Privacy policy – Tora Tourist
At Tora Tourist we have the utmost respect for our customers’ privacy and personal data, and we see it as our chief concern to guard the data in our custody. The purpose of this policy is to inform how we gather, use, and store your personal data, and how we guard this data, and how you can enforce your legal rights. All proper precautions are taken to safeguard your personal data according to current legislation.
Data controller
Tora Tourist is the data controller for any processing of your personal data in our Group, which covers all business done under the Tora Tourist brand.
The legal entity in control of the processing of your personal data is:
Sp/f Tora Tourist
Hoyvíksvegur 66
100 Tórshavn
Faroe Islands
Email: [email protected]
Office phone: +298 31 55 05
If you have any questions regarding our processing of your personal data, please contact us at the email listed above.
Collection of personal data
Personal data means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier, such as name, address, e-mail, and telephone number. It can also be a ticket number, passport number, and other sorts of electronic data as IP-address if these can be used to identify a natural person.
We collect personal data in different ways, but most often directly from you.
- Data collected in connection with booking and traveling
When you book a tour on our website www.tora.fo via the telephone, or our office, we collect certain data from you – data that is necessary for your booking. Depending on the service, we will collect your name, email, phone number, and food allergies of all travelers, and the address and payment information of the person making the booking.
If children are part of the booking, we will also need to collect the relevant above mentioned information about the children.
When you travel with us, we will also collect information about your trip. This might include ticket reference, destination, length of trip, and other services, you have chosen to use on your trip.
- Data collected with direct contact
If you contact us directly via our customer service, email, telephone, or any other way, we may need to collect your personal data in order to assist you. This might include name, booking reference, e-mail address, or telephone number.
We might also collect other personal data, that you deem necessary and choose to give us. This could include information about allergies, certain health issues, or other information about you or other people in your booking.
- Data collected in connection with a subscription to our newsletter
If you subscribe to our newsletter, we will collect your name and email address, so that we can send you the newsletter. Our newsletter contains offers and other information that might be relevant for your travels. It can also contain competitions, questionnaires, and advertisements from our partners.
- Data collected by the use of our digital solutions
When you visit our website or our online booking systems, we will collect data about your use of said services. Collected data might include personal data, such as IP-address.
- Data collected from third parties
During a booking process or other communication, a person might pass on information about one or more fellow travelers. In such an instance we will presume that the person giving us the information has the necessary consent from the fellow travelers to pass the information on to us. If you have not made a booking with us yourself, and someone else you are traveling with has, we will collect data about you from the person making the booking. The same applies if someone contacts us on your behalf.
We might also receive information about you from banks, and other payment- or service providers when you use your payment cards or other payment services. We use this information to process payments only.
Special categories of personal data
We do not process special categories of personal data, unless absolutely necessary. Should this be necessary we will ask for explicit consent, unless we are legally obliged or have a legal right to process such information.
Processing and retention of personal data
All our processing of personal data is made in compliance with applicable laws, and is based on the following:
- We have your consent to process your personal data for a specific purpose
- Processing is necessary for the performance of a contract with you
- You have made a booking or purchase via our website
- We have a legal obligation to process under:
- Tax law
- Accounting law
- Personal data law
- Processing is necessary for the purposes of the legitimate interests pursued by Tora Tourist. These interests can be statistics or marketing.
Administration of your booking
In order for us to deliver the services you have booked from us, we will use your personal data. We will use the data to issue tickets and other travel documentation, book hotels, and payment for these services. If you have booked an excursion, car, or something else, we might also need to use your personal data.
The administration also covers the use of your personal data for accounting, settling, auditing, payment, and more.
Information material
Once you have booked a service from us, we will use your personal data to send you confirmation, important information about your trip, and relevant offers. This will be sent to the e-mail address you gave us upon booking.
During your trip, we may send you important information via SMS to the mobile phone number you gave us upon booking. This might be information about weather, delays, changes, and other information relevant to your trip or destination.
Reminders are sent via email.
Marketing
If you subscribe to our newsletter, we will use your personal data to send you the newsletter.
Legal requirements
Your personal data may be processed by us, so that we comply with legal requirements, such as safety and notice requirements.
Retention period
We keep your personal data as long as it is necessary for the purpose for which it is collected and intended. We will always keep your data as long as we are providing you with a service. Once our customer relationship is ended, we usually keep your data for 5 years after that. This is mainly in order to comply with legal requirements regarding financial statements.
Sharing personal data
We may share your personal data with third parties in some instances. This can include authorities if we are legally required to do so, or external partners, if we have your consent, or we have a legal obligation to do so.
Partners, Agents, and IT suppliers
We use many different IT services and systems, and some of these contain personal data. Some systems are hosted locally, and others are hosted by the agents, affiliates, or cloud-services, such as booking systems and payment services. We always make sure that your rights are secured, and that the necessary security measures are taken in connection with data transmissions.
Your rights
Under data protection law, you have rights we need to make you aware of. The rights available to you depend on our reason for processing your information.
You are not required to pay any charge for exercising your rights. We have one month to respond to you.
Your right to access
You have the right to ask us for copies of your personal information. This right always applies. There are some exemptions, which means you may not always receive all the information we process.
Your right to rectification
You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. This right always applies.
Your right to erasure
You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing
You have the right to ask us to restrict the processing of your information in certain circumstances.
Your right to object to processing
You have the right to object to processing if we are able to process your information because the process is in our legitimate interests.
Your right to data portability
This only applies to the information you have given us. You have the right to ask that we transfer the information you gave us from one organization to another, or give it to you. The right only applies if we are processing information based on your consent or under, or in talks about entering into a contract and the processing is automated.
Contact and complaints
You are always welcome to contact us if you have any questions regarding your rights and our processing of your personal data. You can contact us at:
Tora Tourist
Hoyvíksvegur 66
100 Tórshavn
Faroe Islands
Office Phone.: +298 31 55 05
E-mail: [email protected]
If you wish to complain about our processing of your personal data, you can submit your complaint to the Faroese Data Protection Agency:
Dátueftirlitið
Postsmoga 300
Tinganes
110 Tórshavn
Faroe Islands
Phone.: +298 309100
E-mail: [email protected]