How Hýsa Referrals uses personal data. Valid from 11 October 2026.
Hýsa Sp/f, Heygsvegur 33, Tórshavn, Faroe Islands, is the data controller. Contact: hysa@hysa.fo.
| Data | Purpose | Legal basis | Kept |
|---|---|---|---|
| Name, email, phone (optional), where you stay or your property | Confirm purchases with the partner, pay cashback, send emails about it | Our agreement with you (the cashback terms) | As long as needed for bookkeeping, normally 5 years |
| Receipt photo, date and amount | Check the purchase, show it to the partner if a sale is questioned, prevent fraud, bookkeeping | Agreement; our legitimate interest in preventing misuse; legal bookkeeping duty | Photos are deleted automatically after 5 years; date and amount stay with the invoice records |
| Booking details from Hýsa's booking system (confirmation code, stay dates, home, name, email) | Give cashback only to Hýsa guests around their stay, and fill in your details for you | Our agreement with you; legitimate interest | Deleted one year after check-out |
| Clicks on partner links (time, browser type, an anonymous click id) | Register online bookings that came through Hýsa, statistics per partner and per home | Legitimate interest (commission and statistics) | As long as needed for invoicing and statistics |
| Anonymous page statistics: which of our pages were opened, where the visit came from (for example a link, Google or an email), phone or computer, browser language, the country of the network, active time on the page, which parts of the page were on screen, and what was tapped. A random visit id that only lives in the open browser tab. No name, email, cookie or IP address is stored | See how our pages are used so we can make them better, and which pages lead to purchases | Legitimate interest (improving the service) | 13 months |
| Chat on the website: your messages to the chat assistant | Answer your question. The answers are written by an AI service (Cloudflare Workers AI, or Anthropic's Claude) that receives the messages for this purpose only. The chat is kept in your browser tab and is not stored by us unless you send a ticket | Legitimate interest (customer service) | Not stored |
| Support tickets (“Talk to a person”): name, email, phone if you give it, your question and the chat before it | Answer you by email | Legitimate interest (customer service) | 2 years after the last message |
| Partner business contact and invoice details | Run the partnership and invoicing | Agreement; bookkeeping duty | As required for bookkeeping |
We do not sell personal data and do not use it for advertising.
We store a few small items on your device so the page works: your guest or booking link, your language, saved cashback codes and (for online bookings) a click id that the partner's website keeps for up to 30 days to report a booking made through Hýsa. We do not use advertising or tracking cookies. For the anonymous page statistics above, a random visit id is kept in the browser tab only (session storage) and disappears when you close it; if your browser sends “Do Not Track”, no statistics are sent. To see which of our ads work, our website may ask whether you accept cookies from Google (Google Ads and Google Analytics) and Meta (Facebook and Instagram). They are only used if you press Accept; then Google and Meta receive information about your visit and use their own cookies under their own privacy policies. You can change your choice with “Cookie settings” at the bottom of our website. These are never used on the personal guest pages. If you choose a language that we have not translated ourselves, the page uses Google Translate, and Google receives the page text and may set its own cookies. The map uses OpenStreetMap, which receives your IP address to load the map.
Some suppliers may process data outside the Faroe Islands and the EU/EEA. We use suppliers that protect data with standard contractual clauses or similar safeguards.
You can ask to see the data we have about you, have it corrected or deleted, restrict or object to its use, and receive it in a usable format. Some data must be kept for bookkeeping. Write to hysa@hysa.fo. You can complain to the Faroese Data Protection Authority (Dátueftirlitið).
We may update this policy. The date at the top shows the current version.
Hýsa Sp/f · Heygsvegur 33, Tórshavn, Faroe Islands · hysa@hysa.fo · Terms