Privacy information for AKTProfil (AKT Profile)

AKTProfil is a personal profile you can choose to use when logging into AKT’s webshop. This allows you to log in and access your profile across devices (mobile phones, tablets, web, etc.), and ensures that you do not lose your ticket or other personal settings if your device is lost or stolen.
When you create a profile, you will initially gain access to the online store, and in the long term also to a range of additional services.

Why does AKT process my personal data?

If you register a profile, AKT will process your personal data and is the data controller for this information. The purpose is to provide you with more personalised additional services and better customer support. If you have a protected address and/or phone number, we recommend, for safety reasons, that you use AKT’s anonymous service options.

When you create a profile, you gain access to additional services, enabling you to:

• Save your purchase history, so you can easily access it regardless of which device you choose to use.

If you use a Travel Card (Reisekort), you may choose to register it in your profile. This allows you to:

• Use the registered information to transfer the card balance to a new Travel Card if your card is lost or stolen.

What is the age requirement for AKTProfil?

You must be at least 15 years old to create an AKTProfil.

What is AKT’s legal basis for processing personal data?

The legal basis for processing personal data is consent.

We rely on legitimate interest to improve our services and create anonymised statistics. If you have any objections to the use of your personal data for this purpose, you may submit your objection by emailing post@akt.no or personvernombud@agderfk.no.

What personal data is processed in AKTProfil, and how is it used?

We process the following contact information about you:

• Phone number: Used for logging in.
• Email: Used to verify your account and send receipts for purchases in the online store.

If you use a Travel Card, we also process the following information:

• Travel Card number: Necessary to help reconstruct your ticket if you lose your card.
• Sales information related to ticket purchases: Necessary to help reconstruct your ticket if you lose your card.
• Travel information: Time and location of card scans. Customer service may access time and zone information for a limited period after the scan. This is necessary to help reconstruct your ticket if you lose your card.

What access does AKT have to your data, and is it shared with others?

Access to your data is limited. Permissions are granted only where necessary.

We do not disclose your personal data to third parties unless we are legally required to do so by public authorities.

We may share anonymised data with our partners in public transport/mobility services.

Cloud Solutions

AKT uses AWS cloud services for storing and accessing personal data related to the services you use.

Although AKT uses a foreign provider, we have chosen, where possible, services certified under the EU’s CISPE Code of Conduct, ensuring that the provider commits to not transferring personal data outside the EEA.

As a general rule, AKT only transfers personal data to countries outside the EEA if the European Commission has determined that the country ensures an adequate level of protection.

For transfers to the United States, the EU and U.S. have entered into an agreement ensuring adequate data protection under GDPR. You can read more about the agreement and the European Commission’s adequacy decision on the Norwegian Data Protection Authority’s website.

For services not CISPE-certified, where processing outside the EEA—or in countries not deemed adequate by the European Commission—cannot be ruled out, AKT has implemented necessary contractual, organisational, and technical measures to ensure sufficient protection. Where necessary, we will only transfer encrypted or pseudonymised data. For such services, AKT requires the recipient to comply with data protection regulations, using the European Commission’s revised Standard Contractual Clauses.

As part of our continuous work on information security, AKT is always working to improve its services.

What are your rights?

You have the right to access, correct, transfer, and delete the personal data stored about you.

You have the right to file a complaint with the Norwegian Data Protection Authority if you believe your data is being processed unlawfully, though we encourage you to contact our Data Protection Officer first.

Email AKT’s Data Protection Officer at: personvernombud@agderfk.no 

How is your data stored and deleted?

Your data is processed as follows:

We only process your data if you have given consent. You may withdraw your consent at any time by deleting your profile. If you have outstanding payments related to your use of AKT’s services, these must be paid before you can delete your profile. If you have a subscription, all related invoices must be paid and the subscription must be terminated before deletion.

• Your contact information will be stored as long as you maintain a profile. Once deleted, AKT has no way of retrieving any information about you.
• After withdrawing your consent by deleting your profile, we will delete your data within 14 days. After this period, sales and travel information can no longer be linked to you personally. If you log in again within this 14-day period, your previous profile will be reactivated.
• When you have an AKT profile, sales and travel data are stored for up to 410 days after the ticket expires, or alternatively 410 days after you have submitted a written complaint to AKT concerning an issue with your journey. This is necessary to handle customer rights under the Transport Complaints Board. See the Transport Complaints Board Regulation § 5-2 and the guidelines for processing personal data in public transport.
• AKT cannot delete personal data if other laws—such as accounting laws—require continued processing. In such cases, access will be further restricted and logged.

Customer data and travel data are stored in separate databases.

How can I request access or deletion of data?

If you delete your profile, information will remain stored for 14 days before it is permanently deleted. If you want full access to all personal data stored about you, you must submit your request in writing, either by mail or via the contact form.

Can I still use AKT’s services without being logged in?

You can also travel anonymously with AKT, without a profile. This gives you access to normal journey planning and ticket purchases. In the online store, you can use your Travel Card number for anonymous purchases.

If you have any objections to the use of your personal data for this purpose, please contact post@akt.no  or the Data Protection Officer at personvernombud@agderfk.no