Reisekrav
Reisekrav

Privacy Policy

How Reisekrav handles your personal data under the GDPR.

Last updated 22 July 2026

This policy explains what personal data Reisekrav processes when you order a complaint letter, why, for how long, and what rights you have under the GDPR. We process only what is needed to deliver your complaint, and delete the data as soon as your order is complete.

01

Data controller

Reisekrav is operated by Reisekrav Baber Ahmad, org. no. 937 839 952, Austadveien 76A, 3034 Drammen. We are the controller for personal data processed through the service. Privacy questions can be sent to post@reisekrav.no.

02

What data we process

To create your complaint we process the information you enter in the form: name, email address, optionally phone number and address, and travel details (departure and arrival airport, flight number, date, airline and what happened). You may also upload documentation, such as your boarding pass and booking confirmation. For payment, payment data is processed by our payment provider Stripe — we never receive or store your card number.

03

Where data is stored

When you pay, your complaint and any uploaded documents are stored temporarily with our processors so we can review and deliver the letter: the complaint details in a database (Upstash/Vercel KV) and the documents in file storage (Vercel Blob). The data is kept only until your order is handled and is deleted automatically — within 24 hours at the latest. Once a case handler has approved and sent the finished letter to your email, both the complaint and the documents are deleted immediately.

04

Legal basis

We process the data to perform our agreement with you to deliver a finished complaint letter (GDPR Article 6(1)(b)). Anonymous, aggregated visitor statistics are processed on the basis of our legitimate interest in improving the site (Article 6(1)(f)).

05

Data processors and third parties

We use a small number of providers that process personal data on our behalf: Stripe (payment), Vercel (hosting, temporary storage of the complaint and uploaded documents, and anonymous analytics) and Webhuset (sending email). Some of these may involve transfers to countries outside the EU/EEA, which then rely on the European Commission's Standard Contractual Clauses (SCC), the EU–US Data Privacy Framework, or an equivalent lawful basis. We never sell personal data and do not share it for marketing. If you choose to take a rejected claim further, we share the necessary case information with our legal partner, the law firm Resolve Partners, so the claim can be pursued on your behalf.

06

Retention

Your complaint and uploaded documents are stored only temporarily while your order is handled, and are deleted once the letter is delivered — within 24 hours at the latest. Payment and accounting data is retained for as long as the Norwegian Bookkeeping Act requires (normally five years); this covers the payment held by Stripe and an internal delivery log that does not contain the complaint itself. Any email correspondence with us is kept for as long as needed to handle your enquiry.

07

Your rights

You have the right to access, rectify and erase any data we hold about you, as well as to restrict or object to processing and to data portability. Requests can be sent to post@reisekrav.no. You may also complain to the Norwegian Data Protection Authority, Datatilsynet (www.datatilsynet.no), if you believe the processing breaches the rules.

08

Cookies

The site does not use cookies for tracking or marketing. Our visitor statistics are anonymous and set no identifying cookies. Stripe's payment page may set necessary cookies on its own domain during the payment itself.

09

Changes

We may update this policy when the service or the regulations change. The current version is always on this page with its updated date.

Privacy questions?

Get in touch and we'll reply as soon as we can.

post@reisekrav.no