1.1Forms and enquiries
When you submit a quote request, special transport booking, customer registration or contact form, we process name, company, email, phone number and transport details.
Privacy
Privacy policy
OnRail AS · In force from 2026-10-28
The Norwegian version prevails in case of discrepancies.
OnRail AS (org. no. 985 798 192) is the data controller for personal data collected via onrail.no and in dialogue with customers and partners. Here we explain what we collect, why, how long we keep it and what rights you have.
1What information do we collect?
1.2Notifications and subscriptions
If you sign up for production plan notifications, we store your email, optional phone number, company, chosen routes and whether you want a weekly overview. We also log which notifications have been sent to you.
1.3Login
Employees and customers with access to logged-in pages have their email, name and login history recorded.
1.4Technical information
Our servers briefly record technical data such as IP address, browser type and time to operate and secure the website.
2Purpose and legal basis
- Responding to enquiries and quotes – contract or legitimate interest (GDPR Art. 6(1)(b) and (f))
- Planning and carrying out transport – contract (Art. 6(1)(b))
- Sending notifications and weekly overviews you requested – consent (Art. 6(1)(a)), which you may withdraw at any time
- Accounting and reporting – legal obligation (Art. 6(1)(c))
- Website operation and security – legitimate interest (Art. 6(1)(f))
3Cookies, visitor statistics and maps
We do not use cookies for analytics, tracking or marketing. The website only stores what is needed for it to work: the login session for users who sign in, and your chosen display theme (dark, light or high contrast) in your browser.
We count visits with our hosting provider's built-in visitor statistics. It uses no cookies and stores nothing in your browser. We only see aggregate figures, such as number of visits, pages read, where visitors come from, country and device type. Each visit gets a random code that is discarded when the visit ends, so we cannot recognise you. The basis is our legitimate interest in improving the website (Art. 6(1)(f)).
Fonts on the website are served from our own servers, not from Google or others. The background map on the tracking pages is loaded from OpenFreeMap. Your browser then contacts OpenFreeMap directly, which sees your IP address but not who you are with us.
4Who do we share information with?
We never sell personal data. We use some suppliers (data processors) who process data on our behalf under a data processing agreement:
- Website hosting and database (cloud service in the EU/EEA)
- Email delivery (Resend, EU servers)
- SMS delivery (Sveve, Norway)
- Microsoft 365 for email and case handling
Data may also be shared with partners when needed to carry out the transport, or with authorities when required by law.
5How long do we keep the data?
- Enquiries, quotes and bookings submitted via the website: 12 months after the last change (bookings are kept until the requested transport date is at least 12 months in the past)
- Notification subscriptions: until you unsubscribe; the data is deleted 12 months after unsubscribing
- Accounting records: five years, as required by the Bookkeeping Act
- Technical logs: briefly, normally less than 30 days
6Your rights
You have the right to access, rectification, erasure, restriction, data portability and to object to processing based on legitimate interest. You can unsubscribe from notifications via the link at the bottom of every email.
If you believe we process data unlawfully, you may complain to the Norwegian Data Protection Authority (datatilsynet.no).
7Contact
Questions about privacy or want to exercise your rights? Contact us at post@onrail.no.
Questions about privacy, or want to see, correct or delete your data? post@onrail.no