Privacy Policy

Purpose

When visiting our website, we collect information about visitors’ behavior to be able to deliver customized advertisements, optimize the website and user experience, only if you provide your consent in the cookie banner. This information is primarily statistical. If no consent is given, your personal data will only be processed through cookies that are essential for the basic functions of the website (technically necessary). The subsequent applies to the following websites: www.molslinjen.dk, www.bornholmslinjen.dk, www.samsoelinjen.dk, www.alslinjen.dk, www.langelandslinjen.dk, www.fanoelinjen.dk and www.kombardoexpressen.dk  

The information collected includes aggregated website traffic, referral sources, time of visit, most visited page, device, operating system, country and browser. In addition, IP addresses are collected in anonymized mode in order to determine the number of unique visitors to the website.

When processing the collected personal data for marketing, statistical or functional purposes, it is done on the basis of the consent given through the cookie banner, cf. Article 6(1)(a) of the General Data Protection Regulation. If no consent is given, your personal data will be processed via the necessary cookies on the basis of your legitimate interest in providing the content of the website, cf. Article 6(1)(f) of the General Data Protection Regulation.

We entrust the information to our data processors in connection with, for example, hosting the website. In some cases, your personal data is passed on to third-party providers through cookies. You can read more about this processing in our cookie policy.

The information collected is stored only for the purposes for which you give your explicit consent. You can read more about specific retention periods in our Cookie Policy.

The information collected is not used for profiling or making automated decisions.

Purchase of products and services (tickets, tour cards, commuter passes, etc.)

Purpose

The processing of personal data in connection with the purchase of products or services is intended to complete and administrate the purchasing process, including payment, delivery and invoicing. This happens, among other things, when you buy/book a ticket, refreshments or other products on MOLSLINJEN's websites and apps.

The information collected includes name, postcode, contact details, company, CVR number, number plate, BroBizz number, contact person, payment information, as well as any information about the purchased product or service.

Setting up an agreement for commuters on the Esbjerg-Fanø route also requires that you state your gender and date of birth for validation of residence.

Depending on the type of ticket, we will also register for foot passengers on certain ferry routes whether there are children on the journey, or if it is a handicap or a senior citizen ticket.

The processing of personal data takes place on the basis of the agreement between the company and the data subject, cf. Article 6(1)(b) of the General Data Protection Regulation (performance of contract).  Storage of the transaction information will subsequently be processed on the basis of the Danish Bookkeeping Act's obligations regarding transaction traces, cf. Article 6(1)(c) of the General Data Protection Regulation.

The legal basis for our processing of the customer's disability data when purchasing tickets is generally the legal basis for the processing under the customer's consent in accordance with Article 9(2)(a) of the General Data Protection Regulation.

MOLSLINJEN uses external data processors operating within the EU-and EEA for the processing of personal data, as well as for the operation, maintenance and development of MOLSLINJEN's other systems. Your personal data is not disclosed to third parties without your specific consent, just as any data processing carried out by an external data processor takes place in accordance with instructions and under the supervision of MOLSLINJEN.

We only use payment service providers that are certified according to PCI DSS and thus comply with the strictest requirements for the secure handling and storage of credit card information. PCI DSS is an abbreviation for "Payment Card Industry Data Security Standard" and is based on the Visa AIS (Account Information Security) and Mastercard SDP (Site Data Protection) security programs.

As a general rule, we store your personal data related to the purchase of tickets, tour cards and agreements from the time of purchase and up to 3 years after the booked departure date.

Name, gender and year of birth collected in accordance with Danish legislation and contract with the state, on all travellers on the routes Køge-Sassnitz, Køge-Rønne, Aarhus-Odden and Odden-Ebeltoft are deleted upon arrival of the ferry at the final destination, unless this information has also been provided to MOLSLINJEN in another context, e.g. by participation in the competition or by creating a profile on MOLSLINJEN's websites or app for quick check-in for crossings with a requirement from the state for name registration. In relation to this, please see the section on marketing.

Personal data necessary to meet legal requirements such as the Bookkeeping law is stored for up to 5 years.

Purpose

When contacting us through our contact forms or e-mail, we collect and process personal data in order to be able to return to the enquiry in question, including, for example, a search for lost property.

The information collected includes general contact information such as name, e-mail, reservation number, telephone and detailed message about the nature of the enquiry. In connection with a search for lost property, we also process your address, the date of your trip (voluntarily), and information about what you have lost. Only personal data provided by the person concerned is collected.

We process the collected personal data on the basis of the company's legitimate interest, cf. Article 6(1)(f) of the General Data Protection Regulation.

When contacting us through our contact forms, we do not disclose personal data to third parties, but we process it through our data processors.

The information is deleted or anonymized no later than 12 months after the last contact, unless the contact initiates a collaboration, customer relationship or other relationship of a similar nature.

The information collected is not used for profiling or to make automated decisions.

Purpose

When you create a user profile with Molslinjen, we process your personal data to give you access to a personal account where you can easily manage your bookings, save your preferences and access previous travel history.

When creating and using your user profile, we process the following information:

Identification information (name, email address, phone number)

Login information (username, password, IP address, and timestamp of login activity)

Booking history (past and upcoming trips)

Payment information (if you save payment methods for faster checkout)

Preferences (e.g., preferred routes, vehicle type)

The processing of your personal data takes place on the basis of Article 6(1)(b) of the General Data Protection Regulation, as the processing is necessary to be able to provide the services you request in connection with your user profile. In certain cases, we may also process information based on Article 6(1)(f) (our legitimate interest in improving our service and user-friendliness).

We do not disclose your personal data to third parties, but entrust the information to our data processors (IT suppliers), who help administrate and host the login functionality on the website.

Personal data filled out in connection with the creation of a profile is processed by MOLSLINJEN and affiliated companies for the purpose of ensuring a single login across routes operated by MOLSLINJEN and the other affiliated companies.

We ensure that all third parties treat your information confidentially and in accordance with applicable data protection laws.

Your information will be stored for as long as your user profile is active. If you delete your profile, or it has been inactive for more than 3 years, your information will be anonymized or deleted, unless we are legally obliged to store it for a longer period of time (e.g. the Bookkeeping law’s requirement for storing transaction data for 5 years).

The information collected is not used for profiling or making automated decisions.

Purpose

When signing up for our newsletter, we collect and process personal data to be able to send out emails with information about updates, new products and services or other news that you have opted into.

We also process your personal data in connection with sending out service announcements, including e-mails with information about the ferry and the purchase, text messages regarding any departure changes, e-mails with the possibility of changing the ticket and warning of imminent expiry of purchased clips on trip cards.

The information collected includes contact information such as name, phone number and email. Only personal data provided by the person concerned is collected.

We process the collected personal data in connection with newsletters based on your consent, cf. Article 6(1)(a) of the General Data Protection Regulation. This consent can be withdrawn at any time by writing to us or by unsubscribing at the bottom of the newsletter. If you withdraw your consent, documentation of the consent will be stored in accordance with the documentation obligation under the marketing rules, cf. Article 6(1)(c) of the General Data Protection Regulation.Molslinjen

We may also send you service messages that are relevant to you as a customer or partner. The data is processed on the basis of the performance of the contract, cf. Article 6(1)(b) of the General Data Protection Regulation.

When signing up for our newsletter, we do not disclose personal data to third parties, but we process it through our data processors.

The information is deleted or anonymized 24 months after withdrawal of consent or last received newsletter. The data will also be deleted after the same deletion period if we have not used the consent for 12 months.

The information collected is not used for profiling or making automated decisions.

Purpose

The purpose of the processing of personal data is to be able to provide targeted marketing, including sending relevant offers, newsletters and information about products and services that may be of interest to the recipient.

The personal data we process may include contact information, such as name, email and phone number, behavioral patterns, preferences, previous purchase history and interests that are relevant to our marketing efforts.

The processing of personal data for marketing purposes takes place on the basis of your consent when we contact you through direct marketing or through targeted marketing on other websites, cf. Article 6(1)(a) of the General Data Protection Regulation and Section 10(2) of the Marketing Practices Act. The consent is given in connection with the cookie banner, newsletter or other consent text.

In addition, we use certain information that you provided when purchasing a ferry ticket - including details such as age, postal code, ticket type, and vehicle registration number - to segment and target the marketing you receive so that the content is as relevant to you as possible. This processing is not carried out based on your consent, but on the grounds of our legitimate interest in being able to tailor and improve our marketing communications, in accordance with Article 6(1)(f) of the General Data Protection Regulation.

When we send relevant information via e-mail about ferry tickets and associated services for the ferry line for which you have previously purchased a ticket, as well as about discount opportunities with tour cards and commuter agreements, this is done on the basis of section 10(2) of the Marketing Practices Act.

Personal data may be shared with third-party vendors (data processors) who assist with marketing campaigns and analytics tools, including email platforms, social media platforms, and other digital advertising partners.

The personal data is stored for as long as necessary to fulfil the marketing purposes for which it was collected or until consent to processing is withdrawn. Upon withdrawal of consent, the information is deleted without undue delay, unless it is included as documentation of marketing consent. In this case, the data will be deleted no later than 24 months from the last use.

We use profiling to be able to deliver more relevant and targeted marketing. This is done by analyzing your preferences and behavior, such as previous purchases, which can help us customize our offerings. No automated decisions are made that can produce legal effects concerning you or similarly significantly affect you.

Purpose

When you visit our social media pages (e.g., Facebook, LinkedIn, Instagram), we collect information about your interaction with our profiles to understand how our content engages users, as well as to respond to inquiries. In addition, we may conduct social media campaigns for the purpose of marketing our products and services.

The information collected includes the name and corresponding personal data related to the data subject's user profile on the platform in question.

We process the collected personal data on the basis of the company's legitimate interest in responding to your inquiry, cf. Article 6(1)(f) of the General Data Protection Regulation. All marketing and collection of your personal data in this connection is based on your consent, cf. Article 6(1)(a) of the General Data Protection Regulation.

When we process your personal data in connection with our social media pages, your personal data has already been collected by social media in advance. Here, we assume joint data responsibility.

You can read more about the platform providers' processing of personal data in their privacy policies here:

• Facebook: https://www.facebook.com/privacy/explanation 

• Instagram: https://help.instagram.com/519522125107875 

• YouTube: https://policies.google.com/privacy?hl=da&gl=da 

• LinkedIn: https://www.linkedin.com/legal/privacy-policy?_l 

When we process your personal data in connection with campaigns and respond to your inquiries, we take on the role of data controller.

We share information with the social media platforms, which themselves act as data controllers in certain scenarios. Here, they have their own policies for the processing of personal data. We also entrust the information to our data processors, who assist with analysis and marketing activities.

Personal data collected via social media is stored for as long as necessary to fulfil the purpose of the processing. The information may be stored for a longer period of time in anonymized form for statistical and analytical purposes.

Purpose

We process your personal data as part of the recruitment process in order to be able to assess applicants for vacant positions in our company and to be able to contact you during the recruitment process.

The information we collect includes your contact information, such as name, email address, and phone number. In addition, we collect your application, CV and any attached documents, such as educational certificates, transcripts of grades, certifications and, depending on the position, your driver's license.

The processing of your personal data takes place on the basis of your application based on the applicant's legitimate interest in assessing and selecting candidates, which is also in the applicant's interest, cf. Article 6(1)(f) of the General Data Protection Regulation. If you consent to the storage of your personal data for more than 6 months, the processing will take place on the basis of Article 6(1)(a) of the General Data Protection Regulation.

Your personal data will not be disclosed to third parties without your consent but may be entrusted to our data processors who assist in the recruitment process, e.g. recruitment platforms or HR-systems.

Your information will be retained for up to 6 months after the end of the recruitment process, unless you have consented to longer storage for future job opportunities.

The information collected is not used for profiling or to make automated decisions.

Purpose

We use video surveillance on our premises to prevent crime, protect our employees, visitors and assets, and to document incidents in the event of theft, vandalism or other irregularities.

We process video recordings, which may contain images of people staying in monitored areas, as well as timestamps and location of the recording.

The processing of personal data via video surveillance is based on our legitimate interest in protecting our property, employees and visitors, cf. Article 6(1)(f) of the General Data Protection Regulation.

The collected video recordings are not disclosed to third parties, unless it is necessary in connection with the investigation of crime or if we are obliged to do so by law. Here, the information can be passed on to the relevant authorities. However, the information may be entrusted to our data processors, who assist in the storage and maintenance of the monitoring systems.

Video recordings are stored for up to 30 days, after which they are automatically deleted, unless there is a concrete reason to keep them for a longer period of time, for example as part of an ongoing investigation.

The information collected is not used for profiling or to make automated decisions.

Purpose

We use number plate recognition at the ferry berths to provide access to the ferry and to manage billing.

We process information about the car's number plate, the time of entry and exit from the recycling centre, as well as any information about the owner of the car, if it is necessary to charge for services.

In the case of invoicing, the processing may also be necessary for the performance of a contract and the fulfilment of our bookkeeping obligations, cf. Article 6(1)(b) and (c).

The information collected will not be disclosed to third parties unless it is necessary for the collection of fees or for law enforcement. The information may be entrusted to our data processors who assist in the administration and maintenance of the license plate recognition systems.

Information about number plates associated with invoicing is stored for the current plus 5 years.

The information collected is not used for profiling or making automated decisions.

Purpose

We collect and process personal data in connection with registration for competitions in order to administer your participation and possibly deliver prizes. The purpose is thus to ensure the correct handling of competitions in accordance with the established rules.

The information will be shared with our employees and possibly third parties who assist us with the administration of the competition, such as the competition partners or prize suppliers. The information will not be disclosed to others without your consent.

The processing of your personal data is based on your consent, cf. Article 6(1)(a) of the General Data Protection Regulation.

We will retain your personal data for the period necessary to administer the competition and deliver prizes. After the end of the competition, your information will be deleted, unless you consent to us storing it for a longer period of time for future competitions or marketing purposes, including signing up for our newsletter.

The information collected is not used for profiling or to make automated decisions.

Purpose

We process your personal data in connection with customer analysis. We do this to improve our website and the user experience in general, as well as to target our marketing.

You can decline such inquiries by contacting us at kundeservice@molslinjen.dk.

The information we collect includes your responses to the customer analysis, including information about whether the trip has included other people, the reason for the trip, gender, age group, and postcode and country.

We process your personal data on the basis of our legitimate interest in providing you with the best experience, cf. Article 6(1)(f) of the General Data Protection Regulation.

We entrust the information to our data processors in connection with the sending of questionnaires. Your personal data is not disclosed to third parties without your specific consent, just as any data processing by an external data processor takes place in accordance with instructions and under the supervision of MOLSLINJEN.

We store the information we collect in connection with our customer analyses for 3 years.

We use profiling to be able to deliver more relevant and targeted marketing. This is done by analyzing your preferences based on your response to the customer analysis. No automated decisions are made that can produce legal effects concerning you or similarly significantly affect you.

In some cases, it may be necessary to transfer your personal data to recipients in countries outside the European Union, including countries without equivalent data protection laws. These transfers will only take place when necessary for the purposes mentioned in this Privacy Statement or as required by applicable law. The transfers are made solely in continuation of the use of our data processors in order to be able to offer our services and products. 

We take appropriate measures to ensure that your personal data is adequately protected during such transfers. Your data will mainly be processed in countries where the Commission has taken an adequacy decision. If your data is transferred to third countries without an adequacy decision, standard contractual clauses approved by the European Commission will apply. You can contact us at for a copy of this.persondata@molslinjen.dk

If you wish to withdraw your consent or object to our processing of your personal data, please contact us at persondata@molslinjen.dk

Please note that withdrawing your consent does not affect the lawfulness of processing carried out prior to the withdrawal. It also does not affect the processing of your personal data based on other lawful grounds, such as compliance with legal obligations or pursuit of legitimate interests.

According to the General Data Protection Regulation, you have several rights in relation to our processing of information about you:

Right to see information (right of access): You have the right to access the information we process about you and a number of additional information.

Right to rectification (rectification): You have the right to have incorrect information about yourself corrected.

Right to erasure: In exceptional cases, you have the right to have information about you deleted before the time of our general deletion occurs.

Right to restriction of processing: In certain cases, you have the right to have the processing of your personal data restricted. If you have the right to have the processing restricted, we may in future only process the data – except for storage – with your consent, or for the purpose of establishing, exercising or defending legal claims, or for the protection of a person or important public interests.

Right to object: In certain cases, you have the right to object to our otherwise lawful processing of your personal data.

Finally, we are obliged to inform any recipient to whom the personal data has been disclosed of any rectification or erasure or restriction of processing, unless this proves impossible or is disproportionately difficult. We will inform you of who has received a copy of the personal data if you request it.

If you wish to exercise these rights, please contact us. See contact information above.

If you wish to lodge a complaint about our processing of personal data, please send an email with the details of your complaint to the email specified in this Privacy Policy. We will process the complaint and get back to you.

MolslinjenYou also have the right to complain to the Danish Data Protection Agency about the processing of your personal data.

For further information on how to complain to the Danish Data Protection Agency, we refer to the Danish Data Protection Agency's website www.datatilsynet.dk.

New format of the personal data policy and updating of it: 02-10-2025