Privacy Policy
Last updated: August 2026
Sonja AS ('Sonja', 'we', 'us'), organisation number 931 445 073, is the data controller for the personal data we process through our services. We process personal data in accordance with applicable data protection legislation, including the GDPR.
What data do we collect?
What we process depends on how you use Sonja. For sellers: name, contact details, registration number, mileage, photos, condition information and technical data from the Norwegian Vehicle Registry and related registers. For private bidders: Vipps identity, name, contact details and bid history. For dealers: business and contact details, login data and purchase/bid history. We also log technical data needed for operations, security and — with consent — analytics.
What do we use the data for?
We use the data to process sale requests, provide estimates and offers, run auctions and commission mandates, administer the dealer portal, complete settlement and title transfer, meet accounting obligations, and improve the service. We do not use the data for other purposes without a valid legal basis.
Legal basis
Processing is based on consent (for example when you submit a sale request or accept analytics cookies), contract (when you accept an offer, consent to an auction or place a bid), legitimate interest (operations and security) and legal obligation (accounting).
Who do we share data with?
We share data with processors needed to deliver the service, such as identity login (Vipps), email and SMS, payment, transport and title transfer. Public registers may be used to verify the vehicle and ownership. We do not sell personal data.
How long do we keep your data?
We store personal data for as long as necessary for the purpose, or until you request deletion where the law allows. Data related to completed transactions may be retained for up to 5 years for accounting purposes. The version and time of accepted terms are stored for as long as the agreement may remain relevant.
Your rights
You have the right to access your data, request correction or deletion, withdraw consent where processing is based on consent, and lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet). Contact us at hei@sonja.no to exercise your rights.
Cookies
We use cookies for functional purposes and, with your consent, for analytics and marketing. You can manage your preferences at any time via the cookie settings on this website.
Contact us
If you have questions about how we process your personal data, please contact us at hei@sonja.no.