Privacy Policy

Bohavn is a rental housing concept operated by Lille Oslo Eiendom AS ("LOE", "we", "us", or "our"), a Norwegian limited company. LOE is the data controller responsible for the personal data collected through the Bohavn website (bohavn.no).

Bohavn is a brand name, not a separate legal entity. All data processing described in this policy is carried out by or on behalf of Lille Oslo Eiendom AS.

When you submit a rental enquiry through the Bohavn website, we collect the following personal data:

• Full name
• Email address
• Phone number

We do not collect any special categories of personal data (such as health information, financial details, or national identity numbers) through our enquiry forms.

We collect and process your personal data for the following purpose:

Processing your rental enquiry

Your data is used to receive, review, and respond to your enquiry regarding rental properties available through Bohavn. This includes forwarding your enquiry to our letting agent, Home, so that they can follow up with you directly.

Legal basis: Article 6(1)(b) of the GDPR — processing is necessary for taking steps at your request prior to entering into a contract (a rental agreement).

Your enquiry data may be shared with the following parties:

Home — our letting agent

When you submit an enquiry through the Bohavn website, your name, email address, and phone number are forwarded to Home, our letting agent, who will follow up with you regarding rental availability. Home acts as an independent data controller for their own processing of your data, and their privacy policy governs how they handle your information. You can read Home's privacy policy at home.dk/om-home/politikker/privatlivspolitik.

Resend — email delivery

We use Resend (Plus Five Five, Inc.) as our email delivery service provider to technically transmit your enquiry to us and to Home. Resend acts as a data processor on our behalf and processes your personal data only to deliver the email. Resend operates under a Data Processing Addendum consistent with GDPR requirements, including the EU Standard Contractual Clauses for data transfers to the United States.

Vercel Analytics — website analytics

We use Vercel Analytics to understand how visitors use our website. Vercel Analytics is a privacy-friendly, cookieless solution that does not use cookies or track individual users across websites. It collects only anonymised, aggregated data about page views and website performance. No personal data is collected or processed through Vercel Analytics.

We do not sell your personal data or share it with any third parties for marketing purposes.

Some of our service providers may process personal data outside the European Economic Area (EEA), including in the United States. Where this occurs, we ensure that appropriate safeguards are in place in accordance with Chapter V of the GDPR, such as the EU Standard Contractual Clauses or an adequacy decision by the European Commission.

We retain your personal data for as long as necessary to process and respond to your enquiry, and for a reasonable period thereafter for administrative purposes. In general, enquiry data is retained for no longer than 12 months unless we are required by law to keep it for longer or you have entered into an ongoing contractual relationship with us.

Anonymised and aggregated analytics data may be retained for longer periods, as it cannot be used to identify you.

Under the GDPR, you have the following rights in relation to your personal data:

• Right of access — you may request a copy of the personal data we hold about you.
• Right to rectification — you may ask us to correct inaccurate or incomplete data.
• Right to erasure — you may ask us to delete your personal data, subject to certain exceptions.
• Right to restriction — you may ask us to restrict the processing of your data in certain circumstances.
• Right to data portability — you may request that we provide your data in a machine-readable format.
• Right to object — you may object to processing based on our legitimate interests.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us using the details in Section 8 below. We will respond within 30 days.

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet):

If you have any questions about this Privacy Policy or how we process your personal data, please contact us:

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically to stay informed about how we are protecting your data.