Norwegian Reward is a loyalty program offered by Norwegian Air Shuttle ASA ("Norwegian"). By signing up as a Member of Norwegian Reward you may accrue CashPoints and earn special Rewards by buying tickets from Norwegian or products and services from any of Norwegian Reward's partners ("Partners"). CashPoints earned can be used by Norwegian Reward Members to purchase flight tickets or other related products or services from Norwegian.
For your ease of reference, here is a short explanation of the main features of Norwegian Reward:
When you become a Member of Norwegian Reward, you will be able to log in to your own account on our website and keep track of your registered flights and CashPoints earned. As a Member you will receive status updates and Member offers. Please know that you as a Member can administrate the communication settings on your Reward profile. Our Reward program has a long list of Partners which will enable you to earn CashPoints not only when you buy flight tickets with Norwegian, but also when you shop online, book a hotel or make other purchases.
Please note that membership in the Norwegian Reward program is voluntary. You may purchase airline tickets and other products and services from Norwegian or buy products or services from our Partners without a Norwegian Reward membership, but you will not be able to earn CashPoints or be eligible for Rewards.
When becoming a Member of Norwegian Reward, it is necessary for us to collect and use personal data about you to be able to fulfil our obligations to you as Member. The protection and confidentiality of your personal information is important to Norwegian Reward and we are determined to protect it.
Norwegian is the controller for any processing of your personal data as a Member of Norwegian Reward by Norwegian or any of its subsidiaries. As controller, Norwegian is responsible for defining the purposes for processing your personal data and is also responsible for compliance with current data protection legislation. The address and contact details of Norwegian can be found at the bottom of this page.
3.2 Establishing a membership in Norwegian Reward
When establishing a membership in Norwegian Reward, you will be asked to provide information such as your name, date of birth, gender, and email address, and our system will provide you with a Reward Number, and identify your preferred language and currency. In addition to this, when booking flights or other related products or services from Norwegian, you will be asked to provide information such as your phone number and your address.
The purpose of these processing activities is for us to be able to establish and provide a loyalty service and so that our Members can effectively manage their membership accounts.
The legal basis for the processing of your data as described in this section is that it is necessary for us to fulfil our obligations according to the Terms and Conditions for Norwegian Reward.
3.3 Establishing a Family Account in Norwegian Reward
Norwegian Reward allows the Members to create or join a Family Account. The Family Account enables Members to earn and use CashPoints collectively. By creating a Family Account, you will be designated as the administrator of the account (Captain) and you will be asked to provide information about other Members of the account, such as an email address, Reward Number and your relationship to them. If you invite persons under the age of 16, you will be asked to create an account for them which will be managed by you. In order to sign up a person under the age of 16, you must provide information about his/her birth date, name and gender. In the Terms and Conditions for Norwegian Reward, you will find more information on Family Accounts.
The purpose of these processing activities is to provide our Norwegian Reward Members the option of establishing and joining a Family Account and for our Members to be able to jointly manage their Membership in Norwegian Reward through the Family Account.
The information you have provided for the purposes of establishing a Family Account and for being an administrator or member of a Family Account will be deleted when a Family Account Member deletes his/her Norwegian Reward Member profile or when he/she leaves the Family Account.
The legal basis for the processing of your data as described in this section is the Terms and Conditions for Norwegian Reward.
3.4 Managing your Norwegian Reward account
The basic feature of Norwegian Reward is to allow its Members to earn CashPoints and gain Rewards by purchasing airline tickets from Norwegian or products or services from one of the Norwegian Reward Partners. The Norwegian Reward membership will provide you with a personalised user account on our website, which you can access via your computer or other devices. When you make purchases with Norwegian, Norwegian Reward will retain information regarding your flight, such as destination and price, in order to accrue the relevant amount of CashPoints in your membership account. If you purchase products from one of our Partners, the Partner will send information about those purchases to Norwegian Reward, such as your Reward Number, your name, date of the transaction and either CashPoints to accrue (if the Partner calculates the CashPoints to accrue) or the transaction value (if Norwegian Reward calculates the CashPoints to accrue).
When you spend CashPoints, Norwegian Reward will process information such as your Reward Number, CashPoints to spend, flight number and dates of travel.
Norwegian Reward Members are also able to qualify for Rewards, including Limited Edition Rewards, e.g. following the purchase of a fixed number of flights or earning a fixed amount of CashPoints. For this purpose, Norwegian Reward will use your Reward Number and provide you with unique information in the logged-in environment of our website.
Norwegian Reward will continuously strive to make general improvements to the loyalty program, which entails, for example, segmenting our Members into groups and/or tailoring news and offers to Members. For this purpose, Norwegian Reward will process the personal data about you mentioned above. In addition, Norwegian Reward will send you a monthly email to inform you about the status of your membership, including details about CashPoint earnings, number of flights and other relevant Member data.
If you delete your account in accordance with the Terms and Conditions, your personal data will be deleted accordingly, except transactions, including any corresponding data, linked to your CashPoint balance. This will also include your name and Reward Number. Such data will be retained for 5 years, counting from the date the transactions were processed by our system. We store this data in pursuance of our legal obligations. Data regarding the use of Limited Edition Rewards will be deleted after 14 months. Please also refer to the section "Your rights" below for additional information on your right to have your data deleted.
The legal basis for processing your personal data as described in this section is your acceptance of the terms under which you purchase products from Norwegian or any of Norwegian Reward's Partners in addition to your acceptance of the Terms and Conditions for Norwegian Reward.
In order for you to make use of the benefits of being a Norwegian Reward Member, Norwegian Reward will send you, or in other ways make you aware of, the various commercial benefits of being a Member. Such information about commercial benefits may include information on special flight offers, commercial news from Norwegian Reward and tips for earning extra CashPoints. It could also relate to including you in a Member segment and providing you with commercial offers accordingly, providing you with information on other special or seasonal offers, and inviting you to join our activities such as our digital advent calendar at Christmastime.
For this purpose, Norwegian Reward will use data such as your name, Reward Number and email address. If Norwegian Reward employs any subcontractors for processing your personal data for this purpose, e.g. Facebook, Oracle or Google, appropriate safeguards such as Binding Corporate Rules, EU standard model contract, the EU-US Privacy Shield or similar will ensure an adequate level of protection of your personal data. Please be advised that such subcontractors are responsible for their own privacy policies.
Personal data processed for marketing purposes will be deleted after 12 months. If you delete your profile and thereby end your membership in Norwegian Reward, this data will be anonymised.
The legal basis for processing your personal data is your consent. You will be able to manage your consents to this processing by clicking on settings in your user account on our webpage. Please note that withdrawal of any consent does not affect the lawfulness of the processing that has taken place based on a consent given prior to the withdrawal.
3.6 Personalising your account
Norwegian Reward aims to make the loyalty program more individualised and promote user friendliness for our Members. To promote general improvements in our email service and personalisation of email content, we analyse responses and traffic from our email communications, such as open and click rates. For this purpose, it is necessary to process your personal data such as your name, email address and Reward Number. We also use your personal data through webpage click data, which means that we use some of your personal data when you browse our site to enhance its performance, improve your user experience and to enable us to detect and prevent fraudulent behaviour.
Any personal data processed for this purpose is deleted after 12 months. Norwegian Reward retains audit logs for 18 months in accordance with legitimate interests and our legal obligations.
The legal basis for processing your personal data in accordance with the said activities is based on your acceptance of the Terms and Conditions for Norwegian Reward, legitimate interest, and in compliance with Norwegian Reward's cookie rules (consent or browser settings).
3.7 When you interact with our customer service
Norwegian Reward has various forms of customer support in order for us to help you if so needed. For us to be able to provide you with customer support, we will process your personal data in order to identify you and help you as best we can. On our website, you will be able to fill out a customer support form or you may choose to use our chat function. To improve our customer service, we may use impersonation which enables our customer support staff to be able to experience and view any issue reported to us by logging into your account.
All audit logs kept for the purpose of providing you with customer support services will be deleted after 18 months. All other information regarding any complaints you may have filed with us is stored for 10 years in order for us to comply with any rights you may have under consumer protection laws.
The legal basis for processing your personal data for customer support purposes is legitimate interest, our legal obligations, and your acceptance of the Terms and Conditions for Norwegian Reward.
We do not sell your personal data to marketing companies outside of Norwegian Reward. We may only share your personal data as follows:
We may also share aggregated data with our business partners and group of companies for various purposes, such as for improving the Norwegian Reward program for system administration, statistics, research and analysis.
If you do not wish to provide your personal data to us, we may not be able to provide the service you request, or to inform you about other products and services offered by Norwegian Reward.
When you visit our website, we collect certain information by automated means using cookies. Cookies are small text files stored on your device when you visit a website. When you first visit a website, a cookie file is sent to your device that identifies your browser.
Note that you can manage how your devices can share location information with Norwegian Reward, as well as how your browser handles cookies and related technologies by adjusting your device's privacy and security settings. Please refer to the instructions provided by your browser or the manufacturer of your device to learn how to adjust your settings.
5.1 Required functionality of our website
5.2 Web analytics and statistics
5.3 Targeted advertising
We also allow third-party cookies from Reward Partners in Norwegian Reward, so that they can advertise towards you as a Reward Member or exclude you from their advertising if you are already their customer. This only applies to Reward Partners that are at any time visible in the ‘Earn CashPoints’ section on our website.
5.4 Customer Service
You have the right to request access, rectification, restriction and deletion of your personal data held by Norwegian Reward and receive a copy of your personal data in a structured machine-readable format. If you have a registered profile, you may at any time update, correct or delete information you have provided to us by using our website. Inquiries regarding processing of personal data and access requests shall be directed to the point of contact provided below.
You also have the right to object to some data processing and, where we have asked for your consent to process your data, to withdraw this consent. Where we process your data because we have a legitimate interest in doing so (as explained above), you also have the right to object to this. These rights may be limited in some situations – for example, where we can demonstrate that we have a legal requirement to process your data.
Where we require personal data to be able to provide the benefits of Norwegian Reward to you or comply with legal obligations, then provision of such data is mandatory. If such data is not provided, then we will not be able to manage our contractual relationship, or to meet obligations placed on us. In all other cases, the provision of requested personal data is optional.
Your personal data will be retained in accordance with the provisions of the various subsections in section 3. You can, at any time, delete your user account on our website.
The transfer of personal data to a third country outside of the EEA that does not provide adequate protection will only take place if appropriate safeguards are provided, e.g., by Binding Corporate Rules, entering into EU Standard Contractual Clauses or if the receiving party is certified under the EU-US Privacy Shield. If you have any questions relating to this, please contact us at the contact point provided below.
Norwegian Reward may transfer aggregated data to third parties (domestic and/or foreign) for the purposes of improving or developing the service.
Norwegian Air Shuttle ASA
Att: Data Protection Officer
P.O. Box 115
If you have unresolved concerns, you also have the right to contact the data protection authorities. The relevant data protection authority will be the Norwegian Data Protection Authority.
Effective date: 15.05.2018 / Last updated: 08.11.2018