Skip to content

Home / Privacy policy

Privacy

How we handle personal data.

Fast Travel AS is the controller for the personal data described here. Last updated 8 November 2023.

Who we are

Fast Travel AS (organisation number 931 855 654), Bedriftsvegen 64, 3735 Skien, Norway. Questions about this policy or your data go to support@fasttravel.com.

Whose data this covers

  • Customers and their contact people
  • Prospective customers
  • Contact people at suppliers and partners
  • People linked to permit numbers, licence plates and tag (chip) numbers registered with us
  • Visitors to our websites, including people who contact us through them
  • Our employees

Why we process it

Giving us personal data is voluntary, but we need some of it to deliver a purchase or fulfil a contract. We do not buy, rent or sell personal data. We process personal data under GDPR Article 6(1): on the basis of consent, to perform a contract, to meet a legal obligation, or for our legitimate interests.

Your rights

  • See the personal data we hold about you
  • Have inaccurate data corrected
  • Have data deleted or its processing restricted, in some cases
  • Object to processing based on our legitimate interests
  • Receive your data in a portable format, where processing is based on consent or a contract
  • Withdraw consent at any time

We answer requests within 30 days. You can complain to the Norwegian Data Protection Authority (Datatilsynet), but we ask you to contact us first so we can try to resolve it.

How long we keep it

We keep personal data only as long as we need it for the purpose it was collected for, or as long as the law requires. Accounting material is kept for up to five years. Marketing data is kept for as long as the customer relationship lasts.

Who we share it with

  • Our data processors, such as providers of email, accounting, cloud storage and IT support, who are bound to protect the data
  • Avinor
  • The Ministry of Transport
  • Justervesenet (the Norwegian Metrology Service)
  • Professional advisers
  • Public authorities, where we are required to report

Transfers outside the EU/EEA

We only transfer personal data outside the EU/EEA to countries the European Commission has approved, or with safeguards such as the EU standard contractual clauses.

Security

We protect personal data with strong passwords, encryption, access control and backups, and limit access to the people who strictly need it.