AERO NORWAY’S PRIVACY POLICY

1. Controller

Last Updated on October 2025

Aero Norway AS
Flyplassvegen 220, 4055, Sola, Norway
Email: compliance@aeronorway.no

We are responsible for processing your personal data when you use our website www.aeronorway.no.
For questions about data protection, please contact: compliance@aeronorway.no

2. Applicable Law

This Privacy Policy is governed by:

  • The EU General Data Protection Regulation (GDPR), Regulation (EU) 2016/679 and
  • The Norwegian Personal Data Act (Personopplysningsloven 2018)

3. Personal Data We Collect and Process

We may collect and process personal data about you when you visit our website or interact with us. The data we collect falls into the following categories:

a) Information you provide to us
This includes information that you voluntarily provide, for example:

  • Details entered in forms on our website, including your name, email address, phone number, company name, and any message content.
  • Information provided when you contact us by email, phone, or post.
  • Information provided when entering or performing a contract with Aero Norway for the supply of goods or services.

b) Information collected automatically
When you visit our website, we may automatically collect certain technical information, such as:

  • Your IP address, browser type and version, and operating system.
  • The date, time and duration of your visit.
  • The pages you visit, referring websites, and other communication data.
  • Information about how you interact with our website, including cookies and similar technologies (see our Cookie Policy (EU) – Aero Norway for more information).

We collect this data to ensure the security and proper functioning of our website, to improve our services and to analyze website traffic.

4. Legal basis for Processing

We process your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Norwegian Personal Data Act (Personopplysningsloven) based on the following legal grounds:

  • Consent: Art. 6(1)(a) GDPR: When you have given your consent, for example for the use of cookies or to receive marketing communications.
  • Contractual necessity: Art. 6(1)(b) GDPR: When processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
  • Legal obligations: Art. 6(1)(c) GDPR: When processing is necessary to comply with legal obligations to which we are subject (for example, accounting or employment record-keeping).
  • Legitimate interests: Art. (6)(1)(f) GDPR: When processing is necessary for our legitimate business interests, such as ensuring the security of our website and systems, maintaining communication with business partners, and improving our services, provided these interests are not overridden by your rights and freedoms.

5. Data Sharing and Transfers

Personal data may be transferred to and processed in countries outside the European Economic Area (EEA), including where our service providers or partners operate.

In such case, Aero Norway ensures that appropriate safeguards are in place in accordance with Article 45 and 46 of the General Data protection Regulation (GDPR). These safeguards may include:

  • A decision by the European Commission that the country provides an adequate level of protection (Art. 45 GDPR); or
  • The use of standard data protection clauses adopted by the European Commission (Art. 46(2)(c)-(d) GDPR); or
  • Other legally recognized mechanisms ensuring equivalent protection of personal data.

For more information on these mechanisms, please visit the European Commission’s website for Standard Contractual Clauses (SCCs) and Adequacy Decisions.

You may request further information about the applicable safeguards by contacting us at compliance@aeronorway.no.

6. Data Retention

We keep personal data as long as necessary for the purpose described above, as required by law. Technical log data is generally retained only as long as necessary for security and maintenance purposes, unless longer retention is required for legal or security reasons.

7. Data Security

We are committed to protecting your personal data and maintain its confidentiality, integrity, and availability in accordance with the General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act (Personopplysningsloven).

To prevent unauthorized access, alteration, disclosure, or destruction of your personal data, we have implemented appropriate technical and organizational measures, including:

  • Secure servers located in the European Economic Area (EEA).
  • Role-based access control to limit access to authorized personnel only.
  • Encryption and firewall protection of our IT systems.
  • Regular updates and monitoring of our IT infrastructure to prevent security breaches.
  • Procedures for managing and responding to any suspected data security incidents in accordance with Article 33 GDPR.

While we take all reasonable steps to protect your personal data, please note that transmission of information over the internet may not be completely secure, and we cannot guarantee the absolute security of your data transmitted to our website.

We ensure that any third-party service providers handling personal data on our behalf are subject to confidentiality obligations and data processing agreements in compliance with Article 28 GDPR.

8. Managing your Personal Data

You have control over your personal data and how we use it. Here’s how you can manage it:

a) Direct Marketing Choices
When filling in forms on our website, you may opt out of receiving marketing communications by selecting the appropriate box.
If you previously consented to marketing communications, you can change your mind at any time by contacting us at compliance@aeronorway.no or using the contact details on our website.

b) Sharing Your Data
We will not sell, distribute, or lease your personal information to third parties without your consent, except where required by law.
With your permission, we may use your information to send promotional materials from carefully selected third parties.

c) Access and Correction
You may request access to the personal data we hold about you and ask us to correct any inaccurate or incomplete information.
Please contact us at compliance@aeronorway.no to make such request. We will respond within one month.

d) Your Rights under GDPR
Aero Norway is committed to fair and transparent processing of your personal data. You have the following rights under the GDPR

  • Right of access to the personal data we hold about you (Art. 15 GDPR).
  • Right to correct inaccurate or incomplete data (Art. 16 GDPR).
  • Right to erase your data (“right to be forgotten”) (Art. 17 GDPR).
  • Right to restriction of processing in certain circumstances (Art. 18 GDPR).
  • Right to data portability (Art. 20 GDPR).
  • Right to object to processing including for direct marketing purposes (Art. 21 GDPR).

To exercise these rights, please contact us at compliance@aeronorway.no. We will process your request promptly and may need to verify your identity to protect your data.

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with a supervisory authority. The relevant supervisory authority for Aero Norway AS is:

Datatilsynet (The Norwegian Data Protection Authority)
P.O. Box 458 Sentrum, N-0105 Oslo, Norway
+47 22 39 69 00
Email: postkasse@datatilsynet.no
Website: Datatilsynet – personvern og informasjonssikkerhet | Datatilsyne

9. Cookies

A cookie is a small text file stored on your device that helps our website remember your preferences and analyze how visitors use the site. Cookies allow our website to respond to you as an individual. They can tailor the website’s features and content to your needs, interests, and preferences by remembering the choices you make while visiting.

We use cookies for the following purposes:

  • Traffic analysis: We use traffic log cookies to identify which pages are being visited. This helps us analyze website traffic and improve the website to better meet your needs. All data used for analysis is removed from our system once processed. For clarity’s sake analytics cookies are used only with prior consent.
  • Functional purposes: Ensure proper website operation and enhance user experience.

Overall, cookies help us provide you with a better website by enabling us to monitor which pages you find useful and which you do not. A cookie does not give us access to your computer or any personal information other than what you choose to share with us.

Type of cookies we use:

  • Session Cookies: Temporary cookies that are deleted when you close your browser. These allow the website to recognize your session while navigating through pages.
  • Persistent Cookies: Remain on your device for a set period to remember your preferences. You can delete these at any time via your browser settings.

You have control over cookies:

  • You may accept or decline cookies when visiting the site.
  • You can change your browser settings to block or delete cookies at any time. Please note that some website features may not function fully if cookies are disabled.

For more information on the cookies we use and their purposes, you can view our Cookie Policy, Cookie Policy (EU) – Aero Norway.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or website functionality. Any updates will be posted on this page with the revised date indicated at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.

11. Contact Us

If you have any questions, concerns, or requests regarding your personal data or this Privacy Policy, you can contact us at:

Email: compliance@aeronorway.no

We will respond to your requests in accordance with applicable data protection laws.

12. Disclaimer and limitation of these data protection notices

Our website may include links to external websites, such as partners, suppliers, or other organizations. Please note that once you leave our website by following such a link, Aero Norway does not have any control over how your personal data is collected or processed on those external sites.

These sites are not governed by this Privacy Policy, and we cannot be held responsible for the protection or privacy of any information you provide while visiting them.

We encourage you to review the privacy policy of each website you visit to understand how they handle your personal data.