Conditions for processing of personal data
The processing of personal data in Norway is governed by a separate legislation – the Personal Data Act dated 14 April 2000 no. 31, including all related regulations. This set of regulations places requirements on the processing of personal data and safeguards the individual’s right to protection from inappropriate interference in an individual’s private life. At the same time, the legislation also allows for individuals to maintain control and an overview of personal information held by a company. Skyss complies with all frameworks and instructions from the Norwegian Data Inspectorate.
Collection and use of personal data in Skyss
Your personal address information is gathered from the national registration office in accordance with section 9-3 of the Regulation relating to national registration. This information is only utilised when sending out initial information about the Skyss travelcard, and is not archived over time. Other information is gathered from individuals as cardholders when they register and make use of their Skyss travelcard.
Personal data collected and archived
Basic information is archived, such as name, date of birth, address and email address of holders of personal Skyss travelcards. Information is also archived on the type of travel product and validity for all personal travelcards (Periodic Travel, Single Travel, Cash Travel), and all payment history. We also aim to archive information on travel history which is generated when the travelcards are utilised. Travel history will be archived for all journeys made over the past 90 days. This includes information on the bus stop used when you boarded the bus, the date and time, the card number and the type of ticket and price applicable for the journey in question.
The purpose of processing personal data at Skyss
The purpose of processing personal data is to safeguard the contractual relationship with the individual holders of personal Skyss travelcards. This implies that we can charge you the correct price in relation to utilisation, issue various types of periodic travel products, replace travel products on lost cards and process any claims for refunds.
Distribution of personal data
Skyss does not distribute personal data to other parties with the exception of the registered individual cardholders. The public authorities have right of access pursuant to section 18 of the Personal Data Act. Anonymous travel information may be used for statistics and can therefore be distributed to others.
Security, access and storage of personal data
Skyss complies with the provisions of chapter 2 of the Personal Data Regulation– Data Security.
Right of access to own personal data
Pursuant to section 18 of the Personal Data Act, individuals have right of access to all personal information registered. If the information is not correct, incomplete or irrelevant, individuals have the right to have this rectified, supplemented or deleted at any given time. If you should wish access to your personal data at Skyss, please contact Skyss in writing (ref. form or contact our customer centre). The unit responsible for processing personal data is Hordaland county authority, Skyss, and you should send the form to Skyss, P.O. Box 7900, NO-5020 Bergen. Skyss will reply in writing to such requests within a period of 30 days. Replies will be sent to the address registered by Skyss for the sender.