- Vi har udfordringer med vejret i dag
| |
| |
| |
| |
| |
| |
| |
This Privacy Policy explains how Alsie Express A/S processes personal data when you use our website, booking solutions, Alsie Express app, customer account, Rejs Mere products, interline booking services, customer service, newsletter, or travel with us.
The data controller is generally:
Alsie Express A/S
CVR no. 10225442
Lufthavnsvej 3
6400 Sønderborg
Denmark
Email: support@alsieexpress.dk
Phone: +45 88 81 11 11
Alsie Express flights are operated by Air Alsie A/S. In connection with the operational performance of a flight, Air Alsie may process necessary passenger information as an independent data controller.
Other airlines, airports, authorities and certain other recipients may also act as independent data controllers in relation to their own processing.
Depending on the services you use, we may process:
name
address
email address
telephone number
date of birth and age
gender and title, where necessary
booking reference and ticket number
flights, routes and travel dates
ticket and fare type
payment and invoicing information
baggage information
check-in and boarding status
information about changes, cancellations and refunds
information about travelling companions
loyalty, discount and multi-trip card information
passport, nationality and travel document information where necessary or required by law
special service codes and assistance requirements.
If you create an account, we may process:
name
email address
user ID
authentication and login information
linked login providers
account settings
booking history
loyalty and Rejs Mere information
technical information about your use of the app.
We may process:
contact information
booking and travel information
correspondence
documentation and attachments
complaint information
EU261 claims
baggage cases
refunds
other customer enquiries.
Depending on your cookie consent, we may process:
IP address
browser and device information
operating system
visit and time data
pages and functions you use
clicks and other interactions
referring website
cookie and online identifiers
analytics, performance and diagnostic data.
We only process personal data where we have a lawful basis.
| Purpose | Legal basis |
|---|---|
| Searching for and booking flights | GDPR Article 6(1)(b) – performance of a contract or steps taken prior to entering into a contract |
| Managing bookings and tickets | GDPR Article 6(1)(b) |
| Check-in, boarding, baggage and performance of the journey | GDPR Article 6(1)(b) and, where relevant, Article 6(1)(c) |
| Payment and refunds | GDPR Article 6(1)(b) |
| Accounting and documentation requirements | GDPR Article 6(1)(c) |
| Compliance with aviation, security, immigration, API and PNR requirements | GDPR Article 6(1)(c) |
| Customer service | GDPR Article 6(1)(b) and/or Article 6(1)(f) |
| Complaints and legal claims | GDPR Article 6(1)(f) |
| Prevention of misuse, fraud and security incidents | GDPR Article 6(1)(f) |
| Customer account and app login | GDPR Article 6(1)(b) |
| Facebook Login | GDPR Article 6(1)(b) |
| Newsletters and electronic marketing | GDPR Article 6(1)(a) – consent |
| Analytics and statistical technologies requiring consent | GDPR Article 6(1)(a) |
| Marketing cookies and targeting | GDPR Article 6(1)(a) |
| Technical security logs and strictly necessary cookies | GDPR Article 6(1)(f) and applicable rules on strictly necessary technologies |
Where we rely on GDPR Article 6(1)(f), we have assessed our legitimate interests against the interests and rights of the data subject.
If you request special assistance in connection with a journey, it may be necessary to process information that can reveal health-related information.
This may include, for example:
wheelchair assistance
mobility limitations
medical needs
other special assistance.
Where such information constitutes special category personal data, we only process it where both a lawful basis under GDPR Article 6 and an applicable exception under GDPR Article 9 are available.
Where processing is based on information you voluntarily provide in order to receive special assistance, the basis will normally be your explicit consent, cf. GDPR Article 9(2)(a).
In emergency situations, processing may also take place where necessary to protect your or another person’s vital interests, cf. GDPR Article 9(2)(c).
We limit the information to what is necessary to provide the relevant assistance.
Alsie Express uses InteliSys Aviation Systems and ameliaRES for, among other things:
bookings
ticket issuance
passenger administration
check-in
customer accounts
travel history
Rejs Mere products
operation of functions in the Alsie Express app.
InteliSys processes relevant information on our behalf in connection with these services.
InteliSys is based in Canada.
Alsie Express uses Frisbii as payment service provider.
When you pay for a journey or other service, the necessary payment information is processed by Frisbii and relevant banks, card networks and acquirers.
Alsie Express does not store your payment card details.
We only receive and retain information necessary to document and manage the payment, such as:
payment status
amount
currency
time of payment
transaction reference
information necessary for refunds and accounting.
When you purchase a journey through Alsie Express that is wholly or partly operated by another airline, your information must be shared with the companies necessary to search, book, issue and perform the journey.
We use, among others, Mystifly as a technology provider in connection with certain interline bookings.
Depending on the journey, the following information may be shared:
name
title and gender
date of birth
contact information
booking and ticket information
itinerary
loyalty information
baggage information
passport and travel document information where necessary
special service requirements where necessary.
The relevant airline will normally act as an independent data controller for the processing carried out in connection with its transport of you.
You can create an account or sign in using Facebook Login.
We request the following permissions from Facebook:
public_profileemail
Our implementation uses only the following information received from Facebook:
| Data we receive | What we use it for |
|---|---|
| Facebook user ID | Linking your Facebook Login to your Alsie Express account so you can sign in again |
| First and last name | Creating and pre-filling your Alsie Express account |
| Email address, if Facebook makes it available | Identifying your account and sending booking confirmations and service messages |
We do not retrieve or store your Facebook profile picture.
We do not request access to:
your friends list
posts
photos
likes
birthday
location.
We do not post to Facebook on your behalf.
Information received in connection with Facebook Login is not used for advertising, ad targeting or profiling, and we do not sell it.
This is separate from Meta Pixel and other marketing technologies used on our website, which are only used in accordance with your cookie consent.
If Facebook does not provide your email address, we ask you to enter an email address and verify it using a one-time code.
The relevant login information may be processed by:
InteliSys Aviation Systems – operation of the Alsie Express app
Google Firebase Authentication – authentication and user identification
Meta Platforms – provision of Facebook Login.
You can disconnect Facebook from your Alsie Express account using the linked accounts function in the app.
You can also revoke access via Facebook’s Apps and Websites settings.
If you select Delete Account in the Alsie Express app, your login account and the account information we have received through Facebook are deleted immediately.
This includes:
Facebook identity link
Facebook user ID
name
email address.
No grace period applies to these account details.
Deleting the app account does not necessarily result in deletion of information about previous journeys and payments where we remain legally required to retain that information or have another lawful basis for doing so.
You can request deletion of other information by contacting:
with the subject Account Deletion Request.
The Alsie Express app uses Google Firebase Authentication for authentication purposes.
Firebase may process:
user ID
email address
name
login provider
technical authentication information
information about account creation and login.
Firebase is used to ensure that the correct user is granted access to the correct account.
If you subscribe to the Alsie Express newsletter, we process:
name
email address
time and source of consent
documentation of consent
delivery and interaction information.
Alsie Express uses Benchmark Email to distribute newsletters.
We retain documentation of your consent.
You may withdraw your consent at any time using the unsubscribe link in our newsletters.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
After unsubscribing, we may retain limited information about the consent and unsubscribe event where necessary to document compliance with marketing laws.
Alsieexpress.dk uses Cookiebot as its consent management platform.
You can choose between different categories of cookies and change or withdraw your consent at any time.
We use technologies from, among others:
Google Analytics
Google Ads
Meta Pixel
Hotjar/Contentsquare
Microsoft Clarity
Benchmark Email
Cookiebot/Usercentrics.
Strictly necessary technologies are used for purposes such as:
security
navigation
session management
booking functionality
remembering your privacy choices.
These technologies do not necessarily require consent where they are strictly necessary to provide a service you have requested.
With your consent, we may use statistical and analytics tools to understand how our website is used, including Google Analytics, Hotjar/Contentsquare and Microsoft Clarity.
With your consent, we may use Google Ads and Meta Pixel for:
campaign measurement
attribution
remarketing
targeting and optimisation of advertising.
These technologies may enable the relevant providers to recognise your browser or device across services.
You can view the current and detailed list of cookies, providers, purposes and retention periods in the Cookiebot cookie declaration on alsieexpress.dk.
You can withdraw your consent to statistics and marketing at any time.
We generally receive information directly from you.
We may also receive information from:
a person making a booking on your behalf
your employer
travel agencies
tour operators
other airlines
distribution and booking systems
airports
ground handling companies
Facebook, if you use Facebook Login
relevant public authorities.
Where information is not obtained directly from you, we only process it for purposes relevant to the relevant booking, journey or service.
Where necessary, personal data may be shared with the following categories of recipients:
Air Alsie A/S
other airlines
InteliSys Aviation Systems
Mystifly
Frisbii
Google/Firebase
Meta
Benchmark Email
Cookiebot/Usercentrics
analytics and marketing providers
airports
ground handling companies
baggage and passenger handling providers
IT, hosting and security providers
banks, card networks and payment acquirers
travel agencies and distribution partners
public authorities
police authorities
customs and immigration authorities
Passenger Information Units (PIU/PNR units)
other authorities where we are legally required to disclose information.
We only disclose information that is relevant and necessary for the specific purpose.
As an airline, we are in certain circumstances legally required to provide passenger information to public authorities.
This may include Passenger Name Record data (PNR) and Advance Passenger Information (API).
The information may include:
name
contact information
itinerary
booking information
ticket information
payment-related booking information
check-in status
baggage
date of birth
gender
nationality
passport and travel document information.
Information may be disclosed to Danish or foreign Passenger Information Units (PIUs), police, customs, immigration or other competent authorities where required by applicable law for the relevant flight.
The legal basis for Alsie Express’ disclosure is GDPR Article 6(1)(c) – compliance with a legal obligation.
Once received by a public authority, that authority is responsible for its own further processing and retention of the data.
Some of our service providers or their sub-processors may process personal data outside the EU/EEA.
This may, for example, be relevant in relation to:
InteliSys
Meta
Benchmark Email
Mystifly
certain airlines and travel providers
authorities in countries to which you travel.
Where the GDPR requires a separate transfer mechanism, we ensure that an appropriate lawful mechanism is used.
This may include:
an adequacy decision by the European Commission
the EU-U.S. Data Privacy Framework where the specific U.S. recipient is certified
the European Commission’s Standard Contractual Clauses (SCCs)
other transfer mechanisms permitted under the GDPR.
Where Standard Contractual Clauses are used, we assess, where relevant, whether supplementary safeguards are required.
You may contact us if you would like more information about the transfer mechanism applicable to a specific processing activity.
We do not retain identifiable personal data for longer than necessary for the purpose for which it was collected.
Information is retained for as long as necessary for:
performance of the journey
management of the booking
customer service
refunds and claims
documentation of transactions
statutory accounting and authority requirements.
Information that constitutes accounting material is retained for 5 years from the end of the financial year to which the material relates.
When the applicable retention period expires, the information is deleted or automatically anonymised, unless a specific legal obligation, pending matter or legal claim requires longer retention.
Login and profile information is deleted immediately when you delete your account.
Information that also forms part of a booking, accounting record or other legally required documentation may continue to be retained for that separate purpose.
We use your information for marketing until you withdraw your consent.
After this, we retain only limited documentation where necessary to demonstrate the consent and unsubscribe event.
The specific retention period for each cookie or identifier is stated in our Cookiebot cookie declaration.
When personal data is anonymised, we remove or alter the information in such a way that it can no longer reasonably be linked to you.
Anonymised information is no longer personal data.
We may use anonymised data for purposes such as:
statistics
route analysis
capacity planning
revenue management
analysis of booking patterns
product and service development.
Alsie Express does not make decisions which produce legal effects concerning you or similarly significantly affect you solely on the basis of automated processing or profiling, cf. GDPR Article 22.
We may use automated analyses and statistical models for purposes such as:
demand analysis
revenue management
capacity planning
marketing measurement.
These analyses are not used to make individual decisions about you of the kind covered by GDPR Article 22.
Children may travel as passengers with Alsie Express and may therefore be included in bookings and customer accounts.
There is no separate minimum age for creating an Alsie Express app account.
We only process information about children to the extent necessary to:
provide our services
administer a booking
perform a journey
ensure passenger safety
provide special assistance
comply with applicable law.
Where processing requires consent, the consent must be valid under the applicable data protection rules for the relevant processing.
Depending on the circumstances, you have the right to:
access the personal data we process about you
rectification of inaccurate information
erasure of personal data
restriction of processing
object to processing based on legitimate interests
data portability, where the applicable conditions are met
withdraw consent
lodge a complaint with a data protection authority.
A request for erasure does not mean that we can delete information that we are legally required to retain.
If you withdraw your consent, this does not affect the lawfulness of processing carried out before the withdrawal.
You can contact us at:
We respond to requests without undue delay and generally within the time limits set out in the GDPR.
We may request additional information to verify your identity where necessary to protect your personal data.
If you believe that our processing of your personal data is in breach of applicable data protection law, you are welcome to contact us first.
You also have the right to lodge a complaint with:
The Danish Data Protection Agency (Datatilsynet)
Carl Jacobsens Vej 35
2500 Valby
Denmark
Phone: +45 33 19 32 00
Email: dt@datatilsynet.dk
We use appropriate technical and organisational security measures based on the risks associated with the processing.
These include relevant measures concerning:
access control
authentication
data minimisation
secure communication
system and operational controls
backup and recovery
supplier management
incident management.
Access to personal data is limited to employees and service providers with a relevant business need.
We may update this Privacy Policy if our services, systems, suppliers or applicable laws change.
Where changes are material, we will provide appropriate notice.
The latest version will always be available on alsieexpress.dk.
The date at the top of this page shows when the Privacy Policy was last updated.
Questions about our processing of personal data or requests to exercise your rights can be sent to:
Alsie Express A/S
Lufthavnsvej 3
6400 Sønderborg
Denmark
support@alsieexpress.dk
+45 88 81 11 11