Processing of your personal data

This notice describes how Atlantic Airways processes your personal data and your statutory rights. Specific customer terms and conditions, for example in connection with the purchase of tickets and the like, take precedence over this notice.

Who is responsible for the processing?

The data controller for the processing of your personal data is:

Atlantic Airways P/F
Flogvøllurin
380 Sørvágur

If you have questions in connection with our processing of your personal data, you are welcome to send us an email at [email protected].

Collection
We collect your personal data in various ways, including when you buy a ticket, contact us or use our app.

In most cases we receive the information directly from you. In other cases we receive information about you from others. This may be information from other passengers or from representatives acting on your behalf or from public authorities.

We only collect information that we need in order to be able to provide you with a service, where it is a legal requirement, where we have a legitimate interest, or where we have received your direct consent. Read more under “Specific processing situations” below.

Transfer of personal data
In some cases we pass on your personal data. This may be to other public authorities, advisers, auditors, lawyers and others.

In some cases we also use data processors who help us to process your information in a proper and secure manner. This may include the storage of personal data, or where we receive help from external advisers or suppliers.

As a rule, we do not use suppliers or data processors that are based outside the EU/EEA (third countries). This may, however, occur in individual cases.

If we transfer your information outside the EU/EEA, we will always make sure that there is a satisfactory legal basis for the transfer – this means that we make sure that your information has an adequate level of protection.

Specific processing situations
Below is specific information about the processing situations that apply to Atlantic Airways.

When you book a ticket with us – via the website, the app or by telephone – you will be asked to provide certain information that we need in order to be able to handle your booking and your journey. Which information we need depends, among other things, on where you are travelling.

The information below supplements our general conditions of carriage, which you can find here.

Which personal data do we record and use:

Name
Telephone number
Email
Súlubonus membership number (if you are a member)
Passport number (depends on the route)
Payment card details (only the last four digits of the card number)
If special services are needed, such as a wheelchair or similar, this is also recorded

Purpose
The purpose of processing the information is to handle/administer your agreement on the purchase of a ticket with Atlantic Airways, as well as to handle the journey itself with us.

Legal basis for processing
In order for us to be able to fulfil our agreement with you, we must process certain information about you. The legal basis for processing is therefore the performance of the agreement.

We may have a statutory obligation to process and store certain personal data about you, and we do this to the extent that it is required of us. These legal requirements may, for example, relate to reporting to TAKS and other legal safeguards.

Recipients
In order to be able to meet our obligations, we may pass on your personal data to, for example, your card provider, airports, TAKS or the police.

Erasure
Information that you have given us in connection with the purchase of a ticket and the administration of this is stored until we no longer need it or are no longer obliged to keep it, and this may be for up to five years.

French legislation (Applies only to tickets to/from Paris)
In accordance with article L 232-7 of the French law on internal security, notice is hereby given that airlines must provide French public authorities and other relevant authorities with booking, check-in and boarding information collected from passengers (PNR/API), for the purposes and under the conditions laid down in decree no. 2014-1095 of 26/09/2014 and in amending decree no. 2018-714 of 03/08/2018.

The Atlantic Airways app makes it easier for you to book journeys and to check in while you are travelling. If you choose to download and install the app, you will be asked to provide certain personal data before the app becomes active.

Which personal data do we record and use:

Name
Date of birth
Nationality
Email
Súlubonus number
Mobile number
Address

Purpose
The purpose is to be able to provide you with the services that the app gives access to, including making booking and check-in easier.

Legal basis for processing
In order for us to be able to fulfil our agreement with you on the provision of services via the app, we must process certain information about you. The legal basis for processing is therefore the performance of the agreement.

Recipients
Your personal data is stored by Atlantic Airways and is displayed on the website of a third-party host.

Erasure
Your personal data is stored for as long as you use the app and have it installed. Your personal data is erased when the app is deleted, unless Atlantic Airways is required under the relevant legislation to store your personal data for a longer period.

Contact
Our customers can always contact us, for example with questions, a complaint or similar.

Which personal data do we record and use:
Name, address, email and telephone number

Information that you give us that is necessary for us to be able to deal with your enquiry

Purpose
The purpose of the processing is that we can help you and deal with your enquiry.

Legal basis for processing
The information is processed so that Atlantic Airways can pursue a legitimate interest, which is to answer your enquiry.

In connection with complaints and the like, which may contain sensitive information, for example information about health, the processing is necessary in order for legal claims to be established, exercised or defended.

Recipients
Where we have an obligation to do so, the relevant information may be passed on to the relevant public authorities. In addition, information may also be given to external advisers, including lawyers, if this is necessary.

Erasure
Information that Atlantic Airways processes in connection with answering enquiries is erased no later than 24 months after the case has been finally concluded.

We collect certain information about you when you use our wireless internet on board. In this connection, Atlantic Airways may store cookies on your device (computer, tablet, mobile phone or something else).

You can read our cookie policy here.

Which personal data do we record and use:
Information that is sent from your device when you use Atlantic Connect

Information about:
The identification number of the device (IP and MAC address), referring URL, duration of the visit, geographical location, your use of Atlantic Connect. This information is collected via cookies.

Purpose
The purpose of collecting information in connection with the use of services is to be able to identify your device, as well as for statistics.

Legal basis for processing
The legal basis for our processing of your personal data in connection with the use of Atlantic Connect is your consent.

Recipients
The relevant information is passed on to suppliers that we work with, including suppliers of technical support and of the operation of our services.

Erasure
Information collected in connection with the use of Atlantic Connect is anonymised on an ongoing basis and is erased no later than 12 months after collection.

Cookies expire in accordance with our cookie policy, read more here.

Limitation of rights
Access to information in connection with the above requires that you give us some additional information that makes it possible for us to identify you: (i) information provided in connection with logon, (ii) the IP/MAC address used, as well as (iii) the date and approximate time when you used the wireless internet. We do not process your first name and surname and can therefore not identify you from the recorded information.

Your rights
Under the Data Protection Act you have a number of rights in relation to our processing of your personal data.

Right to withdraw consent
If our processing of your personal data is based on your consent, you always have the right to withdraw your consent. When you withdraw your consent, we stop processing the personal data that was based on that consent.

Please note that if you withdraw a consent, we may not be able to provide you with a particular service.

Right to erasure
In particular cases you have the right to ask to have personal data that we hold about you erased. The right is not unconditional, because certain information may not be erased on the basis of other legislation, or where an agreement and a specified purpose give us the right to retain and process the personal data.

Right of access
You have the right to be told what information we hold about you. The right of access does, however, require that we can identify the specific information about you. It may therefore be necessary for you to give us supplementary information if we cannot identify you from the information we hold.

Right to restriction of processing
In particular cases you have the right to ask for the processing of your personal data to be restricted. This means that if the conditions for restriction of processing are met, we may only process your personal data in particular cases.

Right to object
You can object to personal data about you being processed. If the objection is deemed justified, the personal data about you must not be processed. However, the information may still be used for processing for other lawful purposes.

Right to rectification
You have the right to ask to have personal data that is incorrect or misleading corrected, so that we do not process information about you that is wrong or incomplete.

Right to complain
You always have the option of complaining to Dátueftirlitið if you are dissatisfied with our processing of your personal data.

You will find the contact details of Dátueftirlitið at www.dat.fo.

Right to data portability
You can ask to have the personal data that you have provided to us given to you in a structured, commonly used and machine-readable format.

Third parties
This notice covers only the processing of personal data carried out by Atlantic Airways. Other parties that we work with, and other websites that are accessible via our website, have their own privacy notices and policies concerning the processing and protection of personal data. We urge you to familiarise yourself with the policies and privacy notices of other parties.

Although we try to work only with third parties that have the same respect for data protection and set the same high requirements for it as we do, we cannot in any way be held responsible for the way in which a third party protects and processes personal data.

Purchase of tickets
When you book a ticket with us – via the website or by telephone – you will be asked to provide certain information that we need in order to be able to handle your booking and your journey. Which information we need depends, among other things, on where you are travelling.

The information below supplements our general conditions of carriage, which you can find here.

Which personal data do we record and use:

Name
Address
Telephone number
Email
P number (only used for verification with Landsfólkayvirlitið)
Payment card details (only the last four digits of the card number)
If special services are needed, such as a wheelchair or similar, this is also recorded

Purpose
The purpose of processing the information is to handle/administer your agreement on the purchase of a ticket for the helicopter, as well as to handle the journey itself with us.