Data Policy

1 Introduction

As a rule, the JFK concern, including the companies and data controllers listed in 1.1 below, hereafter “JFK”, “we”, “us” or “our”, processes the personal data as the data controller for administrative purposes regarding customer and supplier relations as well as that of our staff and crew.

It is our responsibility to protect the confidentiality, correctness and accessibility of the data of our customers, suppliers, sub-contractors, staff and crew, including their personal information. We take data protection very seriously and have taken the necessary technical and organizational steps to ensure that the handling of your personal data is in accordance with the provisions of the Data Protection Act.

1.1  Companies and data controllers in the JFK concern

As parts of the JFK concern, the following subsidiaries[1] handle your personal data in the role of data controller:

• EFHO PLC
• P/F Eystfelli Public limited liability company Ltd.
• G P S LLC
• Grønanes PLC
• J.F.K. Trol PLC
• JFK PLC
• JFK Seafood PLC
• Klakkur PLC
• Kósin PLC
• Kvikk PLC
• Meðalsbrekka PLC
• Miðdalsenni LLC
• Næraberg PLC
• Northern Fish Cold Storage PLC
• Polarstjørnan LLC

2 how we process your data

Below is a description of what information we process and the purpose of this processing, as well as the legal basis for processing on the individual level.

2.1  Job application

Purpose
In order for us to employ staff and crew, it is necessary for us to process job applications and to evaluate applicant competencies regarding specific or future positions on land or on board our ships.

Legal basis
The authorization for processing is based on our legitimate business interest in evaluating applications under the provisions of the Data Protection Act (section 8, part 1, number 6).

In some cases, applicants may give consent for us to keep the application for a limited period if a position should be available at a later point in time (section 8, part 1, number 1 in the Data Protection Act).

Data subjects
We register information about registered persons and other possible references the registered send us with their applications.

Categories of personal data
We process regular information that applicants send us, including their name, address, telephone number, and e-mail address, as well as other information that the persons registered send us, e.g. CV, diplomas, photos and other information.

Source
As a rule, the information is given by the applicant. In relation to the hiring process, we may search for publicly available information on the internet, including social media.

Data retention period
If the applicant is not offered employment, the data is kept for up to six months starting from the close of the year in which the applicant applied for a position. If the applicant gives consent for us to retain the data or if special conditions apply, we may keep the data for an extended period.

Third parties
As a rule, we do not pass personal data on to third parties, but we do use IT-service providers for data transfer and storage. We make sure that necessary agreements are in place with IT-service providers that ensure that personal data is handled in accordance with the Data Protection Act as well as with satisfactory data protection.

2.2  MANAGEMENT Of customer and supplier relations

Purpose
Handling personal data is necessary for us to manage customer and supplier relations, including selling our own goods as well as purchasing goods and services.

Legal basis
The authorization for processing is based on our legitimate business interest in managing customer and supplier relations under the provisions of the Data Protection Act (section 8, part 1, number 6).

Data subjects
Staff of customers and suppliers.

Categories of personal data
We process regular information, including names, telephone numbers, e-mail addresses, and other communication data of the staff of our customers and suppliers.

Source
Customers and their staff.

Data retention period
We keep the data for five years, counting from the end of the year in which we have supplied customers with goods or services. If special conditions apply, we may retain data for a shorter or longer period.

Third parties
As a rule, we do not pass personal data on to third parties, but we do use IT-service providers for data transfer and storage. We make sure that necessary agreements are in place with IT-service providers that ensure that personal data is handled in accordance with the Data Protection Act as well as with satisfactory data protection.

3 your rights

As the data subject, you have certain rights that we are obligated to comply with.

You may contact us and request to be informed about which data we process about you. Similarly, you have the right for inaccurate or incomplete data to be rectified. If you would like your personal data to be erased, that we restrict their processing, or you would like to exercise your right to data portability, or object to processing, you are welcome to contact us.

When we process your personal data based on your consent, you may withdraw your consent at any time. To do so, please contact us.

Send an e-mail to jfk@jfk.fo with the subject “I wish to exercise my rights as stated in the Data Protection Act”. We will then handle your case.

4 Changes in this data policy

We make ongoing revisions of this data policy to ascertain if it needs to be updated or adjusted.

The last update was made on 7^th July 2023.

5 Contact

If you would like to exercise your rights as described above, or if you have any questions about how we handle your personal data, or about this policy, you are welcome to contact us.

Kósarbrúgvin 3
710 Klaksvík
(+298) 409900
jfk@jfk.fo

6 complaints

If you would like to lodge a complaint about how your personal data is processed, please send us an e-mail to jfk@jfk.fo describing your case. We will handle your case and get back to you.

You also have the right to lodge a complaint with the Data Protection Authority regarding your rights as well as our handling of your personal data. For more information about how to lodge a complaint with the Data Protection Authority, please see their website www.dat.fo.

 

P/F= Public limited liability company Ltd.

Sp/F LLC Private limited liability company

[1] A subsidiary is a company that is more than 50% owned by a parent company or holding company.
Subsidiaries are separate and distinct legal entities from their parent companies.