When you use a service offered by ÆrøXpressen A/S, we need to process some of your personal data. The protection of your privacy and personal information is important to us. Therefore, we have developed a policy on how we handle your personal data in accordance with the requirements that are made legal and legal.

In this document you can read more about how we process your personal data and information.

Data Protection Adviser

We have appointed a data protection advisor to ensure that your personal data is collected and processed correctly. If you have questions about the collection, processing and use of your personal data, you always have the opportunity to contact ÆrøXpressen's data protection advisor

ÆrøXpressen A/S

Data Protection Adviser

Port Square 8, 5960 Marstal

CVR: 38240641

E-mail: [email protected]

ÆrøXpressen treats your personal data with care. Our employees are trained in data protection; they know what data to collect, how it is handled and stored and who has access to that data.

Your rights as registered in our systems

You have the right to receive information about and the right to access the personal data relating to yourself. The procedures to verify your identity are strict and we need proof that you are truly the right person before we can inform you of what data we store and handle about you.

You also have the right to have your data deleted or limit the ability to process your personal data.

You can use any of the above rights by contacting our Data Protection Officer. Contact data on the person is seen earlier in this document.

The legal background for processing your data.

We process your personal data based on the following legitimate reasons:

Legal obligation

We may be obliged by laws and regulations to collect certain personal information so that you as a customer can begin the journey you have chosen.

Compliance with the contract

We need some personal information to ensure that we fulfill the contract we have with you as a customer.

Legitimate interest

When ÆrøXpressen processes your personal data for the legitimate interests of ÆrøXpressen, we will consider and balance any potential impact on you and your rights under data protection and other relevant legislation. Our legitimate business interests do not override your interests. ÆrøXpressen will not use your personal data in circumstances where your rights and freedoms are disregarded in relation to our legitimate interests, unless we have your consent or it is otherwise permitted by law.

Consent

By agreement or request from you as a customer, personal data can be processed for the purpose of providing information, marketing and communication with you as part of our business contact with you.

If personal data is processed on the basis of a formal agreement with you, you have the right to cancel the agreement at any time. This should be done by contacting our Data Protection Officer.

When do we collect your data?

We collect your personal data when you book with us, travel with us when you use our website and/or when you call us.

What information do we collect from you?

We only collect the data for which we are legally authorised. Depending on the case, this may include the following data:

• Name
• Address
• E‑mail
• Phone number
• Birthdate
• Car registration number
• Beware details
• Any information relating to the need for special care or assistance
• Service and products you have purchased
• Data on how to use our website
• Technical data relating to but not limited to your IP address, details of the browser you use, the length of time you have spent on our website, etc.
• Personal data that you post on our website
• CV and applications
• Other data you provide us with, for example, through market research 

Why and how do we use your personal data?

We use your information to:

• Perform the booking and further simplify the booking process when you book again.
• Details of your passport may be necessary to verify your identity.
• Your phone number is necessary so that we can contact you quickly in case of changes to your reservation.
• Process financial transactions to enable your purchase of our products and services.
• Enable us to comply with contractual obligations.
• Monitor, analyze, personalize and improve the use and content of our websites and online services.
• Send you information about our products and services including marketing communications and by email, SMS, newsletters or other forms of communication.
• Analyze the effectiveness of our advertising.
• Register communication.
• Respond to any queries or complaints.
• Manage our business.
• Comply with legal obligations.
• We use the information collected to collect statistics, we may ask you to participate in market research and we use the information collected to analyze and improve our products and services. Our goal in this case is to offer our customers products and services that meet their needs and interests.

How do we protect your personal data?

When you book a ticket with ÆrøXpressen, we use secure server software that encrypts all the information you enter before it is sent to us. This encryption ensures that the information is adequately protected from unauthorized intrusion.

ÆrøXpressen takes a proactive role to ensure that privacy is integrated into any process and procedure relating to your data.

How long do we keep your data?

In general, there is an existing customer relationship with ÆrøXpressen for 3 years from the last travel date (departure date). The personal information in the booking information is stored for the period corresponding to the time when we may be met with customer demands.

When do we delete your data?

As a matter of principle, we delete your personal data when the purpose of collecting your data is achieved and therefore no longer necessary to store it. In the event that we have a legal or contractual obligation to keep your data, we will not delete it until such a legal or contractual obligation ends.

Safety on board our ferry

After a thorough investigation, the names of unwanted passengers may be placed on an internal list at ÆrøXpressen to prevent these passengers from booking and travelling with us if the master has reason to believe that the passengers pose a safety risk in accordance with the rules and conditions applicable to the journey.

Passengers are considered to pose a safety risk if they have previously threatened the safety of themselves, the ship, crew or other passengers in the past, or if their behaviour has been inappropriate or if they have not complied with safety regulations or requirements.

ÆrøXpressen will inform the passenger of the registration and record the necessary personal information about prohibited passengers to prevent passengers deemed a safety risk from booking trips on our ferry for a defined period of time. The information shall not be kept for longer than necessary.

Sharing personal data with third parties

Personal data will be shared internally in ÆrøXpressen A/S for practical reasons. We have internal policies and agreements to ensure an adequate level of protection no matter where in ÆrøXpressen your data is located.

We do not transfer personally identifiable information about our visitors or customers to a third party, except in the following cases:

• If we are legally obliged to do so, for example, to the police and customs. In these cases, we will only share this data if the following conditions are met:

1. A written request must be submitted.
2. The relevant legal basis for obtaining the data shall be provided.
3. There must be a formal request for the personal data to be provided.

• Service providers and advisors that we use to provide certain services, such as hotels and activity providers, that work with us to provide the service and service you have ordered. In such cases, suppliers will be individual data controllers and have their own data protection policy according to the law.
• In very specific cases, ÆrøXpressen can collect statistics about our customers, sales, traffic patterns and related website information to third-party partners without the individual customer being identifiable.
• In addition, ÆrøXpressen A/S may provide information about our customers to third parties who provide services or functions on our behalf, such as payment card processing.

Any such sharing will be in accordance with the Data Protection Act and only to trusted third parties.

We always strive to clearly inform you of the use and possible disclosure of your information once such information has been received. If it is not convenient to do so when collecting necessary data, we will inform you as soon as possible, unless there is a legitimate basis for not doing so. For example, where it is necessary for the prevention or detection of a crime or where otherwise permitted by law.

Agreements on the processing of data

ÆrøXpressen A/S may have contractual agreements with various partner companies regarding the handling of personal data. These companies will be contractually obliged to use your data according to the same high data protection principles as ÆrøXpressen applies. Compliance with the Data Protection Act goes without saying. For example, in such a contract we will specify the intended use of the personal information, as well as the security requirements for storage and access and the requirement to delete the data.

In all cases, control of and control of this data remains with ÆrøXpressen A/S.

Data processed outside the EU

All personal data is processed in the EU and is therefore protected under the GDPR. If data is to be processed outside the EU in some cases, ÆrøXpressen A/S ensures that the specified country, although not regulated by gdpr, follows in detail the rules laid down in gdpr with regard to the collection, storage and use of your personal data.

Collecting and processing data when using our website

Cookies and analytical tools

It is important to us that our website is user-friendly. For this reason, we use cookies and analytics tools to enable certain features of our website, such as cookies and analytics.

• Increase the speed at which home page pages are loaded

• Learn more about your usage behavior to enable us to constantly improve our website.

Cookies are small text files where your personal information can be stored for a limited or unlimited time by your browser. Cookies we use do not install or start any programs or other applications on your computer. They do not damage your device in any way.

You can prevent the storage of cookies in the security settings of your browser, but the use of our website may be restricted. You can also delete text information that has already been saved.

Logs

With each access to our website, information is sent to our server via the respective Internet browser at your respective terminal and temporarily stored in logs. The records stored until automatic deletion contain the following data: date and time of retrieval, name of the page you want, IP address of the computer you are using, amount of data transferred, loading time, product and version information about that browser, and the name of its access provider.

The legal basis for processing the IP address is Article 6(1)(f) GDPR. Our legitimate interest is to ensure a smooth connection setup, easy use of our websites and evaluation of system security and stability.

A direct ending to your identity is not possible on the basis of the information and will not be used by us.

The data is automatically saved and deleted after the above purposes. The deletion period depends on the requirement for how long it is necessary to save this data.

Contact form, e-mail queries

If you contact us by email or through a contact form available on our website, we will collect and store your information for the purpose of responding to your inquiry and any follow-up questions.

Payments online

When you pay online, you'll be transferred to a secure website where you add your payment card information.

All payments are processed by our trusted partner platforms and validated according to the highest standards for securing and protecting card data. We do not process or store any payment card information in ÆrøXpressen A/S. But if you have any questions about the processing of your payment card information, please contact ÆrøXpressen A/S and we will contact our payment partners.

External links / links to other pages

Our sites may contain links to or from a number of third-party websites. ÆrøXpressen A/S does not in any way control or operate third-party websites. ÆrøXpressen A/S is not responsible for privacy practices, content, policies or actions by third-party websites. Our privacy policy applies only to general information processed by our websites, according to information collected on our sites. The use of information you may provide to third parties on third-party websites, or that such parties may otherwise collect on other websites, is not subject to our privacy policy.

Social networks

Media plug-on for networks such as Facebook, Instagram or services with user-generated content features can be integrated into our website. Where our website contains a plug-in for a social networking website, these are clearly marked (e.g. With a Facebook button), if you choose to click one of these buttons or links, your browser connects directly to that social network. This other site's privacy policy applies to any personal information you provide to this site. If you do not want the social network to collect the information about you, review the privacy policy of the relevant social network and/or log out of the relevant social network before visiting our website.

Use of video and CCTV on our ferry

We use video and CCTV (closed TV circuit) in certain areas of the ferry, such as on deck for safety purposes. We ensure that "live feeds" from cameras and recorded images are only viewed by approved employees whose role requires them to have access to such data. We don't do covert surveillance or surveillance.

The right to appeal to a supervisory authority

You have the right to lodge a complaint with the Danish Data Protection Agency about our processing of your personal data. Please contact our data protection officer first to give us an opportunity to improve.

Changes to our privacy

We regularly update our policy to address new issues or to reflect changes to our website. See this privacy message regularly. Revisions shall enter into force immediately upon notification. The latest version is always on this page. All use of our website or services by you following such notice shall be considered as acceptance by you of such review.

This privacy policy was last updated september 2019.

ÆrøXpressen A/S, Harbour Square 8, 5960 Marstal, +45 7370 7800 , [email protected]