Privacy Policy

 

Last updated May 15, 2023

Avinor's guidelines for privacy, cookies, and marketing ("the guidelines") apply to the collection and use of personal data on:

  • Avinor's websites: www.avinor.no, profile.avinor.no ("my profile"), travel.avinor.no and feedback.avinor.no
  • Avinor's passenger app ("my profile") for iOS and Android
  • Avinor's Wi-Fi network
  • Avinor's various digital services, including the booking solution for parking

Avinor AS ("Avinor") owns the website www.avinor.no, other web pages as indicated above, the passenger app Avinor, and the networks at Avinor's airports in Norway. We want you to feel secure when using our network, app, and website. This statement is about how Avinor ensures your privacy and how we collect and use information in accordance with Norwegian law.

Contact Information:

If you have questions about these guidelines or how we handle personal data, you can contact us at or send a letter to Avinor AS, attn: Data Protection Officer Mari Wiker, PO Box 150, 2061 Gardermoen.

1. DATA CONTROLLER

Avinor, via the CEO, is the data controller for the processing of personal data.

2. PROCESSING OF PERSONAL DATA

All use of Avinor's Wi-Fi network, website, and applications is based on voluntariness.Which personal data Avinor processes about you is described in these guidelines, see sections 3 and 4. In addition, we process non-identifiable information about the users of our networks, websites, and applications. The purpose of this is to compile statistics that we use to improve and further develop the offerings on the websites etc. We do not link the information directly to you as a user. See more about web analysis and cookies in section 6. Avinor's websites and applications may link to websites or applications owned and operated by other entities. We use, among other things, an external service provider for a payment solution when booking parking. From this service provider, we will receive a receipt of the payment you have made with information about, among other things, the amount, payment time, etc. Beyond this, we do not have access to and do not process personal information collected on the external sites linked to. Avinor is also not responsible for either the content or the processing of personal data on other websites or applications. 3. MORE ABOUT AVINOR'S PASSENGER APP Avinor's passenger app is a digital service that will provide you with tailored travel information and a better experience at Avinor's airports in Norway. The purpose is to provide you with relevant, customized, and updated information about your trip, such as check-in counter, gate information, and any changes in flight time/gate based on where you are and where you are going. The app also offers relevant and tailored services or products from Avinor or Avinor's partners, such as parking, shops, restaurants, etc.You can also book parking through Avinor's website. If you want to receive relevant and tailored information and offers through Avinor's passenger app, Avinor needs to collect and process information about you, such as name, address, phone number, flight number, and other non-sensitive personal data like demographic data, history, and preferences. In the app, you decide how much travel information you want to enter beyond flight information. All processing of personal data is in accordance with Norwegian law and is either based on voluntary and informed consent from the individual user or necessary to fulfill an agreement with the user. Consent can be withdrawn at any time. You can also consent to us tailoring information and offers to your user profile. The personal data collected from Avinor's passenger app is processed and stored in the cloud solutions Microsoft Azure and Salesforce. See also point 9. 4. PURPOSE OF THE PROCESSING It is voluntary to use Avinor's network, website, and applications as well as to provide personal data in connection with these services that enable the receipt of information, news, current offers, etc. We will use the information about you for the following purposes: (i) Execute one or more agreements entered into with you as a user through the provision of services via the Avinor app. (ii) For statistics, aggregation, and administration of the websites and services.Information is collected so that Avinor can obtain additional information about users, including to track general usage patterns. We use this information to manage and improve our services, as well as to optimize capacity and logistics at the airport, thereby simplifying and enhancing the passenger experience and contributing to a seamless journey. The information we collect through Avinor's passenger app and website will also be used as specified in the consent declaration that may appear when you give your consent, and otherwise in "my profile" in the app or on the website. Here, you can also manage your consents, meaning you can give or withdraw consent. 5. WHAT INFORMATION IS PROCESSED? We process both personally identifiable information and non-personally identifiable information about you. Personally identifiable information is data that identifies you as an individual. Non-personally identifiable information is information and any other data that does not reveal your personal identity. Personally identifiable information Avinor collects and processes the following information about you depending on which services you use: (i) When using Avinor's wifi at airports: - MAC address, IMEI number, and IP address. We do not directly associate this information with you as a user until you potentially register in Avinor's passenger app or websites. We use the information to manage and maintain our pages.Examples of what the statistics provide answers to include: how many people visit different pages, how long the visit lasts, which websites users come from, and which browser is used. This allows us to develop continuously better and more user-friendly offerings. (ii) If you contact Avinor, for example, by sending us an email, relevant information may be stored, such as your name and email address. (iii) If you log into "my profile" through the websites or Avinor's applications: - Name, address, postal code, city, phone number, date of birth, gender, email address, payment card, bonus card, vehicle registration number, travel information such as destination and time of travel. - Mac address and IMEI number, we use this information to administer, maintain our sites, and simplify logging in. Examples of what the statistics provide answers to include: how many people visit different pages, how long the visit lasts, which websites users come from, and which browser is used. This allows us to develop continuously better and more user-friendly offerings. - If you book parking through Avinor's websites or applications, relevant information such as email address, name, address, mobile number, and information about the car, such as registration number, car brand, model, and color, will be stored, as well as information about the time of parking, the duration of the parking, and how much you paid for the parking reservation will be stored. - If you follow a flight in the passenger app, you will receive push notifications about the status of the current flight.This type of alert can be enabled or disabled in the device settings.

Avinor collects only the information necessary at any given time to simplify and enhance your travel experience, in accordance with what you have consented to.

More about location data

Avinor's passenger app uses location data to customize the user experience (e.g. find the nearest airport), information, and offers you receive based on your location, current travel, etc.

The application will notify you before we begin collecting and processing your location data, and the notification allows you to choose whether or not to grant Avinor access to location services. You can choose to deactivate location services on your device at any time.

6. WEB ANALYTICS AND COOKIES ETC.

Web Analytics

To create as user-friendly a website as possible, we use the analysis tool PostHog. Using PostHog, we can collect data and analyze how avinor.no is used. PostHog processes data in Europe. We do not store your IP address.

  • Unique ID: A randomly generated ID.This is not tracked across domains.
  • Page views: All page views you make.
  • Referrer: The page you come from is stored if available.
  • User Agent: We read the User Agent header to extract information about which browser and operating system you are using.
  • Time: Time you spend on a page.

Cookies and LocalStorage

Avinor's website and applications use cookies, SessionStorage, and HTML5 LocalStorage. Cookies are small information capsules (text files) that the app asks your browser to store on the mobile device. SessionStorage temporarily stores personal information and is deleted when the user closes the browser window. LocalStorage is newer technology but has much of the same functionality. This allows the app, among other things, to remember your actions or preferences over time, making it more user-friendly.Avinor's website and applications use the following:

Visual Studio App Center:

We track the usage of Avinor's passenger app and all submitted data is anonymized.

Social media:

We track traffic from avinor.no to Avinor's social media pages: Facebook, Twitter, and Instagram.

How to disable cookies in your browser:

Displaying videos on YouTube

On some of our websites, you will see that we use YouTube to display videos. YouTube stores cookies, such as personal settings and information about bandwidth. This, like Google Analytics, is also subject to Google's privacy policy.

User surveys

We regularly conduct user surveys to improve our services. We use Task Analytics to measure and improve your user experience on the website.

7.THE LEGAL BASIS FOR THE PROCESSING

We process personal data based on the following legal grounds according to the Personal Data Act, which implements the EU's General Data Protection Regulation 2016/679 (GDPR):

  • Your consent to the processing, cf. Article 6 (1) (a)
  • The processing is necessary to fulfill a contract with you, cf. Article 6 (1) (b)
  • A legitimate interest in improving websites, applications, and other services and offerings at the airports, cf. Article 6 (1) (f)

8.DIRECT MARKETING

If you create a personal profile on Avinor's website or in Avinor's passenger app, you can consent to Avinor collecting and processing your personal data, as well as receiving useful information related to your travel in addition to customized offers, services, newsletters, competitions, customer surveys, and other marketing from Avinor and our partners.

The offers will apply to all types of products, services, and benefits relevant to travelers at Avinor's airports and offered by Avinor or our partners, including stores, dining establishments, airlines, and other suppliers or partners. If you consent to this, you will be able to receive information about products and services relevant to you through email, MMS, SMS, and push notifications. You can choose which channels you wish to receive offers through by going to your personal settings under «my profile».

You will receive commercial information through newsletters, emails, etc. on average once a month.Additionally, you will receive push notifications through Avinor's passenger app regarding your travel to and from the airport and while you are inside the airport, provided you have installed the app and accepted location services. You can also consent to us sending you information specifically tailored to your user profile. Alternatively, more general newsletters will be sent to you. If you no longer wish to receive offers from Avinor or our partners, you can withdraw your consent at any time by unsubscribing from marketing under your personal settings in "my profile." We do not allow a third party to use your personal data for marketing or communication purposes unless you have consented to this. Offers and other messages are posted by the tenant and advertiser in their own solution but conveyed via Avinor's systems. Partners or advertisers do not have access to your identifiable personal data. 9. DATA PROCESSORS Avinor has entered into agreements with the following data processors: - Microsoft - supplier of the Azure cloud solution where personal data is stored - Salesforce – supplier of the cloud solution for Avinor's customer communication and digital marketing Avinor has written agreements with all our data processors and subcontractors. Transfer of personal data to a data processor or subcontractor outside Norway will occur in accordance with the applicable rules for data protection and information security requirements. 10.HOW DO WE SECURE THE INFORMATION?

Avinor has established rules and routines for the protection of privacy in accordance with the regulations of the Personal Data Act. We will take all reasonable precautions to ensure that our employees, data processors, and third parties act in accordance with these guidelines and our obligations under privacy legislation, including the principles of built-in privacy and data minimization.

Avinor also has a privacy representative, see contact information at the beginning.

11. YOUR RIGHTS

Everyone who inquires has the right to information about any processing of personal data in a business according to the Personal Data Act. Avinor has provided information in this statement.

You have the right to access your own information. If the information is incorrect, incomplete, or if there is no access to process them, you may also request Avinor to correct or delete the information. See contact information at the beginning of this statement.

If you believe that we are processing your personal data without a legal basis, you can complain to Datatilsynet, but we encourage you to contact us so that we can partly address your objections and partly clarify any misunderstandings.

We neither process nor store information about you longer than necessary for the purpose or as required according to the consent you have given, for the content of concluded agreements, and not beyond the limits of the law. We delete personal data when they are no longer necessary for the purpose they were collected for.