Privacy Policy for Norsk Biltransport AS - NBT Services APP

Last updated: November 13, 2025

1. Data Controller

Norsk Biltransport AS
Organization number: 989 245 228
Email: it@norskbiltransport.no

We are the data controller for the processing of personal data in connection with the use of our internal logistics app (hereinafter "the App").

2. Purpose and Legal Basis

The App is developed for our terminal workers and is used for:

Registration and location tracking of vehicles at the terminal
Documentation of vehicle condition (survey/damage assessment)
Quality assurance and traceability in the logistics process

The legal basis is legitimate interest (GDPR art. 6(1)(f)) to operate the business efficiently, as well as performance of contract (GDPR art. 6(1)(b)) towards our customers.

3. What Personal Data We Process

3.1 User Information

Username - for authentication and access control
Login history - timestamps for login and logout
User identification - each registration is tagged with the user's ID for traceability

3.2 Location Data

GPS coordinates - recorded when a vehicle is scanned to document the vehicle's location at the terminal
Location data is linked to the vehicle, not to the user
Data is stored only until the next scan of the same vehicle

3.3 Images

Images of damage - taken only when recording damage during survey
The images do not contain personal data unless people happen to be visible in the background

3.4 Technical Information

Device type and operating system
App version
Error logs for technical support

4. How We Use the Information

Personal data is used for the following purposes:

Authentication and access control - ensure that only authorized employees have access to the App
Traceability - document who has performed which registrations
Vehicle location - efficient handling of vehicles at the terminal
Damage assessment - document vehicle condition and share information with owner/importer
Quality assurance - ensure correct handling in the logistics process
Technical support and bug fixing - improve the App's functionality

5. Sharing of Information

5.1 Internal Recipients

The information is available to:

Terminal workers using the App
Management and administrative staff with legitimate business need
IT department for operations and support

5.2 External Recipients

Vehicle owners and importers - receive images of damage to their vehicles as part of the delivery
Data processors - AWS (Amazon Web Services) for storage of images in the Stockholm region

We do not share information with third parties for marketing purposes.

6. Storage of Information

6.1 Storage Location

User data and registrations - stored on Norwegian servers
Images - stored with AWS in Stockholm, Sweden (EU region)
All data is stored encrypted (encryption at rest with MariaDB)

6.2 Retention Period

Login history - deleted after 90 days
Location data - deleted upon next scan of the same vehicle
Images of damage - stored in accordance with contractual obligations, typically until delivery is completed
Registration data - stored in accordance with accounting legislation and contractual obligations

7. Security

We have implemented technical and organizational security measures to protect personal data against loss, misuse, and unauthorized access:

Encryption of data at rest
Secure authentication with username and password
Sessions with limited duration (18 hours)
Access control - only authorized employees have access
Regular security updates
Logging of security incidents

8. Your Rights

As a data subject in our system, you have the following rights under GDPR:

8.1 Right of Access (art. 15)

You have the right to obtain information about what personal data we process about you.

8.2 Right to Rectification (art. 16)

You can request that incorrect or incomplete information be corrected.

8.3 Right to Erasure (art. 17)

You can request that information be deleted when:

It is no longer necessary for the purpose
You withdraw consent (where this is the legal basis)
The information is processed unlawfully

Note that we may be obliged to retain certain information in accordance with accounting legislation or other legal obligations.

8.4 Right to Restriction (art. 18)

You can request that processing be restricted in certain situations.

8.5 Right to Data Portability (art. 20)

You have the right to receive your personal data in a structured, commonly used, and machine-readable format.

8.6 Right to Object (art. 21)

You can object to processing based on legitimate interest.

To exercise your rights, contact: it@norskbiltransport.no

9. Right to Complain

If you believe that our processing of personal data does not comply with what we have described here or that we otherwise violate data protection legislation, you have the right to complain to the Norwegian Data Protection Authority.

Norwegian Data Protection Authority (Datatilsynet)
P.O. Box 458 Sentrum
0105 Oslo, Norway
Phone: +47 22 39 69 00
Email: postkasse@datatilsynet.no
Website: www.datatilsynet.no

10. Third-Party Services

The App uses the following third-party services:

10.1 Amazon Web Services (AWS)

Purpose: Storage of images
Location: Stockholm, Sweden (EU region)
Privacy Policy: https://aws.amazon.com/privacy/

We have entered into a data processing agreement with AWS that ensures your personal data is processed in accordance with GDPR.

11. Cookies and Tracking Technology

The App does not use cookies or other tracking technologies for marketing or analytics purposes. Technical information is only collected to ensure the App's functionality and troubleshooting.

12. Changes to This Privacy Policy

We reserve the right to update this privacy policy. In the event of significant changes, you will be notified through the App or via email. We encourage you to review this policy regularly.

The last update is indicated at the top of this document.

13. Contact Us

If you have questions about this privacy policy or our processing of personal data, you can contact us at:

Norsk Biltransport AS
Email: it@norskbiltransport.no
Organization number: 989 245 228

This privacy policy applies to the internal use of Norsk Biltransport AS's logistics app for terminal workers.