1. About Nordic Airline Connect
As part of our business, Nordic Airline Connect collects and processes personal data for the purposes described in this Privacy Policy. Nordic Airline Connect is the data controller in relation to the processing of personal data for these purposes.
If you have any questions about this Privacy Policy or our processing of your personal data, please contact us here:
Nordic Airline Connect ApS
Østerbrogade 78, 1. th.
2100 København Ø
Send us an e-mail
2. Data security is important to us
For us, responsible handling of personal data collected in the course of our business operations is crucial to our business objectives and reputation. This Privacy Policy explains how your personal data is collected and used when you are a customer, supplier or partner of Nordic Airline Connect, and how you can access your own personal data.
3. What is personal data?
Personal data is any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to that person's identity.
4. What type of personal data do we process about you and why?
The information we collect about you will be used for various purposes in connection with your customer relationship and the operation of Nordic Airline Connect's business. The information collected may vary depending on whether you are a customer, supplier or partner, but in general it will be information relating to customer administration, supplier administration and information relating to Nordic Airline Connect's rights and obligations.
Failure to provide personal data on your part may mean that Nordic Airline Connect will be unable to fulfil its obligations in connection with your customer or supplier relationship.
Nordic Airline Connect only collects and processes general personal data. However, in specific cases when booking a trip, it may be necessary for us to process sensitive personal data to a limited extent (e.g. information about special meals on your flight or information about the need for special assistance during your trip) as well as information about CPR numbers (e.g. in connection with obtaining a copy of your passport for use in a visa application) in order to be able to provide you with the desired trip.
We store your travel history and the personal data we collect in our customer database/booking system. We store personal data for five years in accordance with the Danish Accounting Act, unless you have specifically given your consent for us to store your data for a longer period. The information you have registered on My Trip is stored for as long as your user ID is active.
If you have subscribed to our newsletter, we will store your contact information for as long as you choose to continue receiving the newsletter.
Nordic Airline Connect will typically collect the following information:
4.1 Information about our customers
Information that you provide to us when you book a trip or create a travel profile with us, e.g. online via our website or by contacting our sales department, including contact information (first name, middle name(s), surname, address, telephone number, e-mail address and, if applicable, position) and date of birth, CPR number (for use in visa applications, etc.), passport number, bank details, payment card details, information you provide to us regarding your special preferences on the trip (e.g. information about special dietary requirements, need for special assistance in connection with disability or other illness, etc.), membership of our partners' associations, information you provide to us about your preferences in relation to marketing or communication, and information you provide to us if you contact us with a question, to report a problem or when you otherwise contact us in connection with your customer relationship with us.
4.2 Information about our suppliers and partners
Information you provide to us in connection with the conclusion of a supply or cooperation agreement, including contact information (work, job title, first name, middle name(s), surname, address, telephone number and email address), information you provide to us about your preferences in relation to marketing or communication, and information you provide to us if you contact us with a question, to report a problem, or when you otherwise contact us as part of our collaboration.
5. What do we use your personal data for?
Nordic Airline Connect processes your personal data for the purposes listed below. Please note that not all of the purposes, categories of data, recipients of data or types of data processing listed below will apply to you in all cases.
Nordic Airline Connect processes your personal data only to the extent necessary in connection with your customer, supplier or business relationship (taking into account any interests in each individual case) or in accordance with applicable law.
5.1 Customer administration
Nordic Airline Connect processes your personal data in connection with the establishment and ongoing administration of your customer relationship with Nordic Airline Connect as part of the operation of our business, including booking travel and delivering our other products (such as visa applications, travel insurance, transfer services, etc.), maintaining our customer records, invoicing, marketing, statistics, etc. All statistics and analyses are prepared in anonymised format and therefore do not contain information that can be directly attributed to you as a person.
5.2 Administration of supplier and partner relationships
Nordic Airline Connect processes your personal data in connection with the administration of supplier and/or partner relationships where you are a supplier or partner or are the contact person for a supplier or partner with whom Nordic Airline Connect works as part of our business operations, including maintaining our CRM register with information about our contact persons at our suppliers and partners.
5.3 Compliance with applicable laws and regulations
Nordic Airline Connect processes your personal data in connection with compliance with laws and regulations to which Nordic Airline Connect is subject in connection with the operation of the business or to fulfil various reporting or disclosure obligations under applicable laws and regulations.
Nordic Airline Connect does not use your personal data to make decisions based solely on automated processing, including profiling.
Nordic Airline Connect strives to ensure that all personal data we process is accurate and up to date. We therefore ask you to always notify us of any changes in your personal circumstances (e.g. change of address or payment details) so that we can ensure that your personal data is always accurate and up to date.
6. Legal basis for processing your personal data
Nordic Airline Connect processes your data on one of the following bases: (1) Your consent, (2) the conclusion or performance of your contract with Nordic Airline Connect, (3) our legitimate interests, i.e. the purposes described above, (4) compliance with a legal obligation to which Nordic Airline Connect is subject, (5) protection of your vital interests or those of another natural person, (6) processing is necessary for the establishment, exercise or defence of legal claims, and (7) processing is necessary for compliance with Nordic Airline Connect's or your obligations in the field of employment, social security and social protection law which arise from national or EU law. There may also be situations where we process your personal data for the purposes of the legitimate interests pursued by a third party in relation to the purposes described above, unless your interests override those interests.
7. Sharing of personal data
Nordic Airline Connect only discloses information to the extent necessary for the operation of our business, including to provide your flight and other products you have purchased from us in connection therewith.
Nordic Airline Connect will typically disclose personal data to the following recipients in connection with booking a trip and related products:
7.1 Global Distribution Systems (GDS)
A GDS is an IT network system owned or operated by a company that enables transactions between service providers in the travel industry, mainly airlines, hotels, car rental companies and travel agencies. A GDS connects services, prices and bookings by consolidating products across the three travel sectors, i.e. flight reservations, hotel reservations and car rentals.
Nordic Airline Connect uses the GDSs Amadeus and Sabre as part of our business.
7.2 Airlines
Nordic Airline Connect discloses personal data to airlines in connection with booking your trip. For the purpose of booking your flight, we will typically disclose information about your name, departure airport, destination, departure and return dates, special requests in connection with your trip, including ordering special meals during the flight and any need for special assistance on the plane or at the airport to the selected airline.
When travelling to special destinations, we may also disclose your passport number to the airline.
7.3 Handling companies
Nordic Airline Connect discloses personal data to handling companies in connection with your trip. Depending on which airline is used for the trip and which airport the trip departs from, different types of handling companies are used to perform services in connection with the airport. This may include check-in and baggage handling, for example. In connection with the performance of these services, the handling agent may have access to certain personal data necessary to perform the service.
7.4 Travel agents
If, as part of your trip, you are going on excursions or need transfers, Nordic Airline Connect may disclose personal data to travel agents. The travel agent is responsible for arranging the excursion or transfer in question by booking the desired services with local suppliers at the destination. For the purpose of booking your excursions, transfers, etc., we typically disclose information about your first name, middle name(s), surname, date and time of arrival and/or departure, type of vehicle, destination and any special requests in connection with the transfer or excursion, including ordering special meals and any need for special assistance due to disability or illness.
Nordic Airline Connect may also disclose and/or transfer your personal data to other suppliers and/or service providers in connection with the normal operation of our business, e.g. in connection with external administration of our IT systems, analysis tasks, marketing tasks, debt collection, credit assessment, auditing, legal assistance, etc.
For further information about our suppliers' and partners' processing and protection of your personal data, please refer to their personal data policies and terms and conditions.
Nordic Airline Connect strives to limit the disclosure of personal data in a personally identifiable format to the greatest extent possible in order to limit the instances in which information that can be traced back to you personally is disclosed.
Nordic Airline Connect does not disclose your personal data unless this is necessary to conduct our business or meet your needs.
8. International transfers of your personal data
Due to the nature of Nordic Airline Connect's business, your personal data may be transferred to countries outside the EU/EEA when you book a trip with us. In order to provide our services to you, we may in some cases need to use partners and suppliers outside the EU/EEA.
Without the ability to transfer your information to recipients outside the EU/EEA, Nordic Airline Connect will be unable to provide you with the desired trip. This applies if booking your trip requires the transfer of information to recipients outside the EU/EEA, e.g. in order to book flights, hotels, etc. at your travel destination.
Data protection legislation in these countries may be less stringent than in Denmark and the rest of the EU/EEA, as in most cases these are countries where the European Commission has assessed that the level of data protection is not equivalent to that within the EU/EEA.
Where practicable, the transfer of your personal data will be based on standard transfer contracts drawn up by the European Commission specifically for this purpose. Transfers to the United States will, as far as possible, be based on the Privacy Shield. Privacy Shield is an agreement between the EU and the USA which, among other things, establishes a strong set of data protection rules and security measures that US companies participating in the scheme are required to comply with when processing personal data.
In certain cases, however, it will not be practically possible for Nordic Airline Connect to enter into a standard transfer contract or use the Privacy Shield as a legal basis for transfer. In such cases, the transfer of data will be based on Article 49(1)(b) of the Data Protection Regulation (b), as the transfer of your personal data to the country in question is necessary for the performance of the contract between you and Nordic Airline Connect (the booking of your trip) or for the implementation of measures taken at your request prior to the conclusion of such a contract (e.g. in connection with the submission of a qualified offer as mentioned above in section 7).
It is therefore important that you are aware that the transfer of your personal data to countries outside the EU/EEA in connection with booking a trip with Nordic Airline Connect means that your personal data will not enjoy the same protection as under Danish or EU law.
In connection with the transfer of data, there is an obvious risk that the country in question does not have clear, precise and accessible rules on the access of its authorities to your personal data; that there are no rules stipulating that the access of the country's authorities to your data must be necessary and proportionate; that the country does not have an independent and effective supervisory authority, and that the country does not have accessible and effective legal remedies for data subjects.
If you do not want Nordic Airline Connect to send your personal data to recipients outside the EU/EEA in connection with your travel booking(s), please inform us of this when booking your trip.
Nordic Airline Connect will not, under any circumstances, disclose your personal data to recipients outside the EU/EEA unless this is necessary in order to conduct our business and meet your needs, for example by providing you with the desired trip.
9. Data integrity and security
Personal data will not be stored for longer than necessary to fulfil the purpose for which it was collected, unless storage is necessary to comply with national legal requirements, including statutory retention periods in connection with accounting, etc.
It is Nordic Airline Connect's policy to protect personal data by taking adequate technical and organisational security measures. When your personal data is no longer needed, we will ensure that it is deleted in a secure manner.
10. Your rights
Personal data processing that is necessary for us to fulfil an agreement with you or to comply with a legal obligation is permitted without consent. However, if we need to collect and process your personal data for another purpose, you must consent to the processing. You give your consent to the processing of your personal data when you use our services at nordicac.dk, when you contact our travel consultants or when you contact one of our partners.
You have the right to exercise your rights under the applicable data protection legislation at any time. Among other things, you can request access to the personal data held by Nordic Airline Connect and object to the processing of the data, including objecting to automated decisions and profiling or to the use of your personal data for direct marketing. Furthermore, you may request the correction or deletion of any incorrect information about yourself, withdraw your consent to the processing of your personal data, and exercise your right to data portability.
If you wish to exercise one or more of your rights, please contact us at mail@nordicac.dk. Your request will be processed within 30 days in accordance with the data protection legislation in force at any given time.
Complaints about Nordic Airline Connect's processing of your personal data can be made to:
The Danish Data Protection Agency
Borgergade 28, 5.
1300 Copenhagen K
Email: dt@datatilsynet.dk
11. Updates
Nordic Airline Connect regularly reviews and updates this Privacy Policy. You should therefore check this Privacy Policy regularly for any changes that may affect our processing of your personal data.