Privacy policy Customer service

Introduction

Personal data includes any information that may be used to identify you. Below you can read more about how Skyss processes your personal data and get more information about your rights in your relationship with Skyss.

Purpose

The purpose of processing your personal data is to enable Skyss to process your customer service enquiry.

Basis for processing

Skyss needs a legal basis for processing your personal data in connection with a customer service enquiry.

Our legal basis is the contract we have with you as a customer, see Article 6 (1) (b) of the General Data Protection Regulation (GDPR).

Which types of personal data does Skyss process?

If you contact Skyss via our contact form on skyss.no, e-mail, letter or phone, the following types of personal data may be processed: 

Customer information, such as name, address, telephone number, e-mail address, mailing address, bank account number (for reimbursement) and your enquiry.

Insofar as it is relevant for your enquiry, your Skyss Card ID number, travel data and/or sales data may be processed. The term travel data means, for example, which zones you have travelled in, which ticket type you purchased, etc. The term sales data means information about the sale of a ticket, prepayment, amount paid, etc.

Sources of personal data

All personal data processed in connection with your customer service enquiry will be collected from you.         

Disclosure to third parties

Skyss will not disclose your personal data to third parties, unless there is a legal basis for such disclosure, such as a court order or written order from the prosecuting authorities.  

Access to personal data/data processor

The personal data about you we are processing will be available to authorized personnel within Skyss on a need-to-know basis.

Skyss also uses data processors to collect, store and otherwise process personal data on Skyss’ behalf. In these cases, Skyss will establish data processing agreements to ensure that your personal data is processed in accordance with relevant privacy laws. One example of a data processor is the provider of the service used to manage Skyss’ website/contact forms.

Storage and erasure

Your personal data is stored for the duration of your term of appeal to the Transport Appeals Board (Transportklagenemnda). Customer information and a description of your enquiry is stored in the customer service system for 365 days after the final activity on your enquiry. After 365 days, your enquity will be deleted and/or anonymized.

Skyss does not store information about you if you contact us through social media.

All data stored by Skyss is stored within the EU/EEA.

Data security

Skyss has implemented information security measures and internal procedures to verify that no personal data is made available to unauthorized parties or used for other purposes than those described in this privacy policy.

Your rights and Skyss

You have the right to be informed about Skyss’ processing of your personal data. This privacy policy is therefore available on our website at all times.

Right to access

You have the right to request information about how Skyss processes your personal data, including information about why Skyss is processing your personal data, where we collected your personal data from, which categories of personal data Skyss is processing, who Skyss discloses your personal data to, and how long Skyss stores your personal data.

All of the information mentioned above can be found in this privacy policy. You may also request a copy of the personal data about you Skyss is processing.

 

Right to rectification

You have the right to demand that incorrect or incomplete personal data be corrected or supplemented.

Right to erasure

You have the right to demand that Skyss delete your personal data, provided certain conditions are met, e.g. if Skyss has processed your personal data unlawfully or stored your data longer than necessary.

Right to restricted processing

You have the right to demand that the processing of your personal data be restricted if you object to the accuracy of the personal data, the legal basis for or necessity of the processing, and if you have objected to processing and Skyss has accepted your objection.

Processing will be limited from the time your objection is registered and for as long Skyss needs to assess your objection. If processing is limited, Skyss is only permitted to store limited personal data, and any and all other processing would be subject to your consent. This shall apply under all circumstances unless Skyss has an obligation to process your personal data for legal reasons, to protect the interests of another party, or if the processing is of public interest.

Right to object

You have the right to object to the processing of your personal data if you believe Skyss has no legal basis for processing your data. In such cases, Skyss may only continue processing if Skyss can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms. Skyss may nevertheless process your personal data if Skyss is obligated by law to process your data, or if such processing is required to establish, exercise or defend a legal claim.

Right to data portability

You have the right to demand that any and all personal data you have provided to Skyss for processing based on your consent or to fulfil a contract to which you are a party, be sent to you in a structured, commonly used and machine-readable format. You also have the right to demand that Skyss transfer this data to another data controller.

Right to file complaint to the Norwegian Data Protection Authority

If Skyss’ response is not to your satisfaction, or you believe Skyss is processing your personal data in violation of relevant privacy laws, you may file a complaint with the Norwegian Data Protection Authority. Read more about the process here.

Contact information

If you have questions concerning Skyss’ processing of your personal data, or you would like to exercise your right to access, rectification, erasure, restricted processing or data portability, use the contact form found here.