Munkebekken 400, 1061 Oslo — Org. 911696282
Legal

Privacy Policy

Last updated: 14 July 2026

1. Data Controller

The data controller responsible for your personal data is:

DIN AUTO AS

Munkebekken 400, 1061 Oslo, Norway

Organisation number: 911 696 282

Email: info@din-auto.no

Phone: +47 4412 673 82

2. What Personal Data We Collect

When you make a reservation or contact us, we may collect the following personal data:

  • Identity data: Full name
  • Contact data: Email address, phone number, postal address
  • Reservation data: Selected vehicle, rental dates, add-ons, pricing details, and booking reference
  • Marketing preference: Whether you have consented to receive marketing communications via email and SMS
  • Communication data: Messages you send us through the contact form

3. Why We Collect Your Data

We collect and use your personal data for the following purposes:

Processing and managing car reservations

To confirm your booking, contact you about your reservation, and provide the rental service you have requested.

Customer service and communication

To respond to enquiries submitted through our contact form or by phone and email.

Marketing communications (only with your consent)

To send you offers, promotions, and updates about DIN AUTO AS via email and SMS. We will only do this if you have explicitly opted in. You can withdraw your consent at any time.

Legal and accounting obligations

To comply with Norwegian accounting and tax legislation, which requires us to retain transaction records.

4. Legal Basis for Processing

We process your personal data on the following legal bases under the General Data Protection Regulation (GDPR):

A

Contract fulfilment (Article 6(1)(b) GDPR)

Processing your reservation data is necessary to perform the rental contract with you.

B

Consent (Article 6(1)(a) GDPR)

Marketing communications are sent only on the basis of your explicit, freely given consent. You may withdraw this consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

C

Legal obligation (Article 6(1)(c) GDPR)

Retention of transaction records for accounting and tax purposes is required by Norwegian law.

5. How Long We Keep Your Data

Reservation data is retained for as long as required by Norwegian accounting and bookkeeping legislation (currently 5 years from the end of the accounting year in which the transaction occurred).

Marketing consent is stored until you withdraw your consent. Upon withdrawal, we will stop sending marketing communications and remove your marketing preference from our active marketing lists.

Contact form messages are retained for up to 2 years to allow us to follow up on enquiries.

6. Data Sharing and Third Parties

We do not sell your personal data to third parties. We may share your data only with:

  • Technology service providers necessary to operate this website (e.g. hosting, database, and email delivery services). These providers act as data processors and are bound by data processing agreements.
  • Public authorities where required by law (e.g. tax authorities).

All third-party service providers are required to handle your data securely and in accordance with applicable data protection law.

7. Your Rights Under GDPR

As a data subject, you have the following rights:

Right of access

You may request a copy of the personal data we hold about you.

Right to rectification

You may ask us to correct inaccurate or incomplete data.

Right to erasure

You may request deletion of your personal data, subject to legal retention obligations.

Right to withdraw consent

You may withdraw marketing consent at any time without penalty.

Right to restriction

You may ask us to restrict processing of your data in certain circumstances.

Right to data portability

You may request your data in a structured, machine-readable format.

To exercise any of these rights, please contact us at info@din-auto.no. We will respond within 30 days.

You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) at www.datatilsynet.no.

8. Cookies

This website uses cookies and similar technologies to ensure the site functions correctly and to improve your experience.

Essential cookies

Required for the website to function. These cannot be disabled. They include session management and security tokens.

Analytics cookies

Used to understand how visitors interact with the website (e.g. page views, traffic sources). Data is aggregated and anonymised.

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the site.

9. Contact Us

For any questions about this Privacy Policy or how we handle your personal data, please contact us at info@din-auto.no or by post at Munkebekken 400, 1061 Oslo, Norway.