Privacy policy

1. What is Norwegian Reward?

Norwegian Reward is a loyalty program offered by Norwegian Air Shuttle ASA ("Norwegian"). By signing up as a Member of Norwegian Reward you may accrue CashPoints and earn special Rewards by buying tickets from Norwegian or products and services from any of Norwegian Reward's partners ("Partners"). CashPoints earned can be used by Norwegian Reward Members to purchase flight tickets or other related products or services from Norwegian.

For your ease of reference, here is a short explanation of the main features of Norwegian Reward:

• CashPoints: Our digital currency which Members can earn and use by buying tickets and other products and services from Norwegian or other Partners of Norwegian Reward.
• Rewards: Benefits, such as free checked baggage, which Members can earn by being a loyal customer of Norwegian.
• Reward Partner: Other companies that, through an agreement, can offer Norwegian Reward Members an opportunity to earn CashPoints and benefit from special offers. As a Member of Norwegian Reward, you must identify yourself as such when you make purchases with our Reward Partners in order to earn CashPoints.
• Reward Number: As a Reward Member you will be awarded a Reward Number which is used to connect you with the purchases you have made with Norwegian or any of our Partners.
• Family Account: This is a solution that enables Members to collectively earn and use CashPoints in one account.

More information can be found in the Terms and Conditions for Norwegian Reward.

When you become a Member of Norwegian Reward, you will be able to log into your own account on our website and keep track of your registered flights and CashPoints earned. As a Member you will receive status updates and Member offers. Please know that you as a Member can administrate the communication settings on your Reward profile. Our Reward program has a long list of Partners which will enable you to earn CashPoints not only when you buy flight tickets with Norwegian, but also when you shop online, book a hotel or make other purchases.

Please note that membership in the Norwegian Reward program is voluntary. You may purchase airline tickets and other products and services from Norwegian or buy products or services from our Partners without a Norwegian Reward membership, but you will not be able to earn CashPoints or be eligible for Rewards. Norwegian Reward retain auditlogs for 18 months according to legal interests and commintments.

2. General statement of applicability of this Privacy Policy

When becoming a Member of Norwegian Reward, it is necessary for us to collect and use personal data about you to be able to fulfill our obligations to you as Member. The protection and confidentiality of your personal information is important to Norwegian Reward and we are determined to protect it.

Norwegian Reward is the controller for any processing of your personal data as a Member of Norwegian Reward. As controller, Norwegian Reward is responsible for defining the purposes for processing your personal data and is also responsible for compliance with current data protection legislation. The address and contact details of Norwegian Reward can be found at the bottom of this page.

Please note that when you interact and/or communicate with any of Norwegian Reward's Partners, this Norwegian Reward Privacy Policy does not apply. You are entitled to receive information about the collection, use, processing and protection of your personal data by our Partners by contacting the relevant Partner. Your personal data related to interactions with any of our Partners, which is sent to or received by Norwegian Reward as part of the loyalty program, is however regulated by this Privacy Policy.

3. The Personal Data that Norwegian Reward collects and generates

3.1 Introduction

This Privacy Policy explains how Norwegian Reward collects, uses and discloses Personal Data when you use Norwegian Reward and otherwise interact with the program as described below. It explains our data processing activities, their purpose, which categories of personal data these activities involve and the legal basis for these processing activities.

In this Privacy Policy we also inform you of your rights related to our processing of your personal data, any transfer we may make of your personal data, and our cookies policy.

3.2 Establishing a membership in Norwegian Reward

When establishing a membership in Norwegian Reward, you will be asked to provide information such as your name, date of birth, gender, and email address, and our system will provide you with a Reward Number, and identify your preferred language and currency. In addition to this, when booking flights or other related products or services from Norwegian, you will be asked to provide information such as your phone number and your address.

The purpose of these processing activities is for us to be able to establish and provide a loyalty service and so that our Members can effectively manage their membership accounts.

The legal basis for the processing of your data as described in this section is that it is necessary for us to fulfill our obligations according to the Terms and Conditions for Norwegian Reward.

3.3 Establishing a Family Account in Norwegian Reward

Norwegian Reward allows the Members to create or join a Family Account. The Family Account enables Members to earn and use CashPoints collectively. By creating a Family Account, you will be designated as the administrator of the account (Captain) and you will be asked to provide information about other Members of the account, such as an email address, Reward Number and your relationship to them. If you invite persons under the age of 16, you will be asked to create an account for them which will be managed by you. In order to sign up a person under the age of 16, you must provide information about his/her birth date, name and gender.

The purpose of these processing activities is to provide our Norwegian Reward Members the option of establishing and joining a Family Account and for our Members to be able to jointly manage their Membership in Norwegian Reward through the Family Account.

The information you have provided for the purposes of establishing a Family Account and for being an administrator or member of a Family Account will be deleted when a Family Account Member deletes his/her Norwegian Reward Member profile or when he/she leaves the Family Account.

By creation of or accepting invitation to join a familiy account, you accept that information about your date of birth and name is shared with other members of the family account.

The legal basis for the processing of your data as described in this section is the Terms and Conditions for Norwegian Reward. In the Terms and Conditions for Norwegian Reward, you will find more information on Family Accounts.

3.4 Managing your Norwegian Reward account

The basic feature of Norwegian Reward is to allow its Members to earn CashPoints and gain Rewards by purchasing airline tickets from Norwegian or products or services from one of the Norwegian Reward Partners. The Norwegian Reward membership will provide you with a personalized user account on our website, which you can access via your computer or other devices. When you make purchases with Norwegian, Norwegian Reward will retain information regarding your flight, such as destination and price, in order to accrue the relevant amount of CashPoints in your membership account. If you purchase products from one of our Partners, the Partner will send information about those purchases to Norwegian Reward, such as your Reward Number, your name, date of the transaction and either CashPoints to accrue (if the Partner calculates the CashPoints to accrue) or the transaction value (if Norwegian Reward calculates the CashPoints to accrue).

When you spend CashPoints, Norwegian Reward will process information such as your Reward Number, CashPoints to spend, flight number and dates of travel.

Norwegian Reward Members are also able to qualify for Rewards, including Limited Edition Rewards, e.g. following the purchase of a fixed number of flights or earning a fixed amount of CashPoints. For this purpose, Norwegian Reward will use your Reward Number and provide you with unique information in the logged-in environment of our website.

Norwegian Reward will continuously strive to make general improvements to the loyalty program, which entails, for example, segmenting our Members into groups and/or tailoring news and offers to Members. For this purpose, Norwegian Reward will process the personal data about you mentioned above. In addition, Norwegian Reward will send you a monthly email to inform you about the status of your membership, including details about CashPoint earnings, number of flights and other relevant Member data.

If you delete your account in accordance with the Terms and Conditions, your personal data will be deleted accordingly, except transactions, including any corresponding data, linked to your CashPoint balance. This will also include your name and Reward Number. Such data will be retained for 5 years, counting from the date the transactions were processed by our system. We store this data in pursuance of our legal obligations. Data regarding the use of Limited Edition Rewards will be deleted after 14 months. Please also refer to the section "Your rights" below for additional information on your right to have your data deleted.

The legal basis for processing your personal data as described in this section is your acceptance of the terms under which you purchase products from Norwegian or any of Norwegian Reward's Partners in addition to your acceptance of the Terms and Conditions for Norwegian Reward.

3.5 Marketing

In order for you to make use of the benefits of being a Norwegian Reward Member, Norwegian Reward will send you, or in other ways make you aware of, the various commercial benefits of being a Member. Such information about commercial benefits may include information on special flight offers, commercial news from Norwegian Reward and tips for earning extra CashPoints. It could also relate to including you in a Member segment and providing you with commercial offers accordingly, providing you with information on other special or seasonal offers, and inviting you to join our activities such as our digital advent calendar at Christmastime.

For this purpose, Norwegian Reward will use data such as your name, Reward Number and email address. If Norwegian Reward employs any subcontractors for processing your personal data for this purpose, e.g. Facebook, Oracle or Google, appropriate safeguards such as Binding Corporate Rules, EU standard model contract, the EU-US Privacy Shield or similar, will ensure an adequate level of protection of your personal data. Please be advised that such subcontractors are responsible for their own privacy policies.

Personal data processed for marketing purposes will be deleted after 12 months. If you delete your profile and thereby end your membership in Norwegian Reward, this data will be anonymized.

The legal basis for processing your personal data is your consent. You will be able to manage your consents to this processing by clicking on settings in your user account on our webpage. Please note that withdrawal of any consent does not affect the lawfulness of the processing that has taken place based on a consent given prior to the withdrawal.

3.6 Personalizing your account

Norwegian Reward aims to make the loyalty program more individualized and promote user friendliness for our Members. To promote general improvements in our email service and personalization of email content, we analyze responses and traffic from our email communications, such as open and click rates. For this purpose, it is necessary to process your personal data such as your name, email address and Reward Number. We also use your personal data through webpage click data, which means that we use some of your personal data when you browse our site to enhance its performance, improve your user experience and to enable us to detect and prevent fraudulent behavior.

Any personal data processed for this purpose is deleted after 12 months. Norwegian Reward retains audit logs for 18 months in accordance with legitimate interests and our legal obligations.

The legal basis for processing your personal data in accordance with the said activities is based on your acceptance of the Terms and Conditions for Norwegian Reward, legitimate interest, and in compliance with Norwegian Reward's cookie rules (consent or browser settings).

3.7 When you interact with our customer service

Norwegian Reward has various forms of customer support in order for us to help you if so needed. For us to be able to provide you with customer support, we will process your personal data in order to identify you and help you as best we can. On our website, you will be able to fill out a customer support form or you may choose to use our chat function. To improve our customer service, we may use impersonation which enables our customer support staff to be able to experience and view any issue reported to us by logging into your account.

All audit logs kept for the purpose of providing you with customer support services will be deleted after 18 months. All other information regarding any complaints you may have filed with us is stored for 10 years in order for us to comply with any rights you may have under consumer protection laws.

The legal basis for processing your personal data for customer support purposes is legitimate interest, our legal obligations, and your acceptance of the Terms and Conditions for Norwegian Reward.

4. Why personal data are disclosed by Norwegian Reward

We do not sell your personal data to marketing companies outside of Norwegian Reward. We may only share your personal data as follows:

• With our third-party service providers who perform Norwegian Reward business operations or work on our behalf and on our instructions as data processors for the purposes indicated in this Privacy Policy;
• To protect and defend Norwegian Reward (including enforcing any applicable terms and conditions); or
• To public authorities or governments when required by law, regulation, legal process or enforceable governmental request.

We may also share aggregated data with our business partners and group of companies for various purposes, such as for improving the Norwegian Reward program for system administration, statistics, research and analysis.

If you do not wish to provide your personal data to us, we may not be able to provide the service you request, or to inform you about other products and services offered by Norwegian Reward.

US members only
Norwegian Reward may share personal information with our co-branded credit card partner to increase your knowledge of how you can earn CashPoints and benefit of being a member and for the partners own direct marketing purposes.

5. Cookies and similar technologies

When you visit our website, we collect certain information by automated means using cookies. Cookies are small text files stored on your device when you visit a website. When you first visit a website, a cookie file is sent to your device that identifies your browser.

If the settings on your mobile devices permit our mobile applications to collect location information, we will collect this information automatically. This Privacy Policy governs how we use this information when we associate it with your personal data.

Note that you can manage how your devices can share location information with Norwegian Reward, as well as how your browser handles cookies and related technologies by adjusting your device's privacy and security settings. Please refer to the instructions provided by your browser or the manufacturer of your device to learn how to adjust your settings.

Below we explain how and why we use cookies:

5.1 Required functionality of our website

We use cookies for authentication purposes so that you do not have to provide your credentials every time you visit the Norwegian Reward website. These cookies are necessary for the service to function correctly. By adjusting the technical settings in your browser, you can prevent the storage of and access to cookies on your device. However, please note that if you disable cookies, you may not be able to use the services on our website.

5.2 Web analytics and statistics

We use cookies to collect non-personal information of users’ behavioral patterns and analyze user behavior. We do this to identify preferences, diagnose technical issues, analyze trends and to improve the user experience on our website. Online tools such as Google Analytics, Hotjar and Visual Website Optimizer are adopted for this purpose.

5.3 Targeted advertising

We use cookies to provide you targeted advertising on the Internet. We use, among others, Google Analytics/AdWords, DoubleClick and Facebook for advertising, such as Display Advertising and other remarketing activities. If you do not want to receive targeted advertising from advertising networks such as Google and Facebook, you must seek help directly from these advertising networks by, for instance, changing your advertising settings on their websites.

We also allow third-party cookies from Reward Partners in Norwegian Reward, so that they can advertise towards you as a Reward Member or exclude you from their advertising if you are already their customer. This only applies to Reward Partners that are at any time visible in the ‘Earn CashPoints’ section on our website.

5.4 Customer Service

We use cookies from LiveChat Inc., which delivers our customer service functionality on our website, such as live chat. These cookies allow us to proactively initiate a chat session with you while you are browsing our website, and they also help us conduct statistics about your behavior on our website, such as pages you have visited and your total time on our website. This information is used to easier identify if you are in a situation where are you are more likely to need assistance.

6. Your rights

You have the right to request access, rectification, restriction and deletion of your personal data held by Norwegian Reward and receive a copy of your personal data in a structured machine-readable format. If you have a registered profile, you may at any time update, correct or delete information you have provided to us by using our website. Inquiries regarding processing of personal data and access requests shall be directed to the point of contact provided below.

You also have the right to object to some data processing and, where we have asked for your consent to process your data, to withdraw this consent. Where we process your data because we have a legitimate interest in doing so (as explained above), you also have the right to object to this. These rights may be limited in some situations – for example, where we can demonstrate that we have a legal requirement to process your data.

Where we require personal data to be able to provide the benefits of Norwegian Reward to you or comply with legal obligations, then provision of such data is mandatory. If such data is not provided, then we will not be able to manage our contractual relationship, or to meet obligations placed on us. In all other cases, the provision of requested personal data is optional.

Your personal data will be retained in accordance with the provisions of the various subsections in section 3. You can, at any time, delete your user account on our website.

7. Transfer of personal data to other countries

The transfer of personal data to a third country outside of the EEA that does not provide adequate protection will only take place if appropriate safeguards are provided, e.g., by Binding Corporate Rules, entering into EU Standard Contractual Clauses or if the receiving party is certified under the EU-US Privacy Shield. If you have any questions relating to this, please contact us at the contact point provided below.

Norwegian Reward may transfer aggregated data to third parties (domestic and/or foreign) for the purposes of improving or developing the service.

8. Privacy Policies of third parties

This Privacy Policy only addresses the collection, use and disclosure of personal data by Norwegian Reward. Other websites that may be accessible through our website have their own privacy policies and practices. Our independent Norwegian Reward Partners have their own privacy policies and practices, too. We encourage you to familiarize yourself with the privacy policies provided by all third parties prior to providing them with information or taking advantage of an offer or promotion. Although we try to link only to sites that share our high standards and respect for privacy, we are not in any way responsible for the content or the privacy practices employed by other sites.

9. Changes and amendments to this policy

From time to time, we may update or amend this Privacy Policy to reflect new or different privacy practices, without notice to you. Accordingly, we invite you to review the latest version of this Privacy Policy.

We will place a notice on our website and/or otherwise communicate to you when we make material changes to this Privacy Policy. If you do not agree to any of the modified terms, you must discontinue the use of Norwegian Reward and delete your account.

10. Jurisdiction and applicable law

This Privacy Policy shall, save for mandatory local law, be governed by and construed in accordance with the laws of Norway and be subject to the non-exclusive jurisdiction of the courts of Norway.

11. How to contact us

Please contact us if you have any questions or comments about our privacy practices or this Privacy Policy. You can reach us online or via mail directed to:

Norwegian Reward AS
Att: Data Protection Officer
P.O. Box 115
N-1330 Fornebu
Norway

If you have unresolved concerns, you also have the right to contact the data protection authorities. The relevant data protection authority will be the Norwegian Data Protection Authority.

Effective date: 08/22/2019. Last updated: 01/01/2020