How we handle your personal data.
Lofoten Bil AS is the data controller for personal data collected through the workshop, car sales, car hire and this website.
Last updated: 18 May 2026
Data controller
Lofoten Bil AS, org. no. 995 003 430 MVA
Vorsetøyveien 20c, 8300 Svolvær
Privacy questions: kaare@lofotenbil.no · +47 476 43 333
What data we process
What we collect depends on what you contact us about.
Workshop customers
Name, phone, email, address, registration number, vehicle history, billing information. Legal basis: contract (GDPR Art. 6(1)(b)) and legal obligation (accounting).
Used-car purchase and part-exchange
Name, national ID number (only where necessary for change of ownership), contact information, financing details, purchase agreement. Legal basis: contract and legal obligation.
Car hire (Rent a Car Lofoten)
Name, contact information, copy of driving licence, payment card, vehicle data, rental period. The car hire is operated by Lofoten Bil AS under the brand Rent a Car Lofoten. Legal basis: contract.
Job applications
Name, contact information, CV, references and attachments you send. Legal basis: legitimate interest (recruitment) and consent. Applications are kept for up to 12 months unless consent is withdrawn.
Website visits
Technical data (IP address, browser type, which pages you visit) for operation and security. See also the cookies section below.
How long we keep data
- Workshop and service data: minimum 5 years (Accounting Act), up to 10 years for service intervals linked to EU roadworthiness tests and warranty.
- Used-car purchase agreements: 10 years (Accounting Act).
- Car hire agreements: 5 years, longer in the event of a dispute or damage claim.
- Job applications: up to 12 months, or until consent is withdrawn.
- Website logs: max 6 months.
Who we share data with
We only share data where it's necessary to deliver the service or meet legal requirements. Relevant recipients:
- Mekonomen Norge AS: workshop system, vehicle history and parts supply.
- The Norwegian Public Roads Administration (Statens vegvesen): for EU roadworthiness tests, change of ownership and vehicle registration.
- Our accountant (Lofoten Økonomiservice AS) and auditor (Lofotrevisjon AS).
- Payment providers for card payments and invoicing.
- FINN.no: for publishing used-car listings.
- IT providers for operating the website and email (data processing agreements are in place).
We do not sell personal data to third parties and do not share data for marketing purposes outside Lofoten Bil AS.
Your rights
You have the right to:
- Request access to the data we hold about you.
- Have inaccurate data corrected.
- Request deletion of data that is no longer necessary.
- Withdraw consent.
- Request restriction of processing or object to it.
- Receive your data in a machine-readable format (data portability).
- Complain to the Norwegian Data Protection Authority (datatilsynet.no) if you believe we process data unlawfully.
Send your request to kaare@lofotenbil.no. We respond within 30 days.
Cookies
The website uses cookies to deliver content and measure use. You can manage and delete cookies in your browser. Necessary cookies are set without consent; others are set only after active consent.
You can withdraw consent by clearing your browser's cookies or by contacting us.
Changes
This privacy policy is updated when laws, services or systems change. The latest update is shown at the top of the page.