Molslinjen A/S

Below you can read more about how we process your personal data, and how you can defend your rights. You can always retrieve and print the Privacy Policy at the bottom of all our web pages via the “Privacy Policy” link.

1. Name and contact information of the data controller  

Molslinjen A/S as the data controller is responsible for registering and processing the personal data that we have received about you. Klaus Hedegaard, Head of IT, is responsible for Molslinjen A/S’s administration of personal data.

Our contact information is:

Molslinjen A/S, CVR no. 17 88 12 48, Færgevej 7A, DK-8000 Aarhus C, tel. +45 70 10 14 18, email: persondata@molslinjen.dk

For general inquiries about data protection and requests for information, please write to Molslinjen A/S's data protection team at persondata@molslinjen.dk with a precise indication of your inquiry and your contact information.

2. Purposes, categories of personal data and legal basis of our processing of your personal data  

We process your personal data for different purposes. For the sake of clarity, we will go through them one by one in the following:

2.1 Purchasing of tickets, trip passes and commuter travel cards  

When you purchase/book a ticket, possibly including meals, from Molslinjen A/S’s websites and apps, we collect the following general personal data about you:

• Email
• Tel. no.
• Postal code
• Country (based on telephone number)
• Number plate (optional)
• Staff ID card, i.e. staff ID card number and the name indicated on the card

For walking passengers on certain crossings, depending on the ticket type, we will also register whether you are travelling with children, and whether the ticket is a disability or pensioner ticket.

When you enter into a trip pass or commuter pass agreement with us, we may ask you for the following additional information:

• Name
• Address
• Company
• CVR number
• Contact
• Number plate (optional)
• BroBizz number

To enter into a commuter agreement on the Esbjerg-Fanø crossing, you are also required to state your gender and date of birth in order for us to validate your address.

The personal data collected in the individual case depends on the specific journey being booked.

Molslinjen A/S collects the information with the aim to perform our contract and thus to:

• Register your purchase
• Register purchases of trip passes
• Register purchases of trip passes for business
• Send the ticket reservation to your email address
• Make any subsequent changes to your ticket reservation

As a general rule, the legal basis for our processing of your personal data when you purchase tickets is Article 6(1)(b) GDPR, as the processing is necessary for the performance of a contract to which you are party.

Molslinjen A/S uses external data processors operating within the EU/EEA for the processing of personal data and for the operation, maintenance and development of Molslinjen A/S’s other systems.
Your personal data will not be disclosed to third parties without your specific consent, just as any data processing by an external data processor will be performed only according to instructions and under the supervision of Molslinjen A/S.

As a general rule, we will store your personal data relating to the purchase of tickets, trip passes and agreements from the time of the purchase and up to three years from the departure date booked by you.

Information about your number plate which you have given to us to facilitate ticket processing/check-in at our machines will be kept for three years from the departure date.

Name, sex and year of birth collected in accordance with Danish law and under a contract with the Danish state for all travellers on the Køge-Sassnitz, Køge-Rønne, Aarhus-Odden and Odden-Ebeltoft crossings will be deleted when the ferry arrives at the final destination, unless such data have also been given to Molslinjen A/S in another context such as for participation in competitions or for creation of a profile on Molslinjen A/S’ websites or app for quick check-in in connection with crossings for which the Danish state requires registration of names. Further details are available in the section on marketing.

As a general rule, the legal basis for our processing of the customer’s disability information provided when purchasing tickets is the legal basis for the processing of the customer’s consent under Article 9(2)(a) GDPR.  Disability information may be provided by telephone or email to the ticket office by the traveller, subject to the traveller’s consent to print the information on the ticket, if the traveller requires parking close to a lift or assistance due to a walking impairment. 

2.1.1 Specific terms on payment via Molslinjen A/S’s websites and apps  

Your bank and payment information (credit card information) will not be collected, processed or stored in our IT systems. Payment will only be processed in the payment service provider’s IT systems. The payment service provider is an independent data controller for the processing of your payment information.

We only use payment service providers that are certified under PCI DSS, which guarantees that they meet the strictest requirements for safe handling and storage of credit card information. PCI DSS is an abbreviation of ”Payment Card Industry Data Security Standard” and is based on the security software Visa AIS (Account Information Security) and MasterCard SDP (Site Data Protection).

We are currently using the following payment service provider for the processing of credit card payments:

Altapay A/S, CVR-nr. 31 87 25 96, Gyngemose Parkvej 50, 2860 Søborg

2.1.2 Specific terms on payment via Molslinjen A/S’s ticket offices  

Your bank and payment information (credit card information) will not be collected, processed or stored in our IT systems, regardless of whether you pay via our PCI DSS-approved payment terminals or the MOTO payment solution. Payment will only be processed in the payment service provider’s IT systems. The payment service provider is an independent data controller for the processing of your payment information.

We only use payment service providers that are certified under PCI DSS, which guarantees that they meet the strictest requirements for safe handling and storage of credit card information. PCI DSS is an abbreviation of ”Payment Card Industry Data Security Standard” and is based on the security software Visa AIS (Account Information Security) and MasterCard SDP (Site Data Protection).

We are currently using the following payment service provider for the processing of credit card payments in our ticket offices:

• Bambora Online A/S (MOTO solution), CVR no. 28 85 50 60, Alfred Nobels Vej 21 A, 1., DK-9220 Aalborg Øst.
• PayEx A/S, CVR no. 70 98 69 14, Kejsergade 2, DK-1155 Copenhagen

2.2 Customer analyses  

In order to improve our website and the user experience in connection with the purchase of tickets etc., we use your ticket number and email address for customer analyses. You may receive a request for your comments from us by email via, among others, Epinion and Analyse Danmark after you have purchased tickets from Molslinjen A/S. This processing is carried out for the purposes of our legitimate interests in providing the best possible service and targeting our marketing, cf. Article 6(1)(f) GDPR. If you do not wish to receive such requests, please contact us at kundeservice@molslinjen.dk.

Molslinjen A/S uses external data processors operating within the EU/EEA for the processing of personal data and for the operation, maintenance and development of Molslinjen A/S’s other systems.
Your personal data will not be disclosed to third parties without your specific consent, just as any data processing by an external data processor will be performed only according to instructions and under the supervision of Molslinjen A/S.

We will merge the replies and personal data you provide in the customer analysis with the other personal data about you in our database for use for customer profiling for marketing and statistics purposes, including:

• Replies to questions from the analyses
• Whether you travelled with or without children
• Whether you travelled alone or with others
• The purpose of your trip
• Gender
• Age group
• Location in the form of postal code and country

We store the personal data that we obtain for our customer analyses for three years.

2.3 Searches for lost property  

If you search for lost property via one of Molslinjen A/S’s websites and indicate your personal data for the purpose of postal delivery, we process the following general personal data about you in order to be able to meet your request and send you the items:

• Name
• Address
• Date of journey (optional)
• Tel. no. (optional)
• Email
• Ticket number (optional)
• Details about the lost object

The legal basis for the processing of your personal data in relation to searches for lost property via Molslinjen A/S’s websites is Article 6(1)(f) GDPR (legitimate interests).

As a general rule, we will store your personal data as long as necessary to achieve the purpose, i.e. until the lost property search has been closed.

2.4 Cookies  

On all Molslinjen A/S websites, we collect information about your visit to the website using cookies in accordance with the Danish Executive Order on Cookies. However, the use of cookies is subject to your consent, cf. Section 3 of the Executive Order.

We do this in order to optimise the website and its functionality, to increase user-friendliness on the website in connection with the booking of tickets and for targeted marketing.

Cookies are a standard technology that virtually all websites use. A cookie is a small text file that is saved on your computer. Among other things, it means that we can keep track of your ticket order. In addition, it gives us statistics that we use to improve our website for our users. Some browsers are set to accept cookies automatically, but you can change the settings so that cookies are not accepted. Doing so, however, means that websites belonging to Molslinjen A/S will not work optimally. Cookies also allow us to register whether you have visited our website before, or you are visiting for the first time.

We use Hotjar to help us understand our users’ needs to optimise the service and experience we offer. Hotjar is a technology service that gives us insights into our users’ experience (how much time they spend on which pages, which links they choose to click, what they do, what they do not like etc.), which we use to develop and maintain our service based on user feedback. Hotjar uses cookies and other technologies to collect data about how our users interact with our website and their devices. This covers the IP address of a device (processed during your session and saved in an anonymised format), the display size of the device, device type (unique device identifiers), browser data, geographical location (country only) and preferred language used on our website. Hotjar saves this information on our behalf in a pseudonymised user profile. Hotjar is contractually prohibited from selling any of the data collected on our behalf.

This processing is carried out for the purposes of our legitimate interests in providing the best possible service and targeting our marketing, cf. Article 6(1)(f) GDPR. If you do not wish to receive such requests, please contact us at kundeservice@molslinjen.dk

For more information about the cookies we use and how to disable them, see our cookie policy at our websites and in our apps.

2.5 Service announcements  

We process your name, email address and telephone number in order to be able to send you emails and texts with service announcements related to your purchase in accordance with Article 6(1)(b) and (f) GDPR. These include welcome aboard emails, which are emails containing information about the ferry and your purchase, texts regarding any departure changes and cancellations, emails giving you the option to change the ticket, and notices about any impending expiry of your trip pass.

Molslinjen A/S uses external data processors operating within the EU/EEA for the processing of personal data and for the operation, maintenance and development of Molslinjen A/S’s other systems.

Your personal data will not be disclosed to third parties without your specific consent, just as any data processing by an external data processor will be performed only according to instructions and under the supervision of Molslinjen A/S.

We store the personal data that we obtain for our service announcements for three years.

2.6 Marketing  

We only use your data for our own promotional purposes.

2.6.1 Newsletters  

We process your telephone number, email address and your other personal data registered in our systems, including address/postal code, the purpose of your trip and data from customer analyses and your purchases for the purpose of submitting relevant newsletters by email if you have signed up using one of your registration forms or when you purchased your ticket, cf. Article (6)(1)(a) GDPR and Section 10(1) of the Danish Marketing Practices Act. You will thus only receive newsletters from Molslinjen A/S if you have given your consent.

By signing up for newsletters, you give your permission for Molslinjen A/S to send you 1-2 weekly newsletters by email. We may send you more than 1-2 weekly emails in case of promotion campaigns. The newsletters contain offers, news and information about current campaigns for Molslinjen A/S’s product range and ferry lines. The newsletters may also contain information about our partners, but they will always be sent from MOLSLINJEN A/S, regarding, e.g., competitions, hotel discounts, information about local offers and travel inspiration for the final destinations, tourist information and tickets for the combined bus and ferry service, KOMBARDO EXPRESSEN.

You sign up for newsletters from each ferry line that we market, including MOLSLINJEN, BORNHOLMSLINJEN, LANGELANDSLINJEN, SAMSØLINJEN, FANØLINJEN, ALSLINJEN, ØRESUNDSLINJEN and ÖRESUNDSLINJEN, but the products and services that we market in the individual newsletters may cover all ferry lines.

Molslinjen A/S uses external data processors operating within the EU/EEA for the processing of personal data and for the operation, maintenance and development of Molslinjen A/S’s other systems.
Your personal data will not be disclosed to third parties without your specific consent, just as any data processing by an external data processor will be performed only according to instructions and under the supervision of Molslinjen A/S.

We store the information that we process for the purpose of our newsletters until you unsubscribe. After that time, your data will be deleted or depersonalised. Our records of your unsubscription and email address will continue to be stored in order for us to be able to comply with the law in relation to spam mail in connection with marketing of similar products.

Molslinjen A/S tracks how many and which people open its newsletters, when the newsletter is opened (date and time), which links are clicked on, and whether it takes place from a mobile device or a browser and an operative system. This information is used to analyse which articles the readers of our newsletters click on, and on this basis we prepare future newsletters.

Molslinjen A/S processes the information on the basis of our legitimate interest in being able to prepare future newsletters based on the information which has been collected, cf. Article 6(1)(f) of the General Data Protection Regulation (grounds of legitimate interest).

For further information about unsubscribing, please see below.

2.6.2 Marketing of similar products  

We process your name, email address, telephone number and other personal data registered in our systems for the purpose of sending you relevant information via email about ferry tickets and related services for the ferry line that you previously purchased tickets for, and about discount options with trip passes and commuter agreements in accordance with Article 6(1)(f) GDPR and Section 10(2) of the Danish Marketing Practices Act.

Molslinjen A/S uses external data processors operating within the EU/EEA for the processing of personal data and for the operation, maintenance and development of Molslinjen A/S’s other systems.
Your personal data will not be disclosed to third parties without your specific consent, just as any data processing by an external data processor will be performed only according to instructions and under the supervision of Molslinjen A/S.

We store the personal data that we obtain for the marketing of similar products for three years.

For further information about unsubscribing from marketing of similar products, please see below.

2.6.3 Remarketing in media based on your email address  

We process your email address and other personal data registered in our systems in connection with remarketing.

The purpose of the processing is marketing of information about our products and services.

The legal basis for our processing of your personal data in connection with remarketing is your subscription for our electronic marketing and newsletter, cf. Section 10(1) of the Danish Marketing Practices Act.

We disclose encrypted email addresses and other personal data registered in our systems from your purchases and newsletter subscriptions to Facebook, Instagram, LinkedIn and Google in order for these media to use the information for group targeted advertising of our products on Molslinjen A/S’s behalf.

Molslinjen A/S uses external data processors operating within the EU/EEA for the processing of personal data and for the operation, maintenance and development of Molslinjen A/S’s other systems.
Your personal data will not be disclosed to third parties without your specific consent, just as any data processing by an external data processor will be performed only according to instructions and under the supervision of Molslinjen A/S.

We store the personal data processed by us for remarketing purposes for three years.

2.6.4 Data processors  

Molslinjen A/S uses external data processors operating within the EU/EEA for the processing of personal data as well as for the operation, maintenance and development of Molslinjen A/S’s other systems.
Your personal data will not be disclosed to a third party without your specific consent, just as any data processing by an external data processor will only be performed according to instructions and under the supervision of Molslinjen A/S.

Molslinjen A/S only processes the data you provide to us in the form of purchase and travel history, online click and behaviour data in emails, on websites and social media, as well as data provided via customer analyses, questionnaires and forms. Your data is used for customer profiling in order to be able to target offers and communication to the individual customer by post, email or text and via remarketing on online media, cf. sections 2.6.1 to 2.6.3 of our Privacy Policy.

Your data are also used to improve our products and services as a major supplier of traffic infrastructure services in Denmark, based on depersonalised data in our analysis systems, and to support our overall marketing.

We update the data when new personal data are registered and when personal data are depersonalised.

2.6.5 Unsubscribing from emails and marketing of similar products  

You can always easily unsubscribe from our newsletter and marketing of similar products. This can be done either by using the link at the bottom of the emails you receive, or you can write to us at kundeservice@molslinjen.dk if you no longer wish to receive emails from us. Please state your email address and the ferry line that you want to unsubscribe from. Please note that it may take up to 48 hours from clicking the unsubscribe link before the cancellation takes effect in all of our systems. If you contact customer service, it may take a longer time to process your request, depending on holiday periods etc.

You must unsubscribe separately from each of the ferries that we promote, including MOLSLINJEN, BORNHOLMSLINJEN, LANGELANDSLINJEN, SAMSØLINJEN, FANØLINJEN and ALSLINJEN. If you are receiving newsletters from several of the aforementioned ferry lines at the time of unsubscription, you will continue to receive newsletters from the ferry line(s) for which you have not unsubscribed.

Our records of your unsubscription and email address will continue to be stored in order for us to be able to comply with the law in relation to spam mail in connection with marketing of similar products.

3. Your rights  

You have certain rights under the GDPR in terms of our processing of your personal data.

Objection

You have the right at any time to object, on grounds relating to your personal situation, to the processing of your personal data which is based on Article 6(1)(f) GDPR pursuant to Article 21 GDPR.

You can also object to the processing of your information for direct marketing.

If you object, we will no longer process your personal data, unless we can prove that there are mandatory reasons for the processing that merit protection and that outweigh your interests, rights and freedoms, or if the processing is used to make legal claims, or to exercise or defend them. This also applies to profiling based on these provisions.

Other rights

• Information: (You have the right to know how we process your personal data).
• Access: (You have a right of access to the information that we process about you as well as certain other information).
• Rectification: (You have the right to have inaccurate personal data concerning you rectified). 
• Erasure: (In special cases, you have the right to have personal data about you erased before our general time of erasure).
• Restriction of processing: (In certain cases, you have the right to have the processing of your personal data restricted).
• Data portability: (In certain cases, you are entitled to receive your personal data in a structured, commonly used and machine-readable format and to transmit those data to another controller without hindrance).
• Complaints to the Danish Data Protection Agency: (You have the right to complain to the Danish Data Protection Agency if you are dissatisfied with our processing of your personal data. You will find the Agency’s contact information at www.datatilsynet.dk).

 

For further information about your rights, see the Danish Data Protection Agency's guidance on the rights of data subjects at www.datatilsynet.dk.

Contact Molslinjen A/S How to exercise your rights

To exercise any of these rights please contact Molslinjen A/S’s data protection team at persondata@molslinjen.dk.

We will consider your request without charge immediately and in accordance with the law and will inform you of the steps that we have taken.

4. Updates and changes  

This Privacy Policy is subject to change if the factual or legal situation changes. You should always read the Privacy Policy before using our offers to ensure that you are up-to-date on any changes or updates.

Status as at: 04.05.2023