Legal Notice

norba.io, app.norba.io, api.norba.io, booking.norba.io and the Norba Travel apps for Android and iOS are provided by the company below. This is the information the Estonian Information Society Services Act (infoühiskonna teenuse seadus) and Article 5 of Directive 2000/31/EC on electronic commerce require a provider of information society services to make available:

• Legal name: NORBA TRAVEL OÜ
• Legal form: osaühing (private limited company) under Estonian law, with a share capital of €300
• Registered address: Tornimäe tn 5, 10145 Tallinn, Kesklinna linnaosa, Harju maakond, Estonia
• Registry code: 17597060 (EUID EEARIREG.17597060), entered on 10 September 2026
• Register: Estonian Business Register (äriregister); the entry is public at ariregister.rik.ee under registry code 17597060
• VAT number: EE103029739
• Trading name: Norba
• Email: hello@norba.io

The email address above is the way to reach us quickly and directly about anything: it reaches a person, not an automated queue.

Norba runs two services. For travel businesses and developers, an API and a dashboard that search, price, book and service flights directly with airlines over IATA NDC (New Distribution Capability). For travellers, booking.norba.io and the Norba Travel apps, where flights from the airlines connected to Norba can be searched and booked. On both, the flight itself is operated by the airline under its own conditions of carriage; Norba is an intermediary, not a carrier.

What Norba sells is flights, with the extras the same airline offers for them. It does not organise or sell package travel, and does not facilitate linked travel arrangements, within the meaning of Directive (EU) 2015/2302 and the Estonian Tourism Act (turismiseadus). Norba is therefore not registered as a package-travel organiser or retailer in the Estonian register of economic activities (majandustegevuse register), a registration that Act requires for those activities and not for the sale of flights, and it holds no travel-agency licence.

The conditions that apply are in the Terms of Service; how we handle personal data is in the Privacy Policy. Every legal document we publish is listed in the Legal centre.

Regulation (EU) 2022/2065 (the Digital Services Act) asks every intermediary service to name a single point of contact. Ours is the same for everyone:

• For authorities of the Member States, the European Commission and the European Board for Digital Services (Article 11): hello@norba.io. You may write to us in Estonian, English or Spanish.
• For people and businesses using our services (Article 12): hello@norba.io. You may write to us in English or Spanish; you will be answered by a person.

NORBA TRAVEL OÜ is established in the European Union, so it has no legal representative under Article 13.

Some of what we store comes from our users — support messages and the files attached to them, and the details entered into a booking. If you believe something we host is illegal, write to hello@norba.io with:

• why you consider it illegal;
• where it is, as precisely as you can (a URL, a booking reference or a ticket reference);
• your name and email address, unless the report concerns child sexual abuse material, which you may report anonymously;
• a statement that you believe in good faith that the report is accurate and complete.

We confirm receipt, decide diligently and without undue delay, and tell you what we decided and how you can contest it. If we restrict anything a user provided, we tell that user why. Notices that are manifestly unfounded, sent repeatedly, may be disregarded.

These public bodies oversee the parts of the law that apply to what we do:

• Data protection: Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate), www.aki.ee — our lead supervisory authority under the GDPR. You may also go to the authority where you live; the Privacy Policy explains how.
• Consumer protection and accessibility: Tarbijakaitse ja Tehnilise Järelevalve Amet (Consumer Protection and Technical Regulatory Authority, TTJA), www.ttja.ee.
• Air passenger rights: the national enforcement body of the country the flight departed from — in Estonia the TTJA, in Spain AESA (Agencia Estatal de Seguridad Aérea). The Traveller information page explains which one applies to you.

Out-of-court resolution of consumer disputes is described in the Complaints procedure.

The sites, the apps, the API, its documentation and the Norba name and logo belong to NORBA TRAVEL OÜ or are used under licence. You may read, print and link to our pages; reproducing them in bulk, or using our name or logo in a way that suggests we endorse something, needs our written permission.

Airline names, logos, fares, schedules and descriptions belong to the airlines. The destination photographs on booking.norba.io belong to their authors and are used under the licences listed on its image-credits page.

Our pages link to airlines, public authorities and other third parties. We are not responsible for their content or for how they handle your data; their own terms and policies apply once you are there. If a link of ours leads to unlawful content, tell us at hello@norba.io and we remove it.

Our services are governed by Estonian law. A dispute with a business is heard by Harju County Court (Harju Maakohus) in Tallinn; a consumer keeps the protection of the mandatory law of the country where they live and may also bring proceedings in the courts there. The Terms of Service (clause 22) set this out in full. Nothing in this notice limits the rights the mandatory consumer law of your country gives you.