Privacy Policy

1. Data Controller

NAF Skademelding ("we", "us") is the data controller for personal data collected through our digital accident report service.

2. What data do we collect?

We collect the following data:

• Name, date of birth, address, phone number, and email
• Driver's license information
• Vehicle and insurance information
• Photos of vehicle damage
• Accident sketch
• Digital signature
• Payment information (via Stripe/Vipps)

3. Purpose of processing

The data is used exclusively to generate an accident report according to the European standard (EA form). We do not use the data for marketing or other purposes.

4. Legal basis

Processing is based on contract (GDPR Art. 6(1)(b)) — we need the data to deliver the service you have ordered.

5. Storage and deletion

Accident reports are stored for 90 days after completion, then automatically deleted. Payment information is handled by Stripe/Vipps and is not stored by us.

6. Third parties

We share data with:

• Stripe — payment processing
• Resend — email delivery of completed report
• Vercel — application hosting

7. Your rights

You have the right to access, rectification, deletion, and data portability. Contact us at [email protected] to exercise your rights.

8. Cookies

We only use necessary cookies to identify which party you are in an accident report. We do not use any tracking or marketing cookies.

9. Contact

For privacy inquiries, contact us at [email protected].