top of page

Aurora Viking Privacy Policy

Last updated: September 23, 2026

​

Aurora Viking ehf (“Aurora Viking”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how Aurora Viking collects, uses, stores, shares, and protects personal information when you:

  • Visit our website

  • Make or manage a booking

  • Participate in an Aurora Viking tour

  • Use our customer portal or other digital services

  • Access tour photographs

  • Communicate with us by email, telephone, SMS, or other messaging services

  • Receive operational messages from us

  • Use the Aurora Viking Staff application

  • Sign in to Aurora Viking systems using Google authentication

  • Otherwise interact with Aurora Viking

Aurora Viking Staff is an internal workforce and operations application used by Aurora Viking employees, contractors, guides, and other authorized personnel.

This Privacy Policy applies to Aurora Viking's website, booking services, customer portal, staff applications, SMS communications, and other digital services operated by Aurora Viking.

​

1. Information We Collect

The information we collect depends on how you interact with Aurora Viking.

We may collect:

  • Your name

  • Email address

  • Mobile telephone number

  • Booking and reservation information

  • Pickup location and accommodation information

  • Tour dates and tour preferences

  • Booking changes and rescheduling information

  • Payment and transaction information

  • Customer-support communications

  • Messages you send to us

  • Information you voluntarily provide

  • Tour photographs associated with your booking, where applicable

  • Technical information such as IP address, browser type, device type, login time, and website or application activity

  • Information relating to your use of our customer portal, staff application, website, or other digital services

For users of Aurora Viking Staff, we may also collect:

  • Staff account information

  • Google account identifier

  • Google profile information made available through Google Sign-In, such as your profile picture

  • Information you enter into Aurora Viking Staff

  • Actions performed within the application

  • Account access and security information

We may also receive booking information from third-party travel agencies, booking platforms, resellers, accommodation partners, or other businesses when you book an Aurora Viking service through them.

​

2. How We Use Personal Information

We may use personal information to:

  • Process and manage bookings

  • Provide tours and other services

  • Send booking confirmations

  • Arrange pickup and transportation

  • Provide pickup information

  • Notify customers about schedule changes, cancellations, weather conditions, tour status, or other operational matters

  • Allow customers to manage or reschedule bookings

  • Provide access to customer portals

  • Provide access to photographs from tours

  • Provide live bus-tracking or pickup-related services

  • Provide aurora forecasts and other tour-related digital services

  • Respond to customer-support requests

  • Process payments and refunds

  • Maintain customer and operational records

  • Improve the reliability and functionality of our website and applications

  • Prevent fraud, misuse, abuse, or unauthorized access

  • Maintain system and account security

  • Diagnose technical problems

  • Manage authorized staff accounts and permissions

  • Authenticate users

  • Comply with accounting, tax, regulatory, and legal obligations

Where required by applicable law, our processing is based on an appropriate legal basis, including performance of a contract, legitimate interests, consent, or compliance with a legal obligation.

We do not use personal information for materially unrelated purposes without providing appropriate notice or obtaining consent where required.

​

3. SMS and Mobile Messaging

Aurora Viking may use SMS or other mobile messaging services to communicate with customers who have provided a mobile telephone number and, where required, consented to receive such messages.

Messages may include:

  • Booking confirmations

  • Pickup information

  • Pickup-time changes

  • Tour-status notifications

  • Schedule changes

  • Cancellations

  • Weather-related operational updates

  • Links to booking-management services

  • Links to bus-tracking services

  • Customer-support communications

  • Other information directly related to an Aurora Viking booking or service

Message frequency varies depending on the customer's booking and operational circumstances.

Message and data rates may apply.

Customers may opt out of SMS messages at any time by replying STOP.

For assistance, customers may reply HELP or contact Aurora Viking at info@auroraviking.com.

Consent to receive SMS messages is not a condition of purchasing a tour or other service from Aurora Viking.

​

Mobile Information and SMS Consent

Aurora Viking does not sell, rent, or share SMS opt-in data, SMS consent, or mobile telephone information with third parties or affiliates for marketing or promotional purposes.

Text messaging originator opt-in data and consent will not be shared with any third parties or affiliates for their own marketing or promotional purposes.

Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes.

We may use communications service providers to send messages on our behalf. These providers may process mobile telephone information and messaging data only where necessary to provide communications infrastructure and related services to Aurora Viking.

Such service providers are not authorized by Aurora Viking to use SMS opt-in information or mobile telephone information for their own marketing or promotional purposes.

We do not sell SMS consent information or mobile telephone numbers.

​

4. Aurora Viking Staff and Google Authentication

Aurora Viking Staff uses Google OAuth or Google Sign-In to allow authorized personnel to securely access the application using their Google account.

When you sign in using Google, Aurora Viking may receive basic Google account information including:

  • Your name

  • Your email address

  • Your Google account identifier

  • Your profile picture, if available

We use this information to:

  • Authenticate your identity

  • Determine whether you are authorized to access Aurora Viking Staff

  • Associate your Google account with your Aurora Viking staff profile

  • Maintain your account

  • Provide application functionality

  • Maintain security

  • Protect our systems from unauthorized access

We only request Google account permissions that are reasonably necessary for the functionality provided by Aurora Viking Staff.

Google user data is not used for:

  • Advertising

  • Creating advertising profiles

  • Data brokerage

  • Credit or lending decisions

  • Unrelated marketing purposes

  • Developing, improving, or training generalized artificial intelligence or machine-learning models

Aurora Viking does not sell Google user data.

Our use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including applicable Limited Use requirements.

​

5. Sharing and Disclosure of Personal Information

Aurora Viking does not sell or rent personal information.

We may share personal information with service providers where reasonably necessary to operate our business or provide a requested service.

These service providers may include:

  • Booking and reservation systems

  • Payment processors

  • Communications providers

  • SMS and messaging providers

  • Website and hosting providers

  • Cloud infrastructure providers

  • Authentication providers

  • Database providers

  • Analytics and technology providers

  • Professional advisers

  • Accounting or administrative service providers

  • Tour partners where necessary to provide a booked service

Service providers may process information only where necessary to perform services for Aurora Viking and are expected to protect the information appropriately.

Personal information relating to Aurora Viking Staff may also be accessible to authorized Aurora Viking personnel where required for legitimate operational, administrative, or security purposes.

Google user data will not be transferred to third parties for advertising, data brokerage, unrelated profiling, or other unrelated purposes.

We may disclose information where required by law, regulation, court order, or another legally valid request from a public authority.

The additional restrictions specifically applying to mobile telephone information and SMS consent are described in Section 3 of this Privacy Policy.

​

6. Payments

Payment information may be processed by third-party payment providers.

Aurora Viking does not necessarily receive or store complete payment-card details.

Payment providers process payment information according to their own security procedures, privacy policies, legal obligations, and payment-industry requirements.

​

7. Tour Photographs and Customer Portal

Aurora Viking may provide customers with access to photographs taken in connection with their tour.

Where applicable, photographs or photograph galleries may be associated with information such as:

  • Tour date

  • Booking

  • Guide

  • Tour departure

  • Customer access information

This information may be used to help customers locate and access photographs connected with their tour.

Access to customer portals and photograph systems may be provided through individualized booking links or other access mechanisms.

​

8. Cookies, Authentication Tokens, and Technical Information

Our website, customer portal, and staff applications may use cookies, authentication tokens, local storage, or similar technologies.

These technologies may be used to:

  • Keep users signed in

  • Maintain secure sessions

  • Remember preferences

  • Operate application functionality

  • Protect against unauthorized access

  • Understand website usage

  • Improve performance

  • Measure the effectiveness of our services or marketing

Where required by applicable law, visitors may control non-essential cookies through cookie-consent options provided on our website.

​

9. Data Storage and Security

Aurora Viking uses reasonable technical and organizational measures designed to protect personal information against:

  • Unauthorized access

  • Loss

  • Misuse

  • Unauthorized alteration

  • Disclosure

  • Destruction

Where appropriate, information is transmitted using encrypted connections such as HTTPS/TLS.

Access to internal Aurora Viking systems is restricted to authorized users and administrators where appropriate.

No electronic system, storage system, or method of transmission can guarantee absolute security, but we take measures that we consider reasonable and appropriate to the nature of the information being processed.

​

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected.

This may include periods necessary to:

  • Provide Aurora Viking services

  • Manage bookings

  • Maintain business and operational records

  • Maintain accounting and tax records

  • Maintain security records

  • Resolve disputes

  • Protect our legitimate interests

  • Comply with legal or regulatory obligations

Retention periods may vary depending on the type of information and applicable legal requirements.

Google account information used for authentication is retained only for as long as reasonably necessary to maintain the relevant Aurora Viking Staff account or satisfy applicable operational, security, or legal requirements.

When personal information is no longer required, we may delete or anonymize it.

​

11. Data Deletion and Account Removal

Users may request deletion of personal information associated with Aurora Viking or Aurora Viking Staff by contacting:

info@auroraviking.com

Staff-app deletion requests should identify the Google account or email address associated with the Aurora Viking Staff account.

Where legally and technically possible, we will delete or anonymize personal information that is no longer required.

Users of Aurora Viking Staff may also revoke Aurora Viking Staff's access to their Google account through their Google Account security and permissions settings.

Revoking Google authorization prevents the application from obtaining additional information through that authorization but may not automatically delete information already lawfully stored by Aurora Viking.

Users may contact us to request deletion of stored information.

Certain information may need to be retained where required by law or where Aurora Viking has another lawful basis for retaining it.

​

12. Third-Party Services

Aurora Viking uses third-party systems and infrastructure where necessary to operate our business and digital services.

Third-party services may include authentication, hosting, payment, communications, booking, analytics, and technical infrastructure providers.

Google authentication services are provided by Google and are separately subject to Google's applicable privacy policies and terms.

This Privacy Policy governs information processed by Aurora Viking. It does not control independent processing performed by third parties for their own purposes.

​

13. International Data Processing

Some service providers used by Aurora Viking may process information outside Iceland or the European Economic Area.

Where required by applicable law, appropriate safeguards are used for international transfers of personal information.

​

14. European Privacy Rights

Aurora Viking operates in Iceland and processes personal information in accordance with applicable Icelandic and European Economic Area data-protection requirements.

Depending on applicable law and the circumstances of the processing, you may have rights including the right to:

  • Request access to personal information

  • Request correction of inaccurate information

  • Request deletion of information

  • Request restriction of processing

  • Object to certain processing

  • Request portability of eligible personal information

  • Withdraw consent where processing is based on consent

Requests concerning these rights may be sent to:

info@auroraviking.com

Some information may need to be retained where required by law or where Aurora Viking has another lawful basis for retaining it.

You may also have the right to lodge a complaint with the Icelandic data-protection authority, Persónuvernd.

​

15. Children's Privacy

Aurora Viking's tours and services are generally booked or arranged by adults.

We do not knowingly collect personal information directly from children except where reasonably necessary to provide a service booked or arranged by a parent, guardian, or other responsible adult.

​

16. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to:

  • Aurora Viking's services

  • Website functionality

  • Customer-portal functionality

  • Aurora Viking Staff functionality

  • Google API usage

  • Messaging practices

  • Technology

  • Legal requirements

  • Business practices

The current version will be published on this page with an updated revision date.

Material changes affecting how Google user data is accessed, used, stored, or shared will be reflected in this Privacy Policy.

​

17. Contact Us

For privacy questions, requests concerning personal information, or data-deletion requests, contact:

Aurora Viking ehf
Kennitala: 631122-1240
Reykjavík, Iceland
Email: info@auroraviking.com
Telephone: +354 784 4000
Website: https://www.auroraviking.com

bottom of page