Privacy Policy – Discover Faroe Islands

Last updated: 28 April 2026

1. Introduction

This Privacy Policy explains how Discover Faroe Islands (ÍVF Jákup í Løðu) collects, uses, and protects your personal information when you visit our website or make a booking.

We value your privacy and are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Faroese law.

2. Data Controller

3. What Information We Collect

We collect only the data necessary to provide our services effectively, including:

• Contact information: name, email address, and phone number (for booking confirmations and customer support).
• Booking information: selected tours, dates, number of participants, and payment details.
• Technical data: IP address, browser type, device information, and cookies (for analytics and site functionality).
• Communications: emails or messages you send to us.

4. How We Use Your Data

We use your personal data to:

• Process and confirm your bookings.
• Communicate with you about your reservation.
• Transfer necessary information to the tour operator delivering your booked service.
• Improve our website, services, and marketing.
• Comply with tax, accounting, and legal obligations.

We do not sell, rent, or trade your personal information to any third parties.

5. Legal Basis for Processing

We process your data based on the following legal grounds under GDPR Article 6:

6. Data Sharing

We only share your information when necessary:

• Tour operators: with the local tour operator providing your booked experience, so they can deliver the service.
• Booking management: with Yith, our booking and reservation management platform.
• Payment processing: with Quickpay or other payment service providers, to process transactions securely.
• Analytics: with Google LLC (via Google Analytics), to understand how our website is used. Data may be transferred to the USA. Google LLC is certified under the EU–US Data Privacy Framework.
• Public authorities: when required by applicable law.

All partners are contractually obligated to handle your data in accordance with GDPR and process it securely.

7. International Data Transfers

Some of our third-party service providers are based outside the European Economic Area (EEA) or the Faroe Islands. Where data is transferred internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or reliance on an adequacy decision or certification framework (e.g. the EU–US Data Privacy Framework for Google LLC).

8. Data Retention

We retain personal data only as long as necessary to fulfil our obligations:

You may request deletion of your data at any time, subject to any ongoing legal obligations that require us to retain it.

9. Cookies

Our website uses cookies and similar technologies to improve functionality, analyse usage, and support advertising. We use a consent management platform (CookieFirst) to obtain and record your consent before placing non-essential cookies.

Cookie categories used on this website:

• Necessary: Required for the website to function. No consent needed.
• Performance: Analytics tools (including Google Analytics) that help us understand how visitors use our site.
• Functional: Cookies that enable enhanced features such as embedded content and social sharing.
• Advertising/Tracking: Cookies set by advertising partners (including Google Ads) used for profiling and cross-website advertising campaigns.

You can review, adjust, or withdraw your cookie preferences at any time via the cookie settings link in the footer of our website.

10. Data Security

We use SSL encryption (HTTPS) and follow industry best practices to protect your data from loss, misuse, or unauthorised access. Access to personal information is limited to staff and partners who require it to deliver our services.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority as required by GDPR Article 33 and 34.

11. Your Rights

Under GDPR, you have the right to:

• Access your personal data and receive a copy of it.
• Correct inaccurate or incomplete data.
• Delete your data (“right to be forgotten”), where no legal obligation requires us to retain it.
• Restrict or object to certain types of processing, including processing based on legitimate interest.
• Data portability – receive your data in a structured, machine-readable format.
• Withdraw consent at any time (for marketing or non-essential cookies), without affecting the lawfulness of prior processing.
• Lodge a complaint with the Faroese Data Protection Authority (Datatilsynið) if you believe your rights have been violated.

To exercise any of these rights, please contact us at info@discoverfaroeislands.com.

12. Updates to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website, with the updated date shown at the top of this page. We encourage you to review this policy periodically.

13. Contact

If you have any questions about this Privacy Policy or how we process your personal data, please contact:

Discover Faroe Islands
ÍVF Jákup í Løðu
Smiðjuvegur 14, Faroe Islands
Email: info@discoverfaroeislands.com
Website: www.discoverfaroeislands.com