Privacy Policy

Last Updated: March 12, 2026
Effective Date: March 12, 2026

Introduction

Mil Holding AS ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services. Please read this policy carefully. If you do not agree with our policies and practices, please do not use our website.

1. Cookie Categories

We use cookies to enhance your experience on our website. Cookies are divided into three categories:

Essential Cookies

Essential cookies enable core site functionality, security, and session management. These cookies are required for the website to operate properly and are activated automatically. Examples include session identifiers, CSRF tokens, and cookie consent status. These cookies do not require consent and are retained for the duration of your session or up to 12 months for preference storage.

Analytics Cookies

Analytics cookies measure traffic, user behavior, and site performance. We use Google Analytics 4 to understand how visitors interact with our website. Examples include _ga, _ga_XXXXXXX, _gid, and _gat. These cookies are activated only after you explicitly accept them. Data is retained for up to 14 months and helps us improve our educational content and user experience.

Marketing and Advertising Cookies

Marketing and advertising cookies enable personalized ad delivery, remarketing, and conversion tracking. These cookies are activated only after you explicitly accept them. They are retained for up to 540 days (Google Ads default). We use these cookies to serve relevant advertisements to previous website visitors across Google's network and Meta platforms. Refer to Section 2 below for full marketing cookie disclosures.

2. Marketing Cookies and Advertising Partners

This section provides mandatory disclosures regarding marketing and advertising technologies used on our website:

Third-Party Ad Serving

Third-party vendors, including Google, use cookies to serve ads based on a user's previous visits to this website and other sites on the internet. This allows us to show relevant educational content and program information to users who have expressed interest in our services.

Advertising Partners

We work with advertising partners such as Google and Meta to deliver advertisements tailored to your interests across various websites and platforms. These partners help us reach learners interested in sea and mountain education throughout Canada.

Remarketing

We use remarketing services to advertise to previous visitors of our website. After visiting our site, you may see our ads on other websites, apps, or platforms you visit. This helps us maintain visibility with interested learners and educators.

YouTube and Display Network

Advertisements may appear across Google services including YouTube, Gmail, and the Google Display Network. These ads are served based on your previous interactions with our website and your general interests.

Tracking Technologies

We use the following tracking technologies on this website:

  • Cookies (first-party and third-party)
  • Tracking pixels (Google Ads tag via gtag.js, Meta Pixel)
  • Device identifiers (browser fingerprint, IP address)
  • Conversion event tags for tracking form submissions and program inquiries

Advertising Measurement

We use conversion tracking to understand which advertisements lead to actions on our website, such as form submissions, contact requests, or program inquiries. This allows us to measure campaign effectiveness and allocate advertising budget appropriately. Conversion data may be shared with Google Ads and Meta for campaign optimization.

Technologies in Use

Advertising and analytics technologies active on this site include:

  • Google Ads (gtag.js and Google Tag Manager)
  • Google Analytics 4
  • Google Remarketing Tag
  • Meta Pixel (Facebook and Instagram)

Opting Out from Personalized Advertising

You may opt out of personalized advertising at any time:

Opting out does not remove ads entirely—you will continue to see non-personalized advertisements.

Cookie Preference Management

You may manage your cookie preferences at any time by clicking the "Manage cookie preferences" link in our website footer. This opens a panel where you can accept or reject each cookie category independently. Essential cookies cannot be disabled as they are required for website functionality.

3. Consent Requirements and Cookie Consent Banner

Our website displays a cookie consent banner that appears when you first visit. The banner offers three options:

  • Accept All: Activates all cookies including analytics and marketing
  • Reject Non-Essential: Activates only essential cookies
  • Manage Preferences: Opens a detailed panel for per-category selection

Analytics and marketing cookies are activated only after you accept them. Your choice is stored in your browser for 12 months. You may change your preferences at any time through the cookie panel in the website footer.

Consent Statement

By clicking "Accept All Cookies," you consent to the storing of cookies on your device for analytics and advertising purposes, including personalized advertising delivered by Google and Meta. You may withdraw consent at any time through the cookie preferences panel without affecting the lawfulness of processing that occurred before withdrawal.

GDPR Compliance for EEA and UK Users

Users in the European Economic Area and the United Kingdom receive this consent notice in compliance with the General Data Protection Regulation (GDPR) and UK GDPR. Marketing and analytics cookies are activated solely after explicit, informed, freely given consent under GDPR Article 6(1)(a). Consent is recorded with a timestamp and may be audited upon request.

Withdrawal of Consent

You may withdraw consent at any time by clicking "Manage cookie preferences" in the website footer or by clearing cookies via your browser settings. Withdrawal does not affect processing that occurred while consent was valid.

4. Data Sharing with Advertising Partners

We share certain data with advertising partners for campaign delivery and measurement. Recipients and the data categories shared include:

Google LLC

We share cookie identifiers, conversion events, anonymized behavioral data, and remarketing lists with Google. This data is governed by Google's Privacy Policy: https://policies.google.com/privacy

Meta Platforms, Inc.

We share pixel events, conversion data, and custom audiences with Meta for Facebook and Instagram advertising. This data is governed by Meta's Data Policy: https://www.facebook.com/privacy/policy

Data Transfer Details

We do not sell personal data. All transfers to Google and Meta operate under Standard Contractual Clauses where applicable. Data is processed for ad targeting and campaign measurement only—not resold to unaffiliated third parties. Google and Meta may use this data across their own platforms in accordance with their respective policies. We encourage users to review those policies directly.

5. Lead Forms and Contact Requests

When you submit a contact form, request information about our programs, or register interest in our services, we collect the information you provide. This typically includes:

  • Full name
  • Email address
  • Phone number
  • Selected program or learning format
  • Message or comment

Legal Basis and Purpose

Legal basis: consent (GDPR Article 6.1.a) and, where a service relationship exists, performance of a contract (GDPR Article 6.1.b). We collect this information to respond to your inquiry, provide information about our sea and mountain education programs, and send you relevant educational updates if you consent to contact.

Data Retention

Form submission data is retained for up to 2 years from the date of submission, unless a longer period is required by applicable law or you request deletion. You may request deletion of your data at any time by contacting us at the email address provided below.

Privacy Policy Acknowledgment

A link to this Privacy Policy appears adjacent to every submission button on this site. Submitting a form constitutes acknowledgment of this policy and your consent to the processing described herein.

6. Google Services and Advertising

This website uses the following Google services:

Google Analytics 4

Google Analytics 4 collects anonymized usage data, device information, and behavioral signals about how visitors interact with our website. IP anonymization is enabled. Data retention is set to 14 months. Users may opt out via the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout

Google Ads Conversion Tracking

Google Ads conversion tracking records when a user completes a defined action, such as submitting a contact form, requesting program information, or another interaction of value to our business. This data is used solely for measuring ad campaign performance and optimizing our marketing efforts.

Google Remarketing

Google Remarketing allows us to show ads to previous website visitors as they browse across Google's network. Remarketing lists are created only from behavioral data and are not constructed from sensitive data categories including health status, financial information, religion, sexual orientation, or other special-category attributes.

Google Tag Manager

Google Tag Manager serves as a container for deploying tracking tags on our behalf. Google Tag Manager itself does not collect personal data; it acts as a technical platform for the tags described above.

Google Services Governance

Google's advertising products are governed by: https://policies.google.com/technologies/ads

7. Meta Advertising Services

This website uses the Meta Pixel to measure the effectiveness of our advertising on Facebook and Instagram. The pixel records:

  • Page views and time spent on site
  • Specific conversion events (form submissions, program inquiries)
  • Custom audience membership for retargeting purposes

Data Sensitivity and Restrictions

We do not use the Meta Pixel to collect sensitive personal data, nor to target users based on health status, financial situation, religion, political views, sexual orientation, or any other special-category attribute prohibited under Meta's advertising policies and applicable data protection law.

Meta as Data Controller

Meta acts as an independent data controller for data collected via its Pixel and processed within its own platform and ecosystem. Refer to Meta's Data Policy: https://www.facebook.com/privacy/policy

Ad Preference Management

To manage your ad preferences on Meta platforms, visit: https://www.facebook.com/adpreferences/

8. Prohibited Content Self-Declaration

This website does not promote, sell, or facilitate access to prohibited product or service categories including but not limited to: weapons, controlled substances, counterfeit goods, unlicensed gambling services, adult content, or services that make misleading health or financial claims. All advertising conducted through Google Ads and Meta Ads complies with the respective platform policies in full.

9. Landing Page Integrity Statement

The content of this website accurately represents the products and services advertised. No bait-and-switch practices are employed. The experience delivered to users arriving from paid advertisements is identical to the experience for all other visitors. Cloaking, automatic redirects, and content variation by traffic source are not used on this website.

10. Children's Privacy

This website is not directed at individuals under the age of 16. We do not knowingly collect personal data from minors. If we discover that data has been collected from a person under 16 without verifiable parental consent, we will delete it promptly. Contact us at the address in this policy if you believe we have received data from a minor.

11. International Data Transfers

Personal data collected through this website may be transferred to and processed in countries outside the European Economic Area, including the United States, where Google LLC and Meta Platforms, Inc. are based. These transfers are conducted under Standard Contractual Clauses (SCCs) approved by the European Commission, which provide appropriate safeguards for personal data. A copy of the applicable SCCs can be requested by contacting us directly.

12. Your Rights (GDPR Articles 15–22)

If you are located in the European Economic Area or the United Kingdom, you have the following rights:

  • Access (Article 15): Request a copy of data we hold about you
  • Rectification (Article 16): Correct inaccurate or incomplete data
  • Erasure (Article 17): Request deletion ("right to be forgotten")
  • Restriction (Article 18): Limit how we process your data
  • Portability (Article 20): Receive your data in a structured, machine-readable format
  • Objection (Article 21): Object to processing based on legitimate interest
  • Withdraw Consent (Article 7.3): Revoke consent at any time without penalty

To exercise any right, email us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority:

13. What Data We Collect

We collect the following categories of data:

  • Full name
  • Email address
  • Phone number
  • IP address
  • Browser type and version
  • Device type and operating system
  • Cookies and tracking identifiers
  • Usage data (pages visited, time on site, click paths)
  • Form submission content
  • Conversion events (form submits, program inquiries)

14. Legal Basis for Processing (GDPR Article 6)

For each data type, we process under the following legal bases:

  • Contact form data: Consent (Article 6.1.a) and contract performance (Article 6.1.b)
  • Analytics data: Consent (Article 6.1.a)
  • Marketing and remarketing data: Consent (Article 6.1.a)
  • Security and fraud prevention: Legitimate interest (Article 6.1.f)

15. Data Retention Periods

We retain personal data according to the following schedule:

  • Contact form submissions: 2 years
  • Analytics data (GA4): 14 months
  • Marketing cookies (Google Ads): Up to 540 days
  • Email communications: Duration of relationship plus 1 year
  • Server logs: 90 days
  • Cookie consent records: 3 years (audit requirement)

16. Contact Information

For questions about this Privacy Policy or to exercise your rights, contact:

Mil Holding AS

Julietråkket 2A
1900 Fetsund
Norway

Email: [email protected]
Phone: +47 63 80 50 00

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes via a homepage banner at least 14 days before the changes take effect. Your continued use of the website after changes are posted constitutes acceptance of the updated policy.