Privacy policy
This policy explains what information Meridian Hotel Atlas (huxevil.com) processes when you visit, why, and the choices you have.
1. Who is responsible
The data controller is OMD AS, Frøyas gate 15, Postboks 1165 Sentrum, 0107 Oslo, Norway. Contact: [email protected].
We process personal data in line with the General Data Protection Regulation (GDPR), which applies in Norway through the EEA Agreement, and the Norwegian Personal Data Act.
2. What we collect
You can use the whole site without creating an account or giving us your name. We process:
- Technical data sent automatically by your browser, such as IP address, browser type, device and the pages you request. Our hosting provider records this in server logs to deliver the site and keep it secure.
- Information stored on your device. Features such as your shortlist, passport stamps, booking checklist, departure city and cookie choices are saved in your browser's local storage. This stays on your device; we cannot see it. You can clear it at any time in your browser settings.
- Advertising and analytics data, only with your consent. If you accept these cookies, Google may set cookies and collect information such as pages visited and whether you arrived from one of our ads. See section 5.
- Messages you send us by email, which we use only to reply.
3. Why we use it and our legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Delivering and securing the website | Technical data, server logs | Legitimate interests |
| Remembering your on-site tools and choices | Local storage on your device | Strictly necessary / legitimate interests |
| Measuring visits | Analytics cookies | Consent |
| Measuring and personalising advertising | Advertising cookies | Consent |
| Answering your messages | Email and its contents | Legitimate interests |
4. Cookies and similar technologies
| Name / type | Provider | Purpose | Duration |
|---|---|---|---|
| mer-consent-v1 (local storage) | Meridian | Remembers your cookie choices | Until cleared |
| mer-short, mer-stamps, mer-check, mer-from (local storage) | Meridian | Shortlist, passport, checklist and departure city | Until cleared |
| _gcl_*, _ga, _ga_* (cookies) | Ad conversion measurement and analytics. Set only if you accept | Up to 13 months |
When you first visit, advertising and analytics are switched off. We use Google Consent Mode, so Google tags respect your choice. You can change your decision at any time using Cookie settings.
5. Google services
- Google Fonts: our typefaces load from Google's servers, which receive your IP address to deliver them.
- Exchange rates: our currency converter requests daily reference rates from open.er-api.com, which receives your IP address to answer the request.
- Newsletter: if you subscribe, we use your email address only to send the letter, through an email service provider acting on our instructions. You can unsubscribe from any email.
- Google Ads and Google Analytics: used only with your consent, to measure how people find and use the site and how our ads perform. Learn how Google uses information at policies.google.com/technologies/partner-sites. You can manage ad personalisation at adssettings.google.com.
6. Sharing and international transfers
We do not sell your personal data. We share it only with service providers who help us run the site: our hosting provider and, with your consent, Google. Some of these providers are located outside your country, including in the United States. Where this happens, transfers are protected by appropriate safeguards such as the EU–US Data Privacy Framework or Standard Contractual Clauses.
7. How long we keep it
Server logs are kept by our hosting provider for a limited period for security. Emails are kept for as long as needed to deal with your enquiry and then deleted, normally within 24 months. Data in your browser stays until you clear it.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete or restrict the use of your personal data, to object to processing, to data portability, and to withdraw consent at any time. To exercise these rights, email [email protected]. Because we are established in Norway, our lead supervisory authority is Datatilsynet, the Norwegian Data Protection Authority (datatilsynet.no). You can also complain to the data protection authority where you live, for example the Autoriteit Persoonsgegevens in the Netherlands or the CNIL in France.
9. Children
This site is intended for adults planning travel. It is not directed at children under 16, and we do not knowingly collect their data. Information about casino resorts is intended only for adults of legal gambling age.
10. Changes
We will post any changes to this policy on this page and update the date at the top.