Skanpass is an access and ticketing system specifically designed to maintain flow and control of traffic in private and/or restricted areas where payment is required for access or other permissions related to the area.
The purpose of processing personal information in Skanpass is as follows:
- To provide the visitor with a tool to pay for his stay or to get other permissions related to the privately-owned area.
- To provide landowners with a tool for collecting and managing payments from visitors in their area.
Personal information about our users will be primarily used to manage the customer relationship, including communicating with and following up with the customer, completing deliveries, or otherwise fulfilling agreements with the customer, billing the customer, handling complaints and disputes, as well as investigating customer satisfaction.
The landowner in the area where you traveled to (hereafter referred to as the "Controller") is responsible for the personal information collected for the Skanpass system upon entering the area and in connection with payment.
Skanpass is provided by WTW AS (hereafter referred to as the "data processor"), which processes your personal information on behalf of the data controller in accordance with a separate data processing agreement, ref. item 6.
2. Legal basis
It is voluntary for you to enter and use privately-owned areas, hence using the Skanpass solution.
Necessary to fulfill the agreement
Processing of your personal information is necessary in order to fulfill the agreement between you and the Controller as you choose to enter the privately-owned area. The Controller is responsible for ensuring that the required signage is set up in the appropriate areas before passing the toll gate so that you are adequately informed before driving.
3. Personal data
For this solution, the following general personal information about you is processed:
Vehicle registration number – The photo taken by the toll gate cameras contains information about the registration number on your vehicle. This information is further used to link payments to the relevant passing of the gate.
Sales documents – All sales documents are kept in accordance with the Norwegian Bookkeeping Act. The travel information stored in your payment history is only retrieved as personal information when initiated by you (the registerant), for example by complaint, or in other instances where it is necessary to go into all details related to a particular purchase.
Payment method – Skanpass keeps track of which payment method has been used to pay for each passing. This is related to the sales documentation and is amongst other things necessary in order to generate all required info on a receipt. It is also a prerequisite to ensure the customers rights to a refund. When paying by credit card the only info stored is a standard credit card mask. This consists of the six first and the last four numbers of your card, together with expiration date.
Mobile number – Your phone number will be transferred to your mobile operator´s payment company, Strex, if you wish to pay by phone bill.
SMS history – If you choose to pay via code word on SMS, the message history is stored into the document of payments.
Name – If you purchase a product associated with an individual.
Email address – If you choose to receive receipt by email or purchase a product associated with an individual.
Technical information – When using Skanpass.com, your IP address, timing of request, browser, platform type, as well as the version number, including language selection is stored into an application log. This information is required for the solution to work on a given platform and is stored to ensure that the service is functioning as intended. This also gives us information that is necessary to solve the problem if an error occurs.
Information used for statistics is in an unidentified form and therefore cannot be linked to a user. Statistics are used to improve and to further develop services offered to our customers. Examples of what the statistics provide is how many people visit different locations at what time, and the amount of payments per payment option. The travel information stored in your sales document will not be used with personal information to produce statistics.
6. Data Processor
7. Other data processors associated with Skanpass
The image taken at the toll gate/checkpoint is processed by the system provider of the image recognition system, which collects the registration number on the passing vehicle. The Image Recognition System Provider is an independent data processor for such information based on agreement with the Coordinator.
If you do not pay via credit card on web, SMS or payment kiosk within 48 hours of passing the toll gate, you will receive an invoice by mail. If payment is made via invoice, information with your registration number is sent to the billing company.
The personal data stored on Skanpass.com is not processed in any system belonging to other subcontractors other than WTW and the payment service(s) you have chosen to use.
8. Sources of personal data
If payment for passing toll gate is completed via invoice, information from toll gate is forwarded to the billing company to ensure the correct billing address. All other personal information processed in connection with Skanpass is filed or generated by yourself.
9. Access to personal data
10. Rights and requests for information
- gain access to the personal data being processed,
- claim that incorrect personal information be corrected or removed,
- receive a copy of the personal data that you have disclosed and transfer it to another data controller (data portability),
- contact the data controller if you wish to provide feedback or ask questions about the processing of your personal data,
- complain directly to the Norwegian Data Protection Authority if you feel that the processing of your personal data is in breach of prevailing legislation.
- the personal information that you have provided in your profile can always be corrected or deleted via Skanpass.com
11. Storage and deletion
Photo of vehicle registration number – Photos are stored in the system until your payment is approved.
Transaction history and sales documents - All sales documents are kept for 5 years after the end of the accounting year, in accordance with the Norwegian Bookkeeping Act and Regulations. If you have established a user in Skanpass, you can access all transaction history associated with your user for the last 20 months.
Technical information and application log - Various selections of the application log are kept for a sufficient amount of time to ensure that the service is functioning as intended, and that customers receive the service they are entitled to. As a rule, all application logs will be deleted after 104 days. In the event of a complaint about a fault with service, for instance, the relevant application log may be kept for longer to enable it to monitor the time period in question and complete the processing of the complaint.
All access to the system via the web is encrypted. All data transfer internally between different components of the system are also encrypted. Access to retrieve data can only be done via APIs that are encrypted and secured with access keys. Access to data though the landowner´s administration interface is role-based with incident logging to ensure traceability.
13. Contact information
If you require further information about how your personal data is processed, please contact the software developer at firstname.lastname@example.org.