Legal centre

The contract for the API and dashboard (Part A) and for booking a flight on booking.norba.io and in the apps (Part B).

What personal data we collect, why, who receives it, how long we keep it and how to exercise your rights.

Everything norba.io and the dashboard store in your browser, and the one optional group you can switch off.

Who provides the service, the company register entry, our points of contact under the Digital Services Act and the supervisory authorities.

What genuine use of the API, the dashboard and the booking site looks like, with examples, and what we do about misuse.

Who handles which complaint, how to make one to us, how fast we answer, and the independent bodies you can go to.

How we protect the platform, how to report a vulnerability, and the rules and commitments for good-faith research.

The standard we work to, where we are, and how to get help if something is in your way.

The Article 28 GDPR terms under which Norba processes your travellers' data as your processor.

Every provider that processes personal data on our behalf: what it does, where, and the safeguard for any transfer.

Who does what when you book, the price, how results are ranked, and your rights as an air passenger.

What booking.norba.io stores in your browser. It is a separate site and keeps its own list.