Nova Airlines AB, org.nr 556490-0875, (Novair) protects your personal integrity. You should always be able to feel safe when you provide your personal data to Novair. With this Personal Data Policy, we want to describe how we ensure that your personal data is processed in accordance with applicable legislation, the Personal Data Act (PuL) and the EU’s privacy legislation, the Data Protection Regulation (GDPR).
Personal data controller
Novair is the personal data controller for processing of your personal data, and is responsible that processing taking place in accordance with applicable legislation. Novair is responsible for the processing of personal data on Novair’s websites and other communication systems connected to Novair.
Data Protection Officer
Novair has appointed a Data Protection Officer whose task, among other things, is to monitor that processing of your personal data takes place in accordance with applicable legislation. Novair’s Data Protection Ombudsman can be reached at the following e-mail address: [email protected], or via regular mail sent to: Novair, Att: “Dataskyddsombud”, Box 45439, 104 31 Stockholm.
Contact details
Do not hesitate to contact Novair if you have any questions about this Personal Data Policy, processing of your personal data or if you would like to request a register extract. You can contact us at [email protected]
How do we collect information about you?
Directly from you. We collect information about you that you provide when, for example, you book a trip, additional service, during personal contact at our destinations or at events, when you register for newsletters, participate in a competition, respond to surveys/surveys, e-mails, call or contact Novair’s customer service.
Through your use of our websites. We collect information through your use of the service when you use our website or any other digital service from us. We also collect information about how you navigate the service, which searches you make and which travel products you are interested in. Read more this about this in the cookie policy.
From third parties. We collect information from third parties who provide personal data about you or other people in the travel party, e.g. if you have booked through a retailer or if a person completes a booking in which you are included or if someone else has been in contact with us on your behalf. We assume that the person providing the information has the consent of all travelers to provide this personal data to Novair.
What information do we collect?
Novair collects the following information for the purposes we describe below:
Contact details: Name, address, phone number, e-mail, gender and date of birth, for example.
Booking information: Booking number, travel information (destination, travel date, etc.), information about purchases (selected payment solution, completed purchase, etc.) and possible purchase of additional services such as transfers and excursions.
Health information: Information about your health that you provide yourself, e.g. illnesses or disabilities. By providing information about your health and consenting to its processing, you agree to us using your health information to administer and deliver the travel service you ordered.
User information: Information about your device such as e.g. IP address, language settings, web settings, operating system, platform, screen resolutions and information about your geographic location. We also collect information about how you interact with Novair, e.g. how you use our services, including page response time, download errors, how you accessed and left the service, as well as delivery notices when we contact you, read more in our cookie policy about collections we make to improve your user experience.
What do we do with your information?
All data is used to provide, perform and improve Novair’s services. Novair processes personal data for the following purposes based on the following legal grounds:
For administration and delivery of travel services
Novair processes your personal data for the administration and delivery of travel services, i.e. in order to fulfill the contract with you. This includes, among other things, issuing travel documents, administering hotel and flight bookings, additional services, excursions at the destinations, making payments and administering any changes before and during your trip.
To offer customer care
We may use your personal data when you contact us with questions, comments or complaints to provide you with the customer care you are entitled to in accordance with the agreement you entered into with us. We process your personal data, such as your name and booking number, in order to complete such service matters connected to your trip.
For sending and providing information
We use your personal data for sending and providing information via e-mail, SMS and/or telephone calls to fulfill the agreement with you. This includes, among other things, sending booking confirmation, important information before and during your trip, offers linked to the trip, any deviations that could occur and payment reminders.
Your contact details and booking information are also used to send you a customer survey after the trip so that we can improve and develop our travel service. The customer survey is voluntary to participate in and is carried out in collaboration with Reevo.
Marketing and Personalization
Your personal data is used so that, through direct marketing of our own and/or specially selected partners’ goods and services, we will provide you with better and more personalized offers. The processing of your personal data takes place to fulfill the agreement with you and other legitimate interests. This includes that Novair among other things
Read more in our cookie policy
You can unsubscribe from receiving marketing from us at any time with each marketing message.
For business development and development of travel services and service
In order to develop and improve our services and service, we mainly use anonymous or anonymized data on an aggregated level for this purpose. However, it may happen that we use information such as user behavior, booking information that we have collected if it is relevant for the purpose, which is based on our legitimate interests to improve our travel service and service to you in the future.
To fulfill legal requirements
We process your personal data so that we can fulfill obligations according to laws and regulations, for example regarding security, accounting, complaints and immigration as well as customs control.
Legal basis
In summary, we process your personal data (i) in order to be able to fulfill our agreement with you, i.e. administer and deliver your trip, (ii) since you have given your consent for us to process it in order to be able to send newsletters, etc., (iii) to comply with legal requirements or (iv) because it is in our or our partners’ legitimate interest.
How long do we keep your information?
Novair retains personal data only for as long as it is necessary to retain it to fulfill our agreement with you and the purposes for which the data was collected in accordance with this Personal Data Policy. Your travel history, which includes contact details, booking information and health information, is saved for two (2) years after the return date. We also save your personal data on other grounds than to fulfill our agreement with you, e.g. to comply with the Accounting Act. The statutory requirements then govern how long we save your data.
If you have registered to receive newsletters from Novair, Novair saves your personal data as long as you wish to continue receiving the newsletter.
The same personal data can be saved by us for different purposes, in different systems, therefore e.g. your name remains in our systems so that we can deliver your trip even though the personal data has been deleted for, for example, marketing purposes.
Who may we share your information with?
Novair may disclose your personal data to carefully selected third parties. All transfers are made in order to fulfill the purposes of the processing of your personal data as described above. We take all reasonable legal, technical and organizational measures to ensure that your personal data is handled securely and with an adequate level of protection when transferred to or shared with such selected third parties.
Suppliers of travel-related services
Transfer takes place to our partners in the travel industry to administer and deliver the travel service you ordered from us. We provide personal data to them in order for the service to be performed:
Travel agencies and digital partners,
When you book your trip through a tour operator that we collaborate with, either in a store or online, it is likely that you provide personal data to the tour operator, for example Ticket. When the booking is made through a tour operator, we send certain personal data, such as the booking number, to them to confirm the booking.
Each company involved is individually responsible for the personal data when it comes to processing in accordance with their own personal data policy. We are not responsible for the tour operator’s own processing of the personal data you have provided to them.
Hotel,
When you book a trip with Novair, we offer several different destinations and hotels. The hotels need certain personal data to complete and confirm your room booking. This concerns information such as name, date of birth, age and gender.
Airlines,
Flight trips are carried out both by Novair and other airlines. The airlines need certain information in order to complete your trip, e.g. name, age and in some cases gender. This personal data is transferred either via the Amadeus or Paxport data systems, or directly to the airline with passenger lists.
In some cases, airlines hire handling agents to be able to perform services connected to the airport, for example baggage handling and check-in. When the agent performs the service, they may have access to personal data that is necessary to be able to perform the service.
Tax free,
When you travel with us, you can order duty-free from our partners, who then receive the personal data they need to be able to handle your order. You can read their own personal data policies on their websites.
Other partners,
We have partners who take care of your bookings for travel-related services, such as excursions and other activities. They receive personal data that they need to deliver the ordered service. This concerns information such as name, e-mail and address to confirm bookings, but also, for example, passport information such as gender, eye color and height, in order to be able to carry out excursions across national borders when passport checks are required.
Contract partners and IT suppliers
We use a number of external suppliers who store and manage personal data for us, such as providers of IT services and systems, web analytics companies, customer surveys, payment solutions and gift card management. We also share your information with certain selected partners to help us tailor our offers and marketing to you.
IT services and systems,
We have a number of internal and external systems in which we handle your personal data, e.g. customer service systems, booking systems and systems for data management and data improvement. The data is processed in these systems in order to, among other things, deliver and administer your trip, handle customer care matters and deliver other related services such as excursions or transfers.
Web analytics company,
In order for you as a user to have the best possible experience on our websites, we use external suppliers to help with personalization, analysis of user behavior and user feedback on our websites. The data that is handled is primarily data that we receive through cookies. Read more in our cookie policy.
Customer surveys,
We have hired Reevo to conduct customer surveys in connection with returning home from your trip. They therefore get access to such contact details, such as e-mail and name, they need to contact you and ask if you want to participate.
Payment solutions,
Novair uses an external payment provider, DIBS, to handle payments and refunds. They get access to personal data needed to carry out the service, such as payment information and in some cases names. The processing is necessary in order for us to be able to deliver your trip or receive a complaint.
Do we process your information in third countries?
Novair arranges trips all over the world, which is why we may transfer your personal data to our partners (e.g. hotels, airlines and agents) or suppliers outside the EU/EEA. If the personal data is transferred to a country outside the EU/EEA, Novair will take all reasonable legal, technical and organizational measures to ensure that your personal data is handled securely and with an adequate level of protection.
Your rights
Novair is responsible for your personal data being processed in accordance with applicable legislation. We will, at your request or on our own initiative, correct, de-identify, delete or supplement information that is found to be incorrect, incomplete or misleading.
You have the right to request access to and rectification or in some cases deletion of your personal data, request limitation of further processing of your personal data and a right to object to the processing (for example if you question whether the personal data is correct or whether the processing is legal ). The Personal Data Controller will notify each recipient to whom the personal data has been disclosed according to the paragraph “To whom may we share your information?” above regarding possible corrections or deletion of data as well as limitation of processing of data that takes place in accordance with this point.
You have the right to data portability, i.e. a right to obtain and transfer your personal data to another personal data controller under certain conditions.
You have the right, through a written and signed application, to receive a register extract from Novair free of charge about, among other things, what personal data is registered about you, the purposes of the processing and to which recipients the data has been or is to be disclosed.
If you do not want Novair to process your personal data for e.g. direct marketing, you have the right to withdraw your consent and/or unsubscribe from our marketing communications at any time. Once we have received your revocation, we will stop processing the personal data for the purpose for which you gave your consent.
You have the right to file a complaint with the Swedish Data Protection Authority if you believe that Novair is processing your personal data in violation of applicable data protection legislation. Read more at www.imy.se.
How do we protect your information?
You should always be able to feel safe when you provide us with your personal data. Novair has therefore taken the necessary security measures to protect your personal data against improper access, alteration and deletion.
Cookie policy
We use cookies to improve your experience, read more about how we process your personal data in our cookie policy.
Changes to this privacy policy
From time to time we may make changes to our privacy policy. We will provide you with reasonable notice of changes to the Policy as required by law. We will also post an updated policy on our website. The updated policy will have a different date and version number. Please visit our website regularly for updates.