How we proccess data

1. Introduction

Ferdia is responsible for handling personal data by us and on our behalf. We determine why and how we handle personal data. We primarily handle your data when you:

• Communicate with us
• Travel with us
• Visit our web page or our social media platforms or use our applications

Your personal data matter to us. We care that the data gathered on you is stored and handle in a secure and safe way, in accordance with privacy regulations.

2. Our overreaching principles for handling personal data

• We treat personal data in a legal, fair and transparent manner.
• We only collect personal data relevant to our customers trips and the customer relationship with us.
• We only collect the personal data we need.
• Personal data collected shall be accurate and updated.
• Personal data collected is deleted when no longer needed.
• Personal data collected is treated with confidentiality.
• We never sell personal data to third parties.
• Our customers are entitled to see data related to own customer relationship, including recieving a copy and demand that we delete the data.

3. How we treat your data

Personal data is all information that directly or indirectly (i.e. together with other data) may be connected to you, such as name, photo, ID number or IP address.

3.1 What purpose serves our handling of your data

We treat your data in accordance with all relevant rules and regulations. This means that each handling must have a legal ground. We primarily handle data to be able to offer services, deliver services and get paid for the services. If we handle your data in a way that requires your consent, we will ask for consent before using the data.

3.2 When you visit our web page or our social media platforms

When you visit our web page or our social media platforms, we handle:

• Information you provide, such as name and contact information.
• Information about your visits to our web page, so-called cookies. For more information on our cookie usage, se section 4.

We handle your data in order to:

• Publish, maintain, test, improve and develop our web page and social media platforms
• Send offers, reports and press notices when you have subscribed to these

3.3 When you communicate with us

When you communicate with us by other means, such as contacting our customer service, we handle the information you provide, such as name, contact information and your request.

We handle your data in order to give good customer service, offer services, find errors and deal with any complaints.

3.4 When law obliges us to

In certain cases, we handle private data as obliged by law, for example for accounting purposes or a traffic accident insurance settlement.

3.5 For how long do we store your data?

Your data is only stored for as long as required by our needs or by law. Thereafter, they are deleted in accordance with our routines.

3.6 To whom may we give your data

We may pass your data on to the following recipients:

• Companies within the group
• External partners (such as bus companies driving for us)
• Other recipients if required by law or authority.

Companies handling data on our behalf always sign a data handling agreement to ensure your data is safe with them.

If we use partners and suppliers outside of the EU/EEC, we add security, such as requiring them to abide by EU rules for data transfers, as published on the EU Commission's web page.

3.7 How we protect your data

We protect your data with technical and organisational security measures. Employees with access may not pass the information on. Access rights limit the number of people that can handle the data.

4. Cookies

We use cookies on our web pages. A cookie is a small text file placed on your PC to help certain functions, such as navigating the web page. We also use cookies to collect statistics about visits and visiting patterns and to improve the web page functionality and usability. This information enables us to develop and optimise our web pages.

The information gathered through cookies on our web page is solely for the use of Ferdia, no third parties. Cookies may gather data considered to be private data, such as IP addresses and related IP information, but no information directly leading to you as a person.

Cookies may be automatically deleted when the browser is closed (so-called "session cookies") or stored on your PC for future visits to the web page ("permanent cookies") Permanent cookies are also automatically deleted after a predefined period.

If you do not accept cookies, your can set your browser to automatically deny these or inform you each time a web page wishes to store a cookie. You may also delete previously stored cookies in your browser. Refusing cookies may limit the web page functionality.

5. Your rights

According to current Privacy law, you may know, correct and demand deleted information stored about you. You may also protest our treatment to us and the supervisory authority. In a few situations, these rights are restricted by legal obligations to store information.

If you wish to use your rights or know more about how we treat your data, please contact compliance@ferdia.no. Should you consider our data handling not to be in compliance with relevant legislation, please contact the Norwegian supervisory authority Datatilsynet.