Privacy policy
Last updated: 26 October 2026
This policy explains how Noraero AS ("NorAero", "we", "us") processes personal data when you visit noraero.no or contact us through the website. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) as incorporated into Norwegian law by the Personal Data Act (personopplysningsloven).
1. Data controller
Noraero AS is the data controller for the processing described in this policy.
- Company: Noraero AS
- Organisation number: 921 717 482 (Foretaksregisteret)
- Address: Bekkeveien 165, 3173 Vear, Norway
- Email: glenn@noraero.no
- Phone:
2. Contact form
When you send us a message through the contact form, we process the information you provide: your name, email address, company (optional) and the content of your message.
- Purpose: to read and respond to your enquiry, and to follow up on any dialogue that results from it.
- Legal basis: our legitimate interest in responding to enquiries (GDPR Art. 6(1)(f)), or steps taken at your request prior to entering into a contract (Art. 6(1)(b)).
- Retention: enquiries are kept for as long as needed to handle the dialogue, and deleted no later than 12 months after our last contact, unless a customer or business relationship follows or we are legally required to keep them longer.
Your message is delivered by email to NorAero, and your name, email address and company are also stored as a contact record in a dedicated enquiry list, so we can keep track of who has contacted us. This list is not used to send newsletters or marketing.
Unless you opt in to news and updates (below), we do not use information from the contact form for marketing, and we do not sell or share it with third parties other than the service providers listed below.
News and updates by email (optional)
If you tick the box "I'd like to receive news and updates", we add your name and email address to our newsletter list and may send you news about NorAero.
- Legal basis: your consent (GDPR Art. 6(1)(a) and the Norwegian Marketing Control Act § 15). Ticking the box is voluntary and not required to contact us.
- Withdrawal: every email contains an unsubscribe link, or you can email glenn@noraero.no. Withdrawing consent does not affect earlier processing.
- Retention: until you unsubscribe.
3. Cookies and analytics
We only set non-essential cookies if you give your consent in the cookie banner. You can change your choice at any time via at the bottom of every page.
| Name | Provider | Purpose | Duration | Category |
|---|---|---|---|---|
noraero-consent-v1 (local storage) | NorAero | Remembers your cookie choice | Until you clear it | Strictly necessary |
_ga | Distinguishes unique visitors for statistics | 2 years | Analytics (consent) | |
_ga_<ID> | Keeps track of sessions for statistics | 2 years | Analytics (consent) |
Google Analytics 4 helps us understand how many people visit the site and how they use it. It is only loaded after you accept analytics cookies. The legal basis is your consent (GDPR Art. 6(1)(a) and the Norwegian Electronic Communications Act § 3-15). If you reject or withdraw consent, Google Analytics is not loaded and its cookies are removed.
We also use Google Search Console to monitor how the site appears in Google search results. Search Console does not set cookies on your device and does not process data about individual visitors to this site.
4. Service providers (data processors)
We use the following providers to run the website. They process personal data on our behalf under data processing agreements:
- Vercel Inc. (USA) — website hosting. Technical data such as IP address and browser information is processed in server logs to deliver the site and keep it secure.
- Mediavibe (Norway) — our web agency, which operates the website and the contact form service on our behalf.
- Brevo (Sendinblue SAS) (France, EU) — sub-processor engaged by Mediavibe; delivers contact form messages to our inbox and stores the enquiry contact list.
- Google Ireland Ltd. / Google LLC — Google Analytics, only if you consent.
Where data is transferred outside the EU/EEA (Vercel and Google in the USA), the transfer is based on the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.
5. Your rights
You have the right to request access to the personal data we hold about you, and to have it corrected or deleted. You may also object to our processing, ask us to restrict it, and request data portability. Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.
To exercise your rights, email us at glenn@noraero.no. We will respond within one month.
If you believe our processing of your personal data violates data protection law, you have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).
6. Security
The website is served exclusively over encrypted connections (HTTPS). Access to enquiries is limited to the people at NorAero who need it to respond.
7. Changes to this policy
We may update this policy when our services or legal requirements change. The date at the top shows when it was last updated.