Privacy Policy

Reisekrav is operated by Reisekrav AS, org. no. 938 307 245, Grønland 50 (Union Brygge), 3045 Drammen, Norway. We are the controller for personal data processed through the service. Privacy questions can be sent to post@reisekrav.no or +47 972 56 423.

To pursue your claim we process the information you provide in the form: name, email address, optionally phone number and address, plus travel details (departure and arrival airports, flight number, date, airline, number of passengers on the booking, any connection, and the reason the airline gave). You can also upload documentation such as your ticket, boarding pass and messages from the airline, and you sign an authorization which is stored as an image of your signature. When you sign, we also record the time, a truncated version of your IP address (the last part is removed), the browser you used, and which version of the terms you accepted, as evidence that the agreement was entered into. While the case is ongoing we record its status, our correspondence with you, and the outcome: amount awarded, commission, invoice and payment. We take no payment on the site and therefore process no card or payment data. If you get past step 3 of the form without submitting, we keep the draft for up to 48 hours so you can continue from a link we email you. The draft is deleted when the claim is submitted, when you delete it yourself from the link in the email, or after 48 hours at the latest.

When you submit your case, it is stored with our data processors: the case data in a database at Neon, hosted in the EU (Frankfurt), and uploaded documents in file storage at Vercel. The case and its documents remain with us while our legal partner pursues it, so we can follow it up, answer you, and settle the commission once it is decided. See section 6 for how long.

We process the data to perform our agreement with you to bring and pursue your claim against the airline (GDPR Article 6(1)(b)). Records we are required to keep under the Norwegian Bookkeeping Act are processed to comply with a legal obligation (Article 6(1)(c)). Anonymous, aggregated visitor statistics are processed on the basis of our legitimate interest in improving the site (Article 6(1)(f)). Cookies for analytics and ad measurement are only set if you consent in the banner (Article 6(1)(a)), and you may withdraw that consent at any time.

We use a small number of providers that process personal data on our behalf: Neon (database for case data, hosted in the EU), Vercel (hosting, storage of uploaded documents, plus anonymous statistics), PostHog (usage statistics, hosted in the EU) and Webhuset (email delivery). If you consent to cookies, Google (Google Analytics and Google Ads) and Meta (the Facebook pixel) additionally receive information about your visit for visitor statistics and ad measurement, and PostHog records how the site is used so we can find where the form is hard to complete. Everything you type, and the case details shown back to you, are masked in those recordings before they leave your browser. Some of these may involve transfers outside the EU/EEA, which then rely on the European Commission's Standard Contractual Clauses (SCC), the EU–US Data Privacy Framework or an equivalent lawful basis. We never sell personal data, and the information you provide in your case (name, contact details, flight details and documents) is never shared for marketing. See section 10 for the sharing with our legal partner.

Case data, uploaded documents and the signed authorization are kept for as long as the case is ongoing, that is until it is decided (won and settled, lost, withdrawn or declined) and any commission has been invoiced and paid. They are then deleted automatically after 90 days, so we can answer questions about the outcome. Cases we reject or decline without pursuing are deleted after the same period. Accounting records relating to commission actually invoiced, that is the invoice, the amount and whom it concerns, are kept for as long as the Norwegian Bookkeeping Act requires (normally five years). The log of what our case handlers did in the case is kept as long as the case itself. Any email correspondence with us is kept for as long as needed to answer your enquiry. You can ask for your case to be deleted at any time; we then delete everything not covered by the bookkeeping obligation.

You have the right to access, rectify and erase any data we hold about you, as well as to restrict or object to processing and to data portability. Requests can be sent to post@reisekrav.no. You may also complain to the Norwegian Data Protection Authority, Datatilsynet (www.datatilsynet.no), if you believe the processing breaches the rules.

The site works without tracking: essential features and our own visitor statistics (Vercel and PostHog, which store nothing on your device until you consent) are anonymous and set no cookies that identify you. In addition we use tools from Google (Google Analytics and Google Ads) and Meta (the Facebook pixel) for visitor statistics and ad measurement, and PostHog for recordings of how the site is used. These activate only once you have consented in the banner. If you choose "Decline", no cookies from them are stored and no information about you is sent. You can change your mind at any time via "Cookie settings" at the bottom of the page.

We may update this policy when the service or the regulations change. The current version is always on this page with its updated date.

To assess and pursue your claim we share the case information needed — name, contact details, flight details, uploaded documentation and the signed authorization — with our legal partner Resolve Partners Advokatfirma AS (org. no. 935 228 166), Markveien 57, 0550 Oslo, Norway. The basis is that the sharing is necessary to perform our agreement with you (GDPR Article 6(1)(b)). Resolve Partners Advokatfirma AS processes the data as part of its legal engagement for you and is bound by lawyers' statutory duty of confidentiality. You can withdraw the authorization at any time by contacting post@reisekrav.no.