Privacy Statement

Cannonball AS Organisation Number: 924458100 Effective Date: July 2026

At Cannonball AS, discretion, confidentiality, and security are the cornerstones of our premium Destination Management Company (DMC) and concierge services. We understand that our ultra-high-net-worth (UHNW) clients, their families, and their agents require the highest level of privacy.

This Privacy Statement explains how we collect, use, protect, and handle your personal data across our digital ecosystem in compliance with the General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act (Personopplysningsloven).

1. Scope of This Policy

This Privacy Statement applies to all personal data processed across the following websites operated by Cannonball AS (collectively, the «Websites»):

  • www.cannonball.no & www.cannonballdmc.com (Core DMC & Corporate)
  • www.helicopters.no (Helicopter Charter)
  • www.enbrfbo.no, www.enbrfbo.com, www.bgofbo.no, www.bgofbo.com (Bergen Airport FBO Services)
  • www.cannonballvip.com (VIP Concierge & Ground Transport)
  • www.emptyleg.no (Private Aviation Market Platform)

2. Data Controller

Cannonball AS is the data controller responsible for your personal data.

  • Address: Flyplassvegen 555, 5258 Bergen, Norway
  • Email: post@cannonball.no
  • Phone: +47 46 40 30 80

3. What Data We Collect

To arrange highly bespoke aviation, maritime, and ground logistics, we collect information that may include:

  • Identity & Contact Data: Full names, titles, dates of birth, nationalities, passport numbers, visa information, phone numbers, and email addresses (for passengers and their booking agents).
  • Operational & Travel Data: Flight itineraries, manifest details, catering preferences, specific medical or mobility requirements, and vehicle tracking info.
  • Financial Data: Bank account details, wire transfer confirmations, and billing information.
  • Technical & Usage Data: IP addresses, browser types, and interaction data collected via cookies when you navigate our websites.

4. How We Use Your Data and Legal Basis

We will only process your personal data when the law allows us to. Most commonly, we use your data under the following legal bases:

  1. Performance of a Contract: To process quotes, manifest flights, clear customs, and execute your luxury transport bookings.
  2. Legal Obligation: To comply with international aviation security laws, maritime passenger manifests, borders/customs regulations, and Norwegian tax laws.
  3. Legitimate Interest: To maintain network security, prevent fraud, and optimize the user experience on our digital platforms.

5. Data Sharing and Third Parties

Given the nature of global charter logistics, we must securely share relevant portions of your data with highly vetted third parties:

  • Primary Operators: Certified aircraft operators (AOC holders), yacht captains, and professional chauffeur networks necessary to execute your trip.
  • Authorities: Border control, customs, civil aviation authorities (e.g., Avinor in Norway), and airport security terminals.
  • Service Providers: Secure IT hosting, encrypted communication platforms, and specialized aviation scheduling software.

Elite Discretion Guarantee

Cannonball AS does not sell, rent, trade, or leverage your personal data or travel history for marketing purposes. Your itineraries, high-profile identities, and travel companions remain strictly confidential.

6. International Data Transfers

When arranging international flights or transits outside the European Economic Area (EEA), your data may be transferred to countries without equivalent GDPR protections. In these instances, we ensure data safety by utilizing standard contractual clauses (SCCs) or relying on mandatory statutory requirements for international border clearance.

7. Data Security & Retention

  • Security: We implement strict technical and organizational measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. Communication regarding UHNW manifests is handled via encrypted channels.
  • Retention: We only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including any legal, accounting, or regulatory reporting requirements (typically up to 5 years under Norwegian bookkeeping laws).

8. Your Legal Rights

Under the GDPR, you have the following rights regarding your personal information:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request rectification of inaccurate or incomplete data.
  • Erasure («Right to be Forgotten»): Request deletion of your data, subject to our overriding legal retention obligations.
  • Restriction & Objection: Object to or restrict the processing of your data under certain circumstances.
  • Data Portability: Request the transfer of your data to another service provider.

To exercise any of these rights, please contact our team at post@cannonball.no. If you believe we are handling your data unfairly, you have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).

9. Cookies and Web Analytics

Our websites use cookies to ensure optimal functionality, remember your preferences, and analyze anonymized traffic patterns. You can adjust your browser settings to refuse cookies, though some features of our booking portals may become inaccessible as a result.