PROCESSING OF PERSONAL INFORMATION Updated 02.08.2022

​

This privacy policy applies to Dragonfly AS (914 284 341, Tullins gate 2, 0166 Oslo, Norway).

1. Data processing manager
Dragonfly AS (914 284 341), Tullins gate 2, 0166 Oslo, Norway  

2. Contact for questions regarding personal data and data that require discretion
Dragonfly Helicopters, post@dragonfly.no

3. What is personal data?

Personal data is information that may be directly or indirectly linked to a living person. For example, names and social security numbers, but also other information specific to the person's physical, genetic, mental, economic, cultural, or social identity. For example, your IP address or a recording of your voice may be personal data if they can be connected to you.

Some personal data is considered particularly sensitive and is covered by special rules. Sensitive personal data means information that reveals, for example, membership in a trade union or information about health.

Dragonfly Helicopters does not collect particularly sensitive personal data.

4. Common data sources and data collection methods
The information in the register is usually collected from the registered individuals themselves. Personal and other information may be collected through the registration and with the use of services and programs related to Dragonfly Helicopters. Based on business activities, it is also a possibility that personal information could be collected interactively, e.g. in meetings or by telephone. In addition, data-driven data collection methods can be used. Personal information can also be retrieved and updated from demographic records, credit records, records provided by commercial marketing companies and similar reliable private or public records and sources.

5. Why do we collect personal data?

The purpose of the processing of customers personal data and the legal basis for the processing
The purpose of the processing of customers' (including potential customers) personal data is to handle, develop and maintain the customer relationship between the data controller and the customer and for other similar business activities. The personal information can therefore e.g. be used to make related products and services available to the customer, for customer relationship management and for development, analysis, communication, marketing and business planning. In addition, personal information can be used for direct marketing or the like. In such cases, relevant security requirements will be met, in addition to the fact that there is always an opportunity to terminate the subscription. Personal information can also be used in research and development contexts such as to improve and develop IT systems and business processes at Dragonfly Helicopters. The legal basis for the processing of personal data It is Dragonfly Helicopters legal right to manage its business, which also applies to, but not limited to, communicating with its customers, and marketing its companies and products. The legal basis for the processing of personal data may also be the conclusion of an agreement to which the data subject is a party or has taken part in the implementation of a declaration of intent in which the data subject has given their consent.

6. Data content in the register
The register may contain the data subjects' names, e-mail address, street address, country, telephone /phone number, company name and data regarding the use of electronic services (e.g. read or search data, IP addresses and cookies). In addition, the register may contain other information that the registered individual has provided.

7. Log data and cookies
Through participation in electronic business, Dragonfly Helicopters can automatically track certain types of information, such as IP addresses, geographical origin and browser type, even before any information is explicitly requested. In addition, Dragonfly Helicopters uses cookies to collect data. Cookies are small files that may contain an anonymous individual identifier. Cookies are sent to the browser from websites and stored on the registered computer's hard drive. The registered individual can set their browser to defer all cookies or to inform when a cookie is sent / stored. If the data subject does not accept the cookies, it may result in our services not working optimally.

8. Storage time for personal information
Dragonfly Helicopters stores personal information in the register in accordance with applicable law and only for as long as is necessary to carry out the purpose of the register. In general, information is stored as long as it is in accordance with applicable laws and regulations for a maximum of six (6) years after the customer relationship with the data subject has ceased. In addition, the storage of the information can in some cases where it is required by law be stored longer, e.g. in the production, exercise or defense of legal claims, conducting internal investigations or if required by applicable law. The above storage period is based on information and requirements related to e.g. product and service guarantees, product liability laws and the burden of proof in potential legal actions. Dragonfly Helicopters strives to ensure that stored data is valid within a reasonable limit by regularly deleting unnecessary data and updating outdated data.

9. Disclosure and transfer of personal information
Personal information is not usually transferred to third parties. However, personal information may be passed on to subcontractors of Dragonfly Helicopters for the purposes described in this privacy policy unless the data subject has explicitly prohibited this. In addition, information must be provided to third parties in certain circumstances when required by applicable law. Due to technical and practical requirements, personal data may be processed in geographical locations other than the country in which the data subject is located, including locations outside the EU or the European Economic Area (including Switzerland). In such cases, the processing and transfer of personal data shall take place in accordance with applicable law (e.g. based on the EU Commission's standard agreement) and Dragonfly Helicopters data processing declaration and rules, including decisions on appropriate security measures. Personal information can also be presented and transferred to the mother company and sister companies, for the purposes stated above.

10. Principles of data protection and security
Databases containing personal data are protected by firewalls, passwords and other technical measures. Physical databases and their backups are located behind locked doors. Upon receiving the information, strict procedures and security measures are followed to prevent unauthorized and illegal access to, alteration or use of personal information. All safety measures used are appropriate and in accordance with the usual standard. Dragonfly Helicopters continuously monitors the technical development to ensure that the level of data protection is updated. Folders with personal information that are handled manually are also found behind locked doors where no outsiders have access. Access to the information is only given to certain individuals who work for Dragonfly Helicopters and who need the information to perform their tasks. The individuals who process the information in this register as part of their tasks receive regular training and guidance in data protection and data security.

11. Rights of registered individuals
The registered individual has the right to:

•  ask the data controller for access to personal data about themselves and control them

• request the correction or deletion of their personal data or restrict the processing

• refuse the processing of their personal data 

• if applicable, transfer their personal data from one system to another.

All requests due to the above rights must be notified in writing to the contact mentioned in section 2 of this privacy policy (or e.g. by unsubscribing from the e-mail list described in the marketing communication section, if applicable). In cases where the processing of personal data is based on the data subject's consent, the data subject may withdraw his or her consent at any time. Withdrawal of consent does not, however, affect the legality of lawsuits that were initiated before the consent was withdrawn. In addition, the data subject can always register a complaint to the relevant supervisory authority if the data subject concludes that Dragonfly Helicopters has not processed the personal data in accordance with current privacy legislations.

12. Revision of the privacy policy
This privacy policy is valid until further notice and available on Dragonfly Helicopters' website. Dragonfly Helicopters reserves the right to revise this privacy policy and recommends that the data subjects check the contents of the privacy policy on a regular basis.