PRIVACY POLICY
MEST is the data controller regarding the information that we collect and register about you. We emphasize that the information is processed in accordance with applicable legislation and our procedure. We will therefore describe our privacy policy and purpose of the data information we collect.
If you have any questions or doubts, you can contact us here:
MEST P/F
J.C. Svabosgøta 31
FO-100 Tórshavn
Tel 301100, e-mail: datavernd@mest.fo
Processing of personal data
All information that can be shown directly to you in any way is referred to as personal information. In order to communicate, make and keep agreements with you, we need to register and save certain information about you.
We process personal data in this context:
Inquiries about future cooperation
Customer communication
Supplier communication
Job applications and personnel matters
As a possible customer, we may need the following information about you:
Name
Address
E-mail address
Telephone number
The purpose of the information is:
Manage the communication between us
Possible future cooperation or purchase
Other communications
Authorization for collection of information:
The authorized interest of the company, which is to provide you/the company with a service, makes it necessary to process this personal information, and the company assures that the authorized interests do not prejudge the rights of the data subject.
We store information as long as it is appropriate for the person to have it, but no longer than what the law requires.
We ensure that the information is deleted when it is no longer needed.
When you become a customer with us
We need this information about you when you are a customer with us:
Name
Address
E-mail:
Telephone number
Country of registration
Possible bank details
The information is collected for the following purposes:
Administration of your purchases and deliveries to you
Administration of communication between us and you
Authorization for collection of information:
Data Protection Act §8 subsection 1 no. 2, which relates to complying with an agreement
The information is stored as long as permitted by law, and we delete it when we no longer need it. The period of time depends on what information is involved and why it is being stored. Normally, information relating to customers is deleted when it is assessed that the communication is no longer relevant. Information about customers is ultimately deleted 5 years after customer communication has ended.
Suppliers and business partners
If you wish to become a supplier or business partner with us, it is necessary for us to have the following personal information
about you:
Name
Address
E-mail:
Telephone number
Company registration number
Bank informations
Personal information about suppliers and business partners is collected for the following purposes:
To process our purchases
Administration of your contact with us.
All informations are collected based on these legislations:
Data Protection Act §8 subsection 1 no. 2, which relates to complying with an agreement
The information is stored as long as permitted by law, and we delete it when we no longer need it. The period of time depends on what information is involved and why it is being stored. Normally, information relating to customers is deleted when it is assessed that the communication is no longer relevant. Information about customers is ultimately deleted 5 years after customer communication has ended.
Job applications/applicants - When we receive a job application and attachments, the documents are read by the relevant persons in order to respond and assess the content in connection with a particular job. Our legal basis for processing the application is legal interests. Persons who are in the employment process have access to the application and attachments. These will not be forwarded to others outside the company.
Applications and attachments are stored until the right applicant has been found and the employment process has ended. After this, the application and attachments will be deleted if the person is not employed.
When it comes to unsolicited applications and no job is available, either rejection is given immediately and the application deleted, or the application and attachments are stored for a maximum of 6 months. If the application and attachments are stored for more than 6 months, consent must be sought from the applicant.
We have taken sufficient technical and administrative measures to ensure that your information is not accidentally or illegally deleted, published, lost, devalued, or that someone gets hold of it, is misused in any way, or is in any way processed in contrary to the law. The data controller ensures that the processing can only be processed when all data security rules according to § 7 of the Data Security Act have been met.
The company's information resources are protected by a firewall
Malware control is added. Anti malware systems are updated continuously.
The company's information resources is continuously backed up and continuously examined.
Access to personal information requires a special user ID and personal password.
Data minimization We only collect and store personal data that is necessary in connection with fulfilling our stated purposes. In addition, it may be legislated what kind of data is necessary to obtain and store in connection with our trading activities. The different areas of personal data that we process are determined by the need to fulfill an agreement or other legal obligation.
Updated data - Our service is based on your data being correct and up-to-date, and we ask you to inform us of significant changes in your data. You can therefore use the contact information below and notify us of possible changes, and we will ensure that your personal data is updated. If we ourselves discover that the data is incorrect, we will update the information.
Disclosure of information
We use third parties to store and process data, including suppliers of IT systems, banks, authorities such as Taks, etc. These only process information on our behalf, and we must not use it for our own purposes. In some cases, information is passed on to banks, lawyers, export companies, etc. We only use data processing systems from the EU that have the necessary security measures in place, in addition to companies in countries that have satisfactory data security. MEST has a Facebook page and we refer to Facebook's privacy policy.
Your rights
You have the right at any time to be informed about which data we process about you, where it comes from and what we use it for. You can also find out how long we store your personal data and find out who gets data about you. In the understanding that we pass on data in the Faroe Islands and abroad.
If you ask for it, we can disclose/give you data that processes you. Permission can therefore be limited, whether the privacy of others must be protected, in the case of trade secrets, or restriction of rights.
If you are of the opinion that personal data processing you is incorrect, you have rights to have it corrected. You must contact us and inform us of where the error is and how it can be corrected.
We ask that you be specific about your requests for correction, otherwise it may be difficult to get them corrected and in some cases lead to us not being able to correct them.
In some cases, we are obliged to delete your personal data. It is e.g. if you withdraw your consent. If you are of the opinion that your data is no longer necessary in connection with the purpose for which we collected it, you can ask to have it deleted. You can also contact us if you believe that your personal data is being processed against the law or other legal agreements.
You have the right to submit a complaint to the data inspectorate (www.dat.fo/)
Dátueftirlitið
Postboks 300
FO-110 Tórshavn
Tlf.: (+298) 309100
Teldupostur: dat@dat.foYou have the right to refuse our processing of your personal data. You can also refuse that we pass on your data for marketing. You can use our information on top, to submit your complaint. If your complaint is accepted, we will stop the processing of your personal data.
You have the option of making use of data portability if you want your personal data to be moved to another data controller or processor.
We delete your personal data when it is no longer necessary for the purpose for which it was intended. When you contact us with a request to correct or delete your personal data, we check whether you meet the conditions before we carry out the corrections or delete the data immediately.
You can use your rights by contacting us. Our contact information can be seen at the top.