Ferde has updated its processing of personal information in accordance with the EU General Data Protection Regulation which came into force in the summer of 2018. The GDPR is designed to be a common framework for data protection laws in the EU, as well as clarifying the rules on transparency around companies' processing of personal data. The new Norwegian privacy law will incorporate the new requirements.
The purpose of the Personal Data Actis to protect against the violation of privacy.
Privacy declaration
This declaration applies to Ferde AS.
The purpose of the declaration is to provide information about why and how we process your personal data, what information we process, who is responsible for the processing of your data, how we protect your privacy.
Why does Ferde process personal data?
Ferde is granted the right of collection of tolls by the Norwegian Public Roads Administration, which has the assignment from the Ministry of Transport and Communications. The right to collect tolls is included in section 27, first paragraph of the Road Act and Section 20 of the Issuer Regulations.
Ferde processes personal data on the legal basis of Article 6 (1) e of the GDPR to collect tolls from passages by vehicles through our toll stations. The basis for the processing of personal data is in Article 6 (1) e described as the processing is necessary perform a task in the public interest or exercise public authority imposed on the controller. The legal basis applies to all processing activities related to toll collection, and will also apply to all our suppliers.
In addition we also process personal data in order to meet the terms and conditions in our contract with our customers. We also process personal data collected through our website. This is to provide better service online.
Ferde also processes personal data in order to handle any inquiries submitted via our "Contact form” on our website www.ferde.no. The basis for processing follows from Article 6 (1) Letter a describing that the processing is legal as a result of the data subject has given consent to the processing of his or her personal data for one or more specific purposes.
Data controller at Ferde
The CEO of Ferde is responsible for ensuring that the company's processing of personal data takes place in accordance with applicable laws and regulations.
What are my rights as a registered customer?
As a registered customer you have the right to know what personal information we store and handle in our systems and you have the right to claim incorrect information corrected or supplemented. You also have the right to request to have your personal data disclosed or deleted. Deleting information assumes that it does not conflict with other laws, such as retention of accounting information.
For more information, see The Norwegian Data Protection Authority’s website: https://www.datatilsynet.no/en/
What information is collected?
In order to collect tolls, all vehicles passing Ferde's toll stations are registered. Vehicles with an registered agreement are registered with tag number and a picture of the vehicles registration number. Vehicles without an agreement are registered with video images of the vehicle's registration number. These images are stored in a central picture database, owned and operated by the Norwegian Public Roads Administration. Ferde AS can use these images for quality control of passages, the pictures are not stored in Ferde’s systems.
In order to provide the correct price, we register the time and place of passage and collect the vehicle's environmental characteristics from the Environmental Register owned by the Norwegian Public Roads Administration.
To send an invoice, we process information about the vehicle owner. We retrieve this information from the Motor Vehicle Register owned by the Norwegian Public Roads Administration. In both cases, we handle information as your name, address and date of birth.
Foreign vehicles without an agreement are billed through the Euro Parking Collection (EPC) which has an agreement with the Norwegian Public Roads Administration.
In order to make collection and handling efficient, we record payments, payment history, invoice history, agreement form and information related to customers support chat, phone and email inquiries.
To process applications for exemption on the basis of a parking permit for people with reduced mobility, we register a copy of the parking permit (sensitive personal information), name, address, e-mail address, registration number, telephone number, invoice number and tag number in Ferde's case processing system.
In order to prevent vandalism to our toll equipment, we have cameras mounted for surveillance. These cameras are focused towards central components of the equipment. The cameras might collect both passing objects and any occurrence of vandalism on Ferdes equipment. Because of this, the cameras may collect and handle personal information such as still pictures or video. The cameras are placed such that it identifying the car registration plate or any individual details are made difficult. The pictures from these cameras may also be used for quality assuring purposes by registering the number of passing vehicles and comparing these to the passing data for each toll station. Such activities will be limited in both frequency and duration.
In order to process inquiries submitted via our “Contact form” at www.ferde.no, the following personal data is registered: name, e-mail address, telephone number, registration number (optional) and invoice number (optional).
When you visit our webiste www.ferde.no, we register cookies and similar technologies (often called pixels). The cookies give us insight into the visitors' usage patterns, as well as how many visitors have visited the site. We also register the information submitted by the user.
Disclosure of personal data to third parties
In the work of collecting tolls, meeting contractual conditions, and providing websites and self-service solutions, Ferde employs subcontractors and partners. These may process your personal data on behalf of Ferde. To ensure that your personal information is not used for purposes other than those described above, Ferde enters into agreements with all its subcontractors and partners that ensure that the personal information is processed in accordance with the regulations and sets a clear framework for how the information can be processed.
In some cases, we are required by law to disclose your personal data, for example to law enforcement or tax authorities.
Securing the personal data secured
Access to personal data is granted only to persons with tasks that require this access. All systems have access control with personal ID and password. All changes and actions are traceable. Ferde has data processing agreements with anyone who processes personal information on behalf of Ferde.
Storage and deletion of store and delete your data
Personal data collected is stored for as long as the data controllers need it to collect tolls and process complaints, manage systems and compile aggregate statistics for tolls (statistics without personal data). Personal data that is subject to bookkeeping is stored in accordance with the Accounting Act § 13.
Passing information is deleted according to fixed criteria depending on whether the passage has been paid for or not. The passages are stored in the AutoPASS central system and operator system and are deleted in accordance with current rules laid down by the Norwegian Public Roads Administration. Information that is subject to bookkeeping is stored in accordance with the Accounting Act § 13.
Access, disclosure and deletion of personal data
If you wish to access the personal data Ferde holds about you, or would like to have information about you corrected, disclosed or deleted, please contact us via the contact form on our website.
Changes to our Privacy Policy
We may need to update the Privacy Policy over time. We do this if our operations and services develop, while also having to follow the data protection authority's rules. We encourage you to check regularly if there have been any updates on this page.
The right to complain
If you have experienced something that you believe is a violation of the regulations, you can send the Norwegian Data Protection Authority a written complaint.