

The Controller does not sell personal data and does not disclose it to other entities for their own marketing purposes.

6.Transfers Outside the European Economic Area

The Controller operates from Norway.

In connection with the use of selected technology partners, personal data may be processed outside the user’s country of residence, including outside the European Economic Area.

Where data is transferred outside the European Economic Area, the Controller uses only solutions ensuring an appropriate level of data protection required by applicable law.

In particular, appropriate safeguards provided for by applicable law may be used, such as the European Commission’s Standard Contractual Clauses or other mechanisms ensuring GDPR compliance.

7.Data Retention Period

The Controller stores personal data only for the period necessary to achieve the purpose for which it was collected, unless applicable law requires longer retention.

7.1Contact data

For the period necessary to conduct correspondence and handle the inquiry.

7.2Service performance data

For the period of cooperation and for the time necessary to pursue or defend against possible claims.

7.3Accounting and settlement data

For the period required by applicable tax, accounting and other relevant regulations.

7.4Data processed on the basis of consent

Until consent is withdrawn or the purpose for which it was given ceases to exist.

7.5Technical data

For the period resulting from the configuration of technical tools used, website security settings and applicable law.

8.User Rights

Every person whose personal data is processed may exercise the rights arising from applicable personal data protection laws.

In particular, the user has the right to:

access their personal data,
rectify inaccurate data or complete incomplete data,
erase data where there is no basis for further processing,
restrict data processing,
data portability,
object to processing based on the Controller’s legitimate interest,
withdraw consent at any time where processing is based on consent,
lodge a complaint with the competent supervisory authority responsible for personal data protection.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

10.Cookies

The website uses cookies and similar technologies for the purpose of:

ensuring proper website operation,
maintaining security,
remembering user preferences,
conducting statistical analysis,
improving website functionality,
conducting marketing activities after obtaining appropriate consents.

The Controller uses CookieYes to manage users’ cookie consents.

The website uses only those categories of cookies to which the user has consented, except for cookies necessary for the proper operation of the website.

Detailed information about the types of Cookies used, their retention periods, how consent is given and withdrawn, and the technologies used is described in a separate Cookie Policy.

The user may change their cookie preferences at any time using the consent banner available on the website or through the appropriate configuration of their web browser.

11.Data Security

The Controller applies appropriate organisational and technical measures to protect personal data against loss, destruction, unauthorised access, disclosure or other unlawful processing.

The scope of safeguards is adjusted to the nature of the data processed, the current level of risk and available technical solutions.

Despite appropriate security measures, using the Internet always involves a certain level of risk that cannot be completely eliminated.

11.1Security breaches

If a personal data breach is identified, the Controller takes the actions required by applicable law, including - where necessary - notifying the competent supervisory authority and the persons whose data is concerned.

12.Automated decision-making and profiling

The Controller does not make decisions about users that produce legal effects or similarly significantly affect them solely by automated means.

The Controller does not use profiling that produces legal effects for users or similarly significantly affects them.

13.Contact

For matters concerning personal data protection, exercise of user rights or this Privacy Policy, the Controller can be contacted at: contact.easeoftravel@gmail.com.

The Controller responds to requests without undue delay and no later than within the deadlines arising from applicable law.

14.Changes to the Privacy Policy

The Controller may update this Privacy Policy in particular in the event of:

changes in law,
changes in the way services are provided,
implementation of new tools or technologies,
expansion or change of the offer,
organisational or technical changes.

Personal data provided before changes enter into force is governed by the version of the Privacy Policy applicable at the time it was provided, unless applicable law provides otherwise.

The current version of the Privacy Policy is always published on the Ease of Travel website.

Version: 1.0

Effective from: 4 July 2026

Receive calm travel inspiration

Privacy Policy

1.Data Controller

2.Scope of Data Processed

3.Purposes of Data Processing

4.Legal Bases for Processing

5.Data Recipients

6.Transfers Outside the European Economic Area

7.Data Retention Period

8.User Rights

9.Newsletter

10.Cookies

11.Data Security

12.Automated decision-making and profiling

13.Contact

14.Changes to the Privacy Policy

Receive calm travel inspiration

Privacy Policy

1.Data Controller

2.Scope of Data Processed

3.Purposes of Data Processing

4.Legal Bases for Processing

5.Data Recipients

6.Transfers Outside the European Economic Area

7.Data Retention Period

8.User Rights

9.Newsletter

10.Cookies

11.Data Security

12.Automated decision-making and profiling

13.Contact

14.Changes to the Privacy Policy