Privacy policy app

1. Introduction

This privacy policy addresses collection of, use and processing of personal data through the us of the application "BagID". The app is owned and developed by BagID AS, which may be referred to as "we", "us", "our" or "the data controller". 

The app contains certain links that may redirect you to our website or our Digital Help Center or other third-party services. A separate privacy policy applies to the website. When using third-party services such as Apple Find My or Samsung SmartThings Find, their respective privacy polices apply. 

1.1 Legal Basis for Processing 

BagID processes your personal data to enable the use of the product and to deliver our services to you. The legal basis for processing your personal data is based on a contractual obligation and your consent. Creating an account in the application is necessary to use our services. We only request the personal data necessary to fulfill the agreement we have with you.

When creating a user account in the app, we ask for your consent. Some features in the app are subject to a paid subscription and are therefore not strictely necessary for using certain features on your BagID. To create a user account in the app, you must confirm that you have read and accepted the contents of this privacy policy.

We may use personal data, such as your name and email address, to send you updates, important information or offers aimed at providing you with a better service. You will be explicitly asked to consent to this and can opt out at any time through the settings in the app. 

1.2 Data Controller and Data Processor

BagID is the data controller for the personal data collected through the application. We are responsible for determining the purpose and methods of collecting and processing personal data via the app.

We use several data processors and are responsible for selecting and ensuring that they comply with the privacy regulations (GDPR) in their roles. Please refer to section 4 for more information on how we share your personal data. 

1.3 What does this Privacy Policy cover?

This privacy policy covers information that is collected or provided thorugh

(a) Your user account in the application

(b) Use of features subject to a subscription

(c) Information related to your BagID

2. Data we collect 

Category Information we collect 
Personal data

Name, email address and phone number.

If you consent to this, we may use your personal data to send you updates and offers related to the service
Travel information

Reference number, baggage number and travel information such as: 

  • Departure location
  • Departure time and date
  • Arrival location
  • Arrival time and date
Event log

The use of the electronic bag tag is logged. This means that BagID gains insight into: 

  • When you add a new trip to the app
  • Your reference number with your airline
  • Travel information related to your reference number
  • Your baggage number
  • When you transfer the bag tag to your BagID

Parts of the information are anonymized to BagID AS.
Technical information

Through our systems, we gain insight into technical information about your BagID, such as:

  • Device type
  • Current firmware version
  • Serial number (S/N)
  • Last updated battery percentage
  • Date and time of user account cration

 

2.1 Purpose of Using These Personal Data

  • Contractual Obligations: When purchasing a BagID, we entered into an agreement with you to deliver goods and services. When we request information via the App, this is to fulfill the obligations under this agreement.
  • Consent: We request consent where necessary or as required by applicable laws before processing certain types of information or using them for statistical or analytical purposes.
  • Legitimate Interest: We may collect and process certain types of data based on legitimate interest, with the purpose of improving services, conducting analyses, understanding user behavior or for security. 
Purpose of processing Legal Basis Data Category 

Create a user account in the app

To use the application and link it to your BagID device and subscription

 Contractual obligation Personal data

Add a new trip

To check in your luggage digitally, we need your PRN. Your PRN is verified against the airline you are traveling with

 Contractual obligation
Consent		 Personal data
Travel information

Generate an electronic bag tag

The app connects to the airline's systems and retrieves information to generate a bag tag. Without access to your travel details, this process is not possible

Contractual obligation
Legitimate interest
Consent

Personal data
Travel information

Functionality, performance and development

We use technical information for maintenance, to provide technical support ant to ensure that the product and App works 

Contractual obligation
Legitimate interest

Technical information

Track statistics, troubleshooting and improvements of services

We use the event log along with technical information to track statistics, troubleshoot and improve our services

Legitimate interest

Technical information
Travel information
Event log

Provide weather and currency services in the app

When you add a trip to the app, you may receive customized services and notification if you have approved this

Consent

Travel information

Send you push notifications

Your devices' ID number allows the app to identify your phone and to send you relevant push notifications

Contractual obligation
Consent

Technical information

Send you relevant tips/offers

Send you tips to improve the user experience or special offers

Legitimate interest

Personal data

 

2.2 Other Third Parties

BagID uses third parties to deliver services to you and thus fulfill the agreement we have with you as a customer. This means that, in some cases, BagID may need to share a minimum of your personal data with third parties, or you as a customer may need to provide personal data to one of our third parties, such as when purchasing a subscription. You can read more about this in the privacy policy for our website.

3. Tracking

BagID 2 has built-in tracking functionality through the Apple Find My and Samsung SmartThings Find IoT-networks. Neither the data controller nor data processors have access to the location of your BagID. We advice you to familiarize yourself with how Apple and Samsung handle your location data. 

4. Disclosure of Personal Data

BagID has several data processors who process your personal data on behalf of us. These data processors are carefully selected third parties who have entered into an agreement with us. Disclosure of personal data to these companies may be necessary to fulfill an agreement with you, or to further develop or ensure you get the best possible experience using our services. 

We collaborate with several developers who ensure that the app functions as it should. This includes:

  • Maintenance;
  • Improvement;
  • Development of the app's functionality

The developers have access to the personal data you add to the app, as well as the event log. We assure that this access is only necessary to provide technical support, perform troubleshooting, optimize performance and for similar purposes. 

The developers working with BagID do not have access to use your data for personal purposes or to disclose it to third parties. By using our application, you consent to our developers having access to data as described in this Privacy Policy. 

4.1 Sale of Personal Data

We assure you that BagID does not sell your personal data to third parties. However, for the purpose of improving our services and/or promoting the company, we may share anonymized and aggregated data when necessary. This does not involve sharing personal identifiable information (PII). Should you have any questions or require further information about our practices regarding this, please use the contact information at the end of this privacy policy. 

4.1 Sensitive Information 

BagID does not collect sensitive personal data about you, such as political, religious or philosophical beliefs. We do not have information about your ethnic origin, biometric data or access to your health data. Analytical PII data or information you voluntarily provide us does not give us access to your sensitive personal data. 

5. Your Rights 

In the following sections, your rights regarding the processing of personal data are outlined. To exercise your rights, please contact us using the contact information provided at the bottom of this privacy policy.

As a data subject, you have the right to request access to the personal data we process and store about you. You can your rights at any time. BagID will respond to your request as soon as possible, within 1 month. If it takes longer than one month, we will notify you. If the request is manifestly unfounded or excessive, especially if it is repetitive, BagID reserves the right as the data controller to charge a reasonable administrative fee from you. 

BagID will ask you to confirm your identity or provide additional information before allowing you to exercise your rights with us. We do this to ensure that we only provide access to personal data to you, and not to anyone pretending to be you. 

5.1 Information and Access

You have the right to information and access to the personal data BagID processes about you. Through this policy, we inform you about our processing of personal data. Please contact us if you need more information.

5.2. Withdrawal of Consent 

For consent to be valid, it must be voluntary, specific, informed, unambiguous, given through an active action, documented and easy to withdraw as it was given.

BagID does not ask you to provide personal that is not necessary to fulfill an agreement. We are obligated to obtain consent to collect and process the personal data we directly and indirectly receive from the user. If you wish to withdraw your consent, please contact us or read section 6.

5.3 Deletion or Correction of Personal data 

Upon request, BagID AS can promptly delete all information stored about you unless the information is required to be retained due to other legal obligations. Please contact us using the contact information in section 10, or read section 6 for further information.

If we have incorrect information about you, you can ask us to correct it. We will do our best to accommodate your request to delete or correct personal data, but we are are not able to delete information that we are required to retain for legal reasons. 

5.4 Right to Restrict or Object to Processing

You have the right to have processing restricted in certain cases, see GDPR art. 21. This applies in the following cases:

(a) You dispute the accuracy of the personal data. Processing will be suspended for a period that allows us to verify the accuracy of the personal data.

(b) The processing is unlawful, and you oppose the deletion of the personal data and instead request that the use of the personal data be restricted.

(c) We no loger need the personal data for the purposes of processing, but you need them to establish, exercise or defend legal claims. 

You can also object to processing under GDPR art. 21. no. 1 pending verification of whether our legitimate interest override your privacy. 

5.5 Right to Data Portability 

For the information you have provided to us and which is necessary for the performance of a contract with us, and which is processed automatically (i.e., not manually by BagID), you can request to receive the personal data concerning you in a structured, commonly used and machine-readable format (data portability). 

6. Manage or Delete Your User Account

If you wish to manage the content of or delete your user account in the application, you can do so directly in the app: 

  • Go to 'More' in the bottom right corner
  • Tap on 'Settings'
  • You can manage the information you provide under 'Change profile'
  • If you wish to delete your account, tap on 'Delete my account'
    • Note that this action cannot be undone 

If you choose to delete your user account in the application, BagID will delete your name, email address and phone number from its systems. 

7. Storage of Personal Data

BagID is not permitted to retain your personal data beyond what is necessary. We store information that you can view and update for as long as you choose, unless other purposes applies, such as if the data is to be deleted after a specified period. 

Information such as event logs and travel information will be stored by us in anonymized form even if you delete your user account in the app. See how we use this information in section 2 and 2.1. BagID has a contractual obligation and a legitimate interest in retaining information about your past travels. Parts of our service is to precent completed flights in the application.

After you delete your user account, it will no longer be possible to identify you through this information, and personal data will no longer be available in our systems. The anonymized information about completed flights is used for statistical and analytical purposes, as well as for developing our products and services.  

8. Changes

We reserve the right to update or modify this privacy policy as necessary to reflect any changes in our privacy practices or in accordance with applicable laws and regulations. Should there be significant changes in the way we collect, process or protect your personal data, we will notify you. We encourage you to check this privacy policy for updated information on how we collect, use and protect your personal data. The current privacy policy is always published in the app. 

9. Concerns and Complaints

If you have concerns or complaints regarding our handling of your personal data, we encourage you to contact us. We take privacy seriously and will do our best to address any concerns you may have regarding our data processing. 

We are committed to cooperating with the relevant authorities to resolve complaints related to privacy that cannot be resolved directly with our users.

10. Contact information

BagID AS

Molovegen 12
6004 Ålesund
Norge
post@bagid.no

Last updated January 2025