Processing of Personal Information
Data Responsibility
Your personal information is processed by Vága Floghavn P/F, 380 Sørvágur, as the responsible entity.
If you have any questions regarding the processing of personal information, please contact us at privacy[ a]fae.fo.
Collection of Data
We collect your data via different methods; please read Special Processing Circumstances.
In most cases, we receive the data directly from you. In other cases, the data is outsourced. This is data obtained from other public authorities and registries e.g. Vehicle registration.
You also have the right to know where we obtain information about you.
Transfer of Personal Data
In certain circumstances, we will transfer your data. This can be to other public authorities, e.g. consultants, auditors, lawyers.
We also occasionally make use of data processors, who assist in processing your data safely and securely. This can be for the storage of data or assistance from an outside source to consult on cases.
We do not use data processors that reside outside the EU/EEA except for certain individual and special cases.
If we do have to transfer your data outside the EU/EEA we will make sure that it is done with the proper justification - we will make sure that your data is sufficiently protected.
Your Rights
According to the Data Protection Act, you have certain rights regarding your data.
The right to revoke consent
If our processing of your data is dependent on your consent, you always reserve the right to revoke your consent. If you revoke your consent, we will stop processing all data requiring your consent.
Please note that if you do revoke your consent, we might not be able to offer you certain services.
Right to remove data
In special cases, you have the right to request the removal of all the data that we may have on you. However, this right has certain stipulations because certain data may not be removed per other laws or if agreements and specific objectives grant us the right to obtain and process personal data.
Right to transparency
You have the right to know what data we have on you. However, the right to transparency requires that we be able to identify specific data regarding you. It may then be necessary for you to supply us with stipulating data so that we may identify you specifically within the data that we have.
Right to limit processing
In special circumstances, you have the right to request to limit your data processing. This means that if the requirements for limiting processing are met, we are only able to process your data in special cases.
Right to object
You have the right to object to the processing of your data. If the objection is to be authorised, your data must not be processed. However, some information may still be used for processing other legal purposes.
Right to corrections
You have the right to request corrections to any data that might be wrong or misrepresented so that we do not process data that is incorrect or unfounded,
Right to complaint
You have a right to issue a complaint to the Data Protection Authority if you are dissatisfied with our processing of your data. You will find the contact information for the DPA on their website
Right to data transfer
You can request that your data be transferred to you in an organised, regularly operated and machine-readable layout.
Specific Processing Circumstances
Below you can find information about specific processing at FAE.
Parking
FAE collects data on you in connection with your use of FAE’s parking facilities.
The below information is a supplement to the general terms and conditions applicable to FAE Parking, which are available here.
The personal data processed in FAE Parking are the following:
Licence plate (picture of vehicle that includes the licence plate)
Arrival and departure time of vehicle (the time period)
Cost of parking
Credit card information (only the last four digits of your credit card number)
If required, the name and address of the vehicle owner will be collected from the vehicle registry at Akstovan (see below)
Purpose
The purpose of processing data is to perform/manage your agreement on/purchase of parking at FAE and for statistical purposes.
Basis of processing
If you choose to park for more than 2 hours at FAE Parking, you must pay for parking in accordance with the current price list. Data processed in connection with the payment of parking is processed on the basis of, that such data is necessary for the conclusion and performance of the agreement with you on the purchase of parking at FAE.
If payment is not made within 72 hours after the ended parking, FAE must charge the amount forward and will collect the necessary information from the vehicle registry at Akstovan. In such instances, FAE has a legitimate purpose to collect and process the information from the vehicle registry at Akstovan. FAE will charge a late fee in addition to the parking fee.
Recipients
FAE will only disclose the information to the supplier of the parking system.
Erasure
Collected information that can be linked to the vehicle, i.e. licence plate and picture, is stored until the parking is paid. The images taken in connection with parking will be deleted no later than 30 days after the parking is paid.
Data required under the rules of the Bookkeeping Act will be stored for 5 years plus the current year.
Information for statistical purposes that cannot be linked to a specific vehicle or person, will be deleted after 3 years.
Cookies and WiFi
FAE collects and uses information about you when you use FAE’s website and wireless internet. When doing so, FAE can store cookies on your device (computer, tablet, mobile device or other terminal equipment).
You can read our cookie policy here.
The following data are collected and processed:
Information transmitted by your device when you visit our website or use our services
Information about your:
Device ID (IP and MAC address), referral URL, duration of visit and geographic location and
Information about your use of our website and services. Such information is also collected via cookies.
Purpose
The purpose of collecting data in connection with the use of our website and services is to improve our website and the use of the site and for statistical purposes.
Basis of processing
Personal data processed in connection with your use of our website and wireless internet are processed on the basis of that processing is necessary for the purposes of the following legitimate interests pursued by FAE:
improvement of the website, statistics and necessary functionality,
ensuring that only travellers use our wireless network,
ensuring that our wireless network is not used for the download of illegal content or is otherwise used in contravention of Faroese law.
Recipients
Relevant personal data are disclosed to suppliers with whom we collaborate, including suppliers of technical support and operation of our services.
Erasure
Data collected in connection with your use of our wireless network will be anonymised on an ongoing basis and erased within 12 months of collection.
Cookies expire in accordance with our Cookie Policy, read more here.
Restriction of your rights
Access to processed data for the purposes stated above requires that you provide us with additional information that will enable us to identify you: (i) information given at log-in, (ii) IP/MAC address; and (iii) date and approx. time for use of the wireless network. FAE does not process information about your first and last name, and therefore FAE cannot identify you from the registered data.
Contact
As a user of FAE you are, of course, welcome to contact us with inquiries, complaints or other matters.
Personal data processed may be the following:
Name, address, e-mail address and telephone no.
Any information you provide that is necessary for us to handle your inquiry
Purpose
The purpose of processing data is for us to be able to help you and handle your inquiry.
Basis of processing
The data are processed on the basis of the legitimate interests pursued by FAE to assist you by answering your inquiry.
In case of complaints or claims for damages, which may contain sensitive information including e.g. health information, data are processed for the establishment or defence of legal claims.
Recipients
To the extent that FAE is required to do so, relevant data may be disclosed to relevant public authorities. Further FAE may, if relevant, disclose information to external advisers, including lawyers.
Erasure
Data processed by FAE when answering inquiries are erased within 24 months of the case being closed by FAE.
Security, monitoring and baggage
There are many security requirements imposed on FAE, and in order to comply with these requirements, FAE processes various data about you when you use and move around FAE.
The personal data processed in the various functions are the following:
Scanning of boarding cards in connection with security checks
CCTV monitoring of the airport areas
Screening of baggage
Purpose
The data are processed to comply with the requirements of security, validating passengers through boarding cards, and statistics on the users of FAE.
To comply with these obligations, FAE uses CCTV monitoring within FAE’s area. Moreover, FAE processes data in connection with the screening of baggage.
Basis of processing
FAE is subject to a wide number of legal requirements concerning the arrangement of security measures at FAE. Accordingly, FAE’s basis for processing personal data is necessary to comply with FAE’s legal obligations.
Recipients
In special circumstances, FAE may share relevant data with the authorities, as required. In exceptional circumstances, data may be disclosed to private third parties, such as insurance companies, in connection with the settlement of disputes. In such situations, we only disclose data about the specific individual concerned.
Erasure
Data from boarding card validation are erased after three months.
CCTV footage filmed within FAE’s area is subject to the requirements under the relevant legislation regarding the storage of such footage. The footage is erased within 30 days. In special circumstances and relating to specific cases, such data may be stored for a longer period.
Images of scanned baggage are kept for a limited period, which, for security reasons is confidential.
Restriction of your rights
Concerning CCTV recordings within FAE’s area and images of scanned baggage, your rights may be restricted due to:
public security reasons in FAE
the prevention, investigation, detection or prosecution of criminal offences
the safeguarding against and the prevention of threats to public security in FAE
We ask you to provide specific reasons for your interest in access to the CCTV recording or images of scanned baggage, for example, if (parts) of the recordings should show information of particular interest to you, e.g. an accident involving personal injury.
Access to processed data in connection with scanned boarding cards requires that you provide us with additional information that will enable us to identify you: (i) date and approx. time for scanning the boarding card, (ii) the booking number and (iii) your initials. FAE only processes information from the boarding card as well as the date and time, but not your first and last name, and therefore cannot identify you from the registered data.
Others
The airport houses a wide number of independent operators, including airlines, car rental agencies, Visit Vágar, and shops. FAE is not responsible for the processing of personal data by these independent operators. FAE is not in charge of check-in and boarding at Vágar Airport.
