Privacy Policy Hundadót.is
We respect you and your personal information. We want you to be informed in a simple way about how and why we collect, use, and store personal information about you, and what rights you have against us.
In our privacy statement, we answer the following questions:
- When and why do we collect information about you?
- What personal information do we collect about you?
- How do we use your personal information?
- Who do we share your personal information with?
- How do we ensure the security of your personal information?
- How long do we retain the information?
- your rights towards us?
- Will this privacy policy change?
1. When and why do we collect information about you?
We collect and store various personal information about our customers. Different personal information may be collected about you depending on whether you are doing business with the company yourself or whether you are acting on behalf of a legal entity in business with the company, such as a supplier. We collect this information so that we can provide the services that have been requested.
When you do business with us, we collect and maintain information related to your business history with us. We collect this information to provide you with an overview of your business with us and to enable us to offer you a more personalized service.
When you wish to be in contact with us and receive information (such as newsletters, targeted emails and promotional brochures) from us on a regular basis, you are asked to provide us with the necessary information. This depends on your choice.
Sometimes you are asked to provide us with additional information about yourself on an optional basis. This is information that we request because we believe it can help us provide you with better service. You are never required to provide such information unless you choose to do so.
When you use our web interface, we also collect personal information through cookies, IP addresses, and other information related to the device you are using (such as hardware type, operating system version, etc.). You can choose whether you prefer to provide us with this information.
2. What personal information do we collect about you?
The personal information we collect about you depends on what service you have requested or for what purpose you have contacted us. Information we collect includes:
- Your name, social security number, address, telephone number and email address.
- Credit card numbers, debit card numbers, account information or other banking-related information.
- Your business history with us, including what products and services you have purchased from us.
- Communications that you choose to have with us, such as emails, messages sent through a web interface, recorded phone calls, letters or other communications.
- Payment information/account transaction information – such as dates of payments made or received.
- Information about your use of our websites, including my pages. This information includes, among other things, when you visit the site, how long you use it, your intended location when using the site, and information about the device you use to access the site.
Mailing lists: If a customer registers for the Hundadót.is mailing list, the company will process information about the customer's email address and, if applicable, other information that the customer provides to the company, such as name, address and gender. This processing is based on the customer's consent, but they are allowed to withdraw their consent and unsubscribe from the company's mailing list at any time.
Customers: Hundadót.is may ask its customers for their ID number, email address, telephone number, address and further information to save in its customer system. The purpose of the processing is to be able to fulfill a contract that a customer makes with the company, such as being able to deliver purchased products, contact customers regarding products that are being repaired and for customers to be able to look up their purchases through "my pages". In this way, Hundadót.is can manage warranty certificates for sold products in its computer systems and employees can, at the request of customers, look up purchased products to answer questions and serve customers better. If you act on behalf of a partner of Hundadót.is, such as a supplier, contractor or customer who is a legal entity, Hundadót.is may process your contact information, such as name, telephone number and email address. Hundadót.is may also process communication history and, where applicable, account information. This processing is necessary for the company to be able to fulfill its obligations based on an agreement with the relevant partner. The company may also be required to process information based on legal obligations, such as accounting laws.
Marketing: Hundadót.is may use the personal information that customers have provided to the company to send them offers and advertisements based on this information. Such processing is based on the customers' informed consent.
Complaints and suggestions: If you send us a suggestion or complaint, Hundadót.is will generally process your contact information, such as name and email address, and the content of the complaint or suggestion you have chosen to make.
Scholarship applications: In connection with grant applications, Hundadót.is processes contact information, such as name, ID number, email address and telephone number, as well as other information sent to the company in such an application. This processing is carried out on the basis of your request to enter into a grant agreement with the company.
As a general rule, Hundadót.is collects personal information directly from customers or their representatives. However, information may also come from third parties. If personal information is collected from a third party, the company will endeavor to inform its customers of this.
Information covered by accounting laws is retained for 7 years from the end of the relevant fiscal year. Certain information may need to be retained longer, for example if it is likely that Hundadót.is will need to establish, exercise or defend legal claims. In such cases, the retention period will be based on the rules on the statute of limitations for claims.
3. How do we use your personal information?
We may use your personal information to:
- Provide you with the services or products you have requested.
- Process requests you have submitted to us.
- Offer you specific services on specific terms.
- Inform you about new products and services.
- Send you invoices for transactions with us or charge you for service and/or product purchases.
- Understand how you use our services and products, so we can better develop our service and product range.
- Answer questions you direct to us.
4. Who do we share your personal information with?
We may share information about you with the following parties:
- Authorities, such as governments, courts and law enforcement authorities
- Credit rating agencies and financial institutions
- Our subsidiaries
- Debt collection agencies
- Service companies that act on our behalf.
- Our experts such as lawyers, accountants and external consultants.
We only share information with third parties under a data processing agreement that provides for the processing and security of personal information, unless otherwise required by law. In the event of suspected fraudulent or unlawful conduct, we will share with the appropriate parties personal information that may be relevant for the purpose of protecting our interests, your interests and/or the interests of our customers.
In the event that we merge with another company and/or are acquired by other owners, the information may be transferred to the new company.
5. How do we ensure the security of your personal information?
Personal information is stored in approved access-controlled computer systems, ensuring that only those who need to have access to the data have it. Hundadót.is ensures that all general computer system protections are in place, updated and monitored regularly.
All computer equipment used to store personal information is from approved suppliers, and is monitored and updated regularly.
We follow a specific process and use approved software to delete all data and personal information from used devices that are handed over to us for resale or destruction, as well as devices that have been borrowed by customers. We point out that you can always ensure the security of your information by deleting it from devices before they are handed over to us.
Services are purchased from a recognized security company that regularly performs external vulnerability scans of all external services operated by Hundadót.is.
6. How long do we retain the information?
We will retain your transaction history for up to 4 years unless required or permitted by law. If the information is no longer needed or required by law to be deleted, the information will be anonymized and/or deleted.
7. Your rights towards us?
You have the right to receive information from us about how your personal information is used by us and what information we have about you. You also have the right to update information about you so that it is accurate, request corrections or have information about you deleted, provided that there is no longer a reason for us to keep it. Similarly, you can request that information about you be delivered, but to do so you need to fill out this form.
If you have any questions or comments regarding this Privacy Statement or our processing, or if you would like to complain about a possible violation of privacy laws, please contact us by sending us an email at personuvernd@hundadot.is. We will do our best to respond as quickly as possible.
You also always have the right to direct your complaint to the Icelandic Data Protection Authority in accordance with the applicable law on the protection of personal data and the processing of personal data, now Act No. 90/2018.
8. Will this privacy policy change?
This Privacy Policy may change over time, for example due to changes in laws and regulations or public requirements regarding us and the processing of personal information. We therefore encourage you to regularly check for updates, which we will post on our website.
Privacy Policy for Applicants Hundadót.is Slf.
Hundadót.is is committed to ensuring the reliability, confidentiality and security of applicants' personal information with the company. This Privacy Policy is intended to inform applicants about what personal information the company collects, how the company uses such personal information and who has access to the information.
This Privacy Policy applies to personal information relating to all current applicants to the Company. This Privacy Policy also refers to applicants as „you“ and the Company as „us“.
If you are unsure about how this Privacy Policy applies to you, please contact the Company's Privacy Officer for further information. Contact details are provided at the end of the Policy.
1. Purpose and legal obligation
Hundadót.is strives to comply with all applicable privacy legislation and this policy is based on Act No. 77/2000 on the Protection of Personal Information and the Processing of Personal Information ("„privacy law“"), with subsequent amendments.
2. What is personal data?
Personal data, as defined in this policy, is any information about an identified or identifiable individual, i.e. information that can be directly or indirectly attributed to a specific individual. Data that is non-personally identifiable is not considered personal data.
3. Personal information that Hundadót.is collects and processes
We collect and store various personal information about our applicants. Different personal information may be collected about different applicants, and the processing and collection of personal information may depend on the nature of the job.
The following are examples of information the company collects about applicants:
- contact information, such as name, social security number, address, telephone number and email address;
- gender;
- CV, references and information from job interviews;
- information about education, training and work experience;
- information about the contents of criminal records;
- information to prepare an employment contract in the event of employment, such as bank account, personal discount, union membership and pension fund;
- information about the next of kin;
In addition to the above information, the company may also collect and process other information that the applicant provides to the company themselves, such as links to personal information on social media, as well as information that the company needs for its operations.
As a general rule, the Company collects personal information directly from applicants. In cases where personal information is collected from a third party, the Company will endeavor to inform applicants of this.
4. Why do we collect personal information and on what basis?
We collect personal information about applicants primarily to be able to fulfill our obligations to assess the relevant application, based on legal authority/obligation or based on the legitimate interests of the company.
Information processed on the basis of application are necessary for the company to fulfill its obligations to applicants to assess their suitability to perform a specific job. Failure by applicants to provide the company with the necessary information may result in the company being unable to fulfill its obligations or assess the application and suitability of applicants for the company.
The company may also, in some cases, process personal data on the basis of legal obligation, such as labor laws and tax laws.
In cases where the collection and processing of personal data is based on your consent, you may always withdraw such consent. All communications in connection with such withdrawal or change of the content of consent should be directed to the Human Resources Manager.
The company is committed to ensuring that all processing of personal data about applicants is lawful, fair and transparent. Information will only be collected for specified, specific and legitimate purposes and that collection and processing will not go beyond what is necessary in relation to the purposes of the processing. Processing shall in all cases be adequate, relevant and limited to what is necessary in relation to the purposes of the processing.
5. Disclosure to third parties
The Company may share personal information about applicants with contractors and other third parties in connection with their work for the Company in connection with the application process. Personal information may also be shared with third parties who provide us with information technology services and other services related to processing and which are part of the Company's operations.
Third parties who provide us with services as described above may be located outside of Iceland. However, Hundadót.is will not transfer personal information outside of the European Economic Area unless permitted by applicable data protection legislation.
Personal information about you may be disclosed to third parties to the extent permitted or required by applicable law or regulation.
6. How is the security of personal information ensured?
The Company strives to take appropriate technical and organizational measures to protect personal data, with particular regard to its nature. Examples of such security measures include access controls to systems where information about you is stored. These measures are intended to protect personal data against accidental loss or alteration and against unauthorized access, copying, use or disclosure.
7. Retention of personal information
The Company will strive to retain personal information about you only for as long as necessary for the purposes of the processing, unless otherwise permitted or required by law.
The retention period for personal information regarding an application is three months unless a job is hired, in which case the retention period is specified in a procedure in the company's operations manual.
8. Your rights regarding the personal data processed by the company
You have the right to access and, in certain cases, a copy of the personal data we process about you, as well as information about the processing.
In certain circumstances, you may also have the right to request that personal information about you be erased or that its processing be restricted. You also have the right to have your personal information corrected if it is inaccurate or unreliable. It is therefore important that you notify us of any changes to the personal information you have provided to us in a timely manner.
In addition, you may have the right to a copy of the information you have provided to us in a computer-readable format, or for us to send it directly to a third party.
When we process your personal information based on our legitimate interests, you can object to that processing.
However, your rights set out above are not absolute. For example, laws or regulations may permit or require the Company to refuse your request to exercise these rights.
9. Inquiries and complaints to the Data Protection Authority
If you wish to exercise the rights described in Article 8 of these rules, or if you have any questions regarding these privacy rules or how we process your personal data, please contact the Human Resources Manager who will endeavour to answer your queries and advise you of your rights under these privacy rules.
If you are dissatisfied with the company's processing of personal information, you can send a complaint to the Icelandic Data Protection Authority (www.personuvernd.is).
10. Revision
The Company may from time to time amend this Privacy Policy in accordance with changes in applicable laws or regulations or due to changes in how the Company processes personal information. If changes are made to this Privacy Policy, applicants will be informed of the new version of the policy in a verifiable manner.
Any changes that may be made to the policy will take effect after the updated version has been published.
This privacy policy was established on August 4, 2021.