Privacy Policy

Processing of personal information - Updated 30.01.2025

This privacy policy applies to Norwegian Aero Solutions AS (NAS) (934 013 735, Flyplassveien 22, 3514 Hønefoss, Norway).

1. Data processing manager

Norwegian Aero Solutions AS (934 013 735) Flyplassveien 22, 3514 Hønefoss, Norway.

2. Contact for questions regarding personal data and data that require discretion

Norwegian Aero Solutions, post@norwegianaerosolutions.no.

3. What is personal data

Personal data is information that may be directly or indirectly linked to a living person. For example, names and social security numbers, but also other information specific to the person's physical, genetic, mental, economic, cultural, or social identity. For example, your IP address or a recording of your voice may be personal data if they can be connected to you.

Some personal data is considered particularly sensitive and is covered by special rules. Sensitive personal data means information that reveals, for example, membership in a trade union or information about health.

Norwegian Aero Solutions does not collect particularly sensitive personal data.

4. Common data sources and data collection methods

The information in the register is usually collected from the registered individuals themselves. Personal and other information may be collected through the registration and with the use of services and programs related to Norwegian Aero Solutions. Based on business activities, it is also a possibility that personal information could be collected interactively, e.g. in meetings or by telephone. In addition, data-driven data collection methods can be used. Personal information can also be retrieved and updated from demographic records, credit records, records provided by commercial marketing companies and similar reliable private or public records and sources.

5. Why do we collect personal data?

The purpose of processing personal data is to provide good and relevant services, further develop and maintain customer relationships, facilitate information dissemination, and conduct marketing. The purpose of processing customer data is to provide a basis for delivery, invoicing, statistics, accounting, and marketing.

Personal data may also be used in research and development contexts, such as to improve and develop IT systems and business processes at Norwegian Aero Solutions. The legal basis for processing personal data is Norwegian Aero Solutions' legal right to manage its business, including but not limited to communicating with its customers and marketing its enterprises and products. The legal basis for processing personal data may also be the conclusion of an agreement in which the data subject is a party, or has participated in the execution of a consent declaration.

6. Data content in the register

The register may contain the data subjects' names, e-mail address, street address, country, telephone /phone number, company name and data regarding the use of electronic services (e.g. read or search data, IP addresses and cookies). In addition, the register may contain other information that the registered individual has provided.

7. Log data and cookies

Through participation in electronic business, Norwegian Aero Solutions can automatically track certain types of information, such as IP addresses, geographical origin and browser type, even before any information is explicitly requested. In addition, Norwegian Aero Solutions uses cookies to collect data. Cookies are small files that may contain an anonymous individual identifier. Cookies are sent to the browser from websites and stored on the registered computer's hard drive. The registered individual can set their browser to defer all cookies or to inform when a cookie is sent / stored. If the data subject does not accept the cookies, it may result in our services not working optimally.

8. Storage time for personal information

Norwegian Aero Solutions stores personal information in the register in accordance with applicable law and only for as long as is necessary to carry out the purpose of the register. In general, information is stored as long as it is in accordance with applicable laws and regulations for a maximum of six (6) years after the customer relationship with the data subject has ceased. In addition, the storage of the information can in some cases where it is required by law be stored longer, e.g. in the production, exercise or defense of legal claims, conducting internal investigations or if required by applicable law. The above storage period is based on information and requirements related to e.g. product and service guarantees, product liability laws and the burden of proof in potential legal actions. Norwegian Aero Solutions strives to ensure that stored data is valid within a reasonable limit by regularly deleting unnecessary data and updating outdated data.

9. Disclosure and transfer of personal information

Personal information is not usually transferred to third parties. However, personal information may be passed on to subcontractors of the Norwegian Aero Solutions for the purposes described in this privacy policy unless the data subject has explicitly prohibited this. In addition, information must be provided to third parties in certain circumstances when required by applicable law. Due to technical and practical requirements, personal data may be processed in geographical locations other than the country in which the data subject is located, including locations outside the EU or the European Economic Area (including Switzerland). In such cases, the processing and transfer of personal data shall take place in accordance with applicable law (e.g. based on the EU Commission's standard agreement) and Norwegian Aero Solutions data processing declaration and rules, including decisions on appropriate security measures. Personal information can also be presented and transferred to subsidiaries and other companies that are part of the Norwegian Aero Solutions, for the purposes stated above.

10. Principles of data protection and security

Databases containing personal data are protected by firewalls, passwords and other technical measures. Physical databases and their backups are located behind locked doors. Upon receiving the information, strict procedures and security measures are followed to prevent unauthorized and illegal access to, alteration or use of personal information. All safety measures used are appropriate and in accordance with the usual standard. Norwegian Aero Solutions continuously monitors the technical development to ensure that the level of data protection is updated. Folders with personal information that are handled manually are also found behind locked doors where no outsiders have access. Access to the information is only given to certain individuals who work for Norwegian Aero Solutions and who need the information to perform their tasks. The individuals who process the information in this register as part of their tasks receive regular training and guidance in data protection and data security.

11. Rights of registered individuals

The registered individual has the right to:

ask the data controller for access to personal data about themselves and control them
request the correction or deletion of their personal data or restrict the processing
refuse the processing of their personal data
if applicable, transfer their personal data from one system to another.

All requests due to the above rights must be notified in writing to the contact mentioned in section 2 of this privacy policy (or e.g. by unsubscribing from the e-mail list described in the marketing communication section, if applicable). In cases where the processing of personal data is based on the data subject's consent, the data subject may withdraw his or her consent at any time. Withdrawal of consent does not, however, affect the legality of lawsuits that were initiated before the consent was withdrawn. In addition, the data subject can always register a complaint to the relevant supervisory authority if the data subject concludes that Norwegian Aero Solutions has not processed the personal data in accordance with current privacy legislations

12. Revision of the privacy policy

This privacy policy is valid until further notice and available on Norwegian Aero Solutions' website. Norwegian Aero Solutions reserves the right to revise this privacy policy and recommends that the data subjects check the contents of the privacy policy on a regular basis.