Personal data is any information that can directly or indirectly identify an individual.

This can include:

1. Name, address, age, phone number, email address, and social security number
2. IP address or other online identifiers
3. The content of email communication between a passenger and Avinor
4. Video recordings made using surveillance cameras where individuals can be recognized

Certain information requires special protection and is often referred to as sensitive personal data. This includes information about:

1. Health and health-related conditions
2. Ethnic or racial background
3. Political or religious beliefs and philosophies of life
4. Sexual orientation
5. Criminal matters
6. Trade union membership

Information is considered personal data regardless of whether it exists as text, images, audio, or video recordings.

The processing of personal data refers to any operations performed on personal data, with or without automated means. This can, for example, be:

1. Collection and registration
2. Organization, structuring, and storage
3. Adjustment and alteration
4. Retrieval and lookup
5. Use and sharing
6. Compilation and combination
7. Restriction, deletion, and destruction

Violations of privacy can occur in many ways, for example if:

1. Unauthorized individuals gain access to health information about passengers
2. Information about customers and passengers registered in Avinor's IT systems is outdated, misleading, or very incomplete
3. Information about customers and passengers is used for entirely different purposes than what it was collected for
4. Customer or passenger information is registered, changed, or deleted in Avinor's IT systems without our authorization to do so

GDPR stands for General Data Protection Regulation and is a comprehensive European regulation aimed at harmonizing privacy regulations across all EU and EEA countries. This means there will be uniform rules for the processing of personal data in all European countries, and all businesses processing data of European citizens will have the same obligations. The regulation was introduced in the EU on May 25, 2018, and amendments to the Norwegian Personal Data Act implementing GDPR came into effect in Norway on July 20, 2018. Read more on Datatilsynet's page

The purpose of the privacy regulation is to harmonize the protection of personal data and privacy for all EU and EEA citizens. The law focuses on ensuring equal obligations and rights, as well as simplifying the use and exchange of personal data.

To offer good and effective solutions at our airports, Avinor collects and processes some personal data. As a user of our solutions, you have rights when it comes to the processing of your personal information.

You have:

• The right to information about your data
• The right to access what information we have
• The right to change your data
• The right to delete your data
• The right to restrict our processing of your information
• The right to data portability
• The right to object to and oppose automated decisions and profiling on an individual level

In several solutions at our airports, there may be limited opportunities to exercise all rights. This is because there are requirements we, as airport operators, are obliged to comply with. In some cases, there will be information we receive from a third party. To pass through security control at an airport, for example, you must be able to present a valid travel document, and you thus do not have the opportunity to avoid having your personal data processed in this context.

To access your data used in our commercial solutions, you can send an email to .
For access to personal data in other solutions, use the contact information below.

Check-In

For check-in, there are several options: you can choose staffed check-in, check-in via mobile or web, or use the self-service check-in kiosks. In all cases, you have direct communication with your airline, and you must go through a series of questions regarding baggage, seat selection, passport detail registration, etc. Avinor provides the machines used for self-service check-in but does not have access to the information processed there. Contact your airline for more information about the handling of personal data in the check-in context.

Baggage

If you need to drop off baggage, this can also be done using either a staffed or self-service solution. In both cases, information about the baggage must be checked against your airline’s system to ensure the baggage can be linked to a valid reservation on today’s date and to verify that the reservation is valid from the current airport. The self-service bag-drop solution is developed and operated by Avinor. This means that we process information about you and your baggage in our system. From your airline, we receive details such as name, booking reference, flight, and baggage information. The information is used to process your baggage, and the baggage tags are updated with active status for further handling.

Once you have dropped off your baggage, it is delivered to the airport's baggage system before being loaded onto the plane. In the baggage system, the information on the baggage tag is used to sort which baggage should go on which flight. The baggage system processes the information on the baggage tag.This is not directly identifiable information and is used solely in this solution.

Security Check

Avinor is required by aviation authorities to ensure that only persons with a valid reason should be inside the security control area, and therefore must perform a check of travel documents prior to the security check. The solution retrieves names, booking references, and flight information from the airlines' systems. If you have fast-track access, this information is also used in this solution. This is stored in the system along with the time and position of passage. The same information will also be available at the gate for the efficient handling of boarding. The solution retains the information to streamline passenger handling while necessary.

The actual execution of the security check is performed by third parties contracted by Avinor. Any personal data for this service occurs in the supplier's systems.

Tax Free

In the tax-free shops, Avinor provides a solution for checking valid travel documents based on customs requirements and quota information. The solution retrieves names, booking references, and flight information from the airlines' systems. This is stored in the system along with the time and position for the usage of the solution.

Public Authorities

The police and customs operate at our airports. They use their own systems for their work, but in certain cases, Avinor may be required to provide access to our systems.Avinor collaborates with all stakeholders at the airports and may need to provide information in response to legal requests. Gate When you are boarding the plane, you can use self-service ticket control. This is a solution provided by Avinor that checks against the airline's system to verify the validity of travel documents. Avinor receives the name, booking reference, and flight information and stores this alongside the time and position of the passage. The airline's system is updated to indicate that the passenger has boarded the plane. Assistance Service Avinor provides assistance services at our airports so that all our passengers can seamlessly travel to and from their flights. To deliver this service, Avinor needs information about you and your needs, as well as where you need assistance from and to. The information we receive is the information you have provided to your airline, and Avinor only uses this information to deliver this service. Read more about the assistance service here Video Surveillance Avinor conducts video surveillance of all its airports and everyone who moves around in our areas. This is done for various reasons—primarily for security purposes, but also for operational use and in cooperation with public authorities at the airport.The video recordings are mainly stored for 7 days, but can be kept longer in certain cases if there are special requirements for the recording. Queue Calculation Avinor uses a sensor solution at the airports to calculate queue time through, for example, security control. The processing applies to this limited area (a sensor picks up information on the way into security control and another sensor captures information on the way out), and no more information around the airport will be collected before you potentially go through a new queue measurement point (passport control, duty-free arrival waiting time). The sensors pick up signals from your mobile device (usually a MAC address from a mobile phone with Bluetooth enabled). This information is encrypted and anonymized in our systems and is processed solely for statistical purposes, capacity calculation, and to provide queue time information to travelers. The fact that the information in our system is encrypted and anonymized means that the MAC address (the identifiable information) from your mobile device is rendered unrecognizable so that it cannot be traced back to you. More on technical details: Anonymization procedure for WiFi/BLE/Bluetooth sensor: WiFi/BLE/Bluetooth sensors work by detecting MAC addresses from mobile devices, such as mobile phones with Bluetooth enabled. These signals are captured by sensors on the way in and out of a limited area. When the mobile device passes the sensors, travel times and movement patterns between the sensors are calculated.

Tax free

In the tax-free shops, Avinor provides a solution for checking valid travel documents based on customs requirements and quota information. The solution retrieves name, booking reference, and flight information from the airlines' systems. This is stored in the system along with the time and position of the solution's usage.

Domestic Transfer

To simplify the journey for passengers arriving at Oslo Airport from abroad and continuing domestically, a solution is offered that allows passengers to go through an alternative customs filter to directly reach the domestic terminal. The solution is initiated by the Ministry of Transport, provided by Avinor, and used for customs clearance by the Customs Authorities, who are responsible for processing personal data.

Baggage

Avinor does not process any personal data when delivering baggage. Contact your airline if needed. Lost baggage should be reported to the ground handler, who will then register it in the airline's systems. The airline will handle the inquiry further and ensure the baggage is transported to the passenger.

Public Authorities

Police and Customs operate at our airports. They use their own systems for their work but may, in certain cases, require Avinor to provide access to our systems. Avinor collaborates with all entities at the airports and may have to disclose information upon legal requests.

Certain entry permits (without a visa) can use automated passport control upon arrival. Here, passports and travel documents are checked mechanically by a solution provided by Avinor for the Police.