Privacy policy
We respect you and your personal information. We want you to be informed in a simple and clear manner about how and why we collect, use, and store personal information about you, and what rights you have in relation to us.
In our privacy policy, we answer the following questions:
- When and why do we collect information about you?
- What personal information do we collect about you?
- How do we use your personal information?
- With whom do we share your personal information?
- How do we ensure the security of your personal information?
- How long do we retain the information?
- What are your rights in relation to us?
- Will this privacy policy change?
1. When and why do we collect information about you?
We collect and retain various personal information about our customers. Different personal information may be collected about you depending on whether you are personally doing business with the company or whether you are acting on behalf of a legal entity doing business with the company, such as a supplier. We collect this information so that we can provide the requested service.
When you do business with us, we collect and maintain information related to your transaction history with us. We collect this information to provide you with an overview of your transactions with us and to enable us to offer you more personalized service.
When you wish to stay in contact with us and receive information from us at regular intervals, such as newsletters, marketing emails, and promotional brochures, you will be asked to provide us with the necessary information. This is entirely your choice.
Sometimes you may be given the option to provide us with additional information about yourself. We request this information because we believe it may help us provide you with better service. You are never required to provide such information unless you choose to do so.
When you use our website, we also collect personal information through cookies, IP addresses, and other information related to the device you use, such as hardware type, operating system version, and similar information. You can choose whether you wish to provide us with this information.
2. What personal information do we collect about you?
The personal information we collect about you depends on the service you have requested or the purpose for which you have contacted us. Information we collect may include:
- Your name, identification number, address, telephone number, and email address.
- Credit card number, debit card number, account information, or other banking information.
- Your transaction history with us, including the products and services you have purchased from us.
- Communications you choose to have with us, such as emails, messages sent through the website, recorded telephone calls, letters, or other communications.
- Payment and account transaction information, such as dates of payments made or received.
- Information about your use of our websites, including My Pages. This information includes when you visit the site, how long you use it, your approximate location when using the site, and information about the device you use to access the site.
Mailing Lists: If a customer subscribes to the Hundadót.is mailing list, the company will process information about the customer's email address and, where applicable, other information provided by the customer, such as name, address, and gender. This processing is based on the customer's consent, which may be withdrawn at any time by unsubscribing from the company's mailing list.
Customers: Hundadót.is may ask its customers for their identification number, email address, telephone number, address, and additional information to store in its customer management system. The purpose of this processing is to fulfill a contract entered into between the customer and the company, such as delivering purchased products, contacting customers regarding products under repair, and allowing customers to look up their purchases through My Pages. In this way, Hundadót.is can maintain warranty records for products sold in its computer systems, and employees can, at the customer's request, look up purchased products to answer questions and provide better customer service. If you act on behalf of a Hundadót.is business partner, such as a supplier, contractor, or corporate customer, Hundadót.is may process your contact information, such as your name, telephone number, and email address. Hundadót.is may also process communication history and, where applicable, account information. This processing is necessary for the company to fulfill its obligations under a contract with the relevant business partner. The company may also be required to process information based on legal obligations, such as accounting laws.
Marketing: Hundadót.is may use personal information provided by customers to send them offers and advertisements based on that information. Such processing is based on the informed consent of customers.
Complaints and Feedback: If you send us feedback or a complaint, Hundadót.is will generally process your contact information, such as your name and email address, as well as the content of the complaint or feedback you have chosen to submit.
Sponsorship Applications: In connection with sponsorship applications, Hundadót.is processes contact information such as name, identification number, email address, and telephone number, as well as other information submitted to the company in such an application. This processing takes place based on your request to enter into a sponsorship agreement with the company.
As a general rule, Hundadót.is obtains personal information directly from the customer or the customer's representative. However, information may also come from third parties. If personal information is obtained from a third party, the company will seek to inform its customers accordingly.
Information subject to accounting laws is retained for 7 years from the end of the relevant financial year. Certain information may need to be retained for longer, for example if Hundadót.is may need to establish, pursue, or defend legal claims. In such cases, the retention period will be determined according to applicable limitation periods for claims.
3. How do we use your personal information?
We may use your personal information to:
- Provide you with the services or products you have requested.
- Process requests you have submitted to us.
- Offer you specific services on specific terms.
- Inform you about new products and services.
- Send you invoices for transactions with us or charge you for services and/or product purchases.
- Understand how you use our services and products so that we can further develop our services and product range.
- Answer questions you submit to us.
4. With whom do we share your personal information?
We may share information about you with the following parties:
- Authorities, such as government agencies, courts, and law enforcement authorities.
- Credit rating agencies and financial institutions.
- Our subsidiaries.
- Debt collection companies.
- Service providers acting on our behalf.
- Our professional advisers, such as lawyers, auditors, and external consultants.
We only share information with third parties under data processing agreements that specify the handling and security of personal information, unless otherwise required by law. If circumstances arise where fraudulent or unlawful activity is suspected, we will share relevant personal information with appropriate parties for the purpose of protecting our interests, your interests, and/or the interests of our customers.
If we merge with another company and/or are acquired by new owners, the information may be transferred to the new company.
5. How do we ensure the security of your personal information?
Personal information is stored in recognized access-controlled computer systems where access is limited to those who need it. Hundadót.is ensures that standard computer system protections are in place, kept up to date, and regularly monitored.
All computer equipment involved in storing personal information comes from recognized suppliers and is regularly monitored and updated.
We follow specific procedures and use recognized software to erase all data and personal information from used devices provided to us for resale or disposal, as well as devices that customers have borrowed. We recommend that you help ensure the security of your information by deleting it from devices before handing them over to us.
Services are purchased from a recognized security company that regularly performs external vulnerability scans on all external services operated by Hundadót.is.
6. How long do we retain the information?
We will retain your transaction history for up to 4 years unless the law requires or permits a longer retention period. If the information is no longer needed or the law requires its deletion, the information will be anonymized and/or deleted.
7. Your rights in relation to us
You have the right to receive information from us about how your personal information is used and what information we hold about you. You also have the right to update your information so that it is accurate, request corrections, or request that information about you be deleted if there is no longer a reason for us to retain it. You may also request that information about you be provided to you, for which you will need to complete the relevant form.
If you have questions or comments regarding this privacy policy or our processing of personal information, or if you wish to complain about a possible violation of privacy laws, please contact us by email at personuvernd@hundadot.is. We will make every effort to respond as quickly as possible.
You also always have the right to submit a complaint to the Icelandic Data Protection Authority in accordance with applicable laws concerning privacy and the processing of personal information, currently Act No. 90/2018.
8. Will this privacy policy change?
This privacy policy may change over time, for example due to changes in laws and regulations or official requirements concerning us and the handling of personal information. We therefore encourage you to check regularly for updates, which will be published on our website.
Privacy Policy for Applicants to Hundadót.is Slf.
Hundadót.is is committed to ensuring the reliability, confidentiality, and security of applicants' personal information. This privacy policy is intended to inform applicants about what personal information the company collects, how the company uses such personal information, and who has access to the information.
This privacy policy applies to personal information concerning all current applicants to the company. In this privacy policy, applicants are also referred to as “you” and the company as “we” or “us.”
If you are unsure how this privacy policy applies to you, please contact the company's data protection representative for further information. Contact information is provided at the end of the policy.
1. Purpose and Legal Basis
Hundadót.is seeks to comply fully with data protection legislation, and this policy is based on Act No. 77/2000 on the Protection of Privacy as regards the Processing of Personal Data, as subsequently amended.
2. What is personal information?
For the purposes of this policy, personal information means any information relating to an identified or identifiable individual, meaning information that can be traced directly or indirectly to a specific person. Anonymous data is not considered personal information.
3. Personal information collected and processed by Hundadót.is
We collect and retain various personal information about our applicants. Different personal information may be collected about different applicants, and the processing and collection of personal information may depend on the nature of the position.
Examples of information the company collects about applicants include:
- Contact information, such as name, identification number, address, telephone number, and email address.
- Gender.
- CV, references, and information from job interviews.
- Information about education, training, and work experience.
- Information contained in criminal records.
- Information required to prepare an employment contract if the applicant is hired, such as bank account information, personal tax allowance, trade union membership, and pension fund information.
- Information about the applicant's next of kin.
In addition to the information listed above, the company may also collect and process other information voluntarily provided by the applicant, such as links to personal information on social media, as well as information necessary for the company's operations.
As a general rule, the company obtains personal information directly from applicants. In cases where personal information is obtained from a third party, the company will seek to inform applicants accordingly.
4. Why do we collect personal information and on what basis?
We primarily collect personal information about applicants in order to fulfill our obligations to evaluate the relevant application, based on legal authorization or obligation, or on the company's legitimate interests.
Information processed on the basis of an application is necessary so that the company can fulfill its obligations toward applicants and assess their suitability for a particular position. If applicants do not provide the company with the necessary information, the company may be unable to fulfill its obligations or assess the application and the applicant's suitability.
In certain cases, the company may also process personal information on the basis of a legal obligation, such as employment and tax legislation.
Where the collection and processing of personal information is based on your consent, you may withdraw that consent at any time. All communications relating to such withdrawal or changes to the scope of consent should be directed to the Human Resources Manager.
The company is committed to ensuring that all processing of applicants' personal information is lawful, fair, and transparent. Information will only be collected for specified, explicit, and legitimate purposes, and the collection and processing will not extend beyond what is necessary for those purposes. Processing shall in all cases be adequate, relevant, and limited to what is necessary in relation to the purposes for which the information is processed.
5. Disclosure to third parties
The company may disclose applicants' personal information to contractors and other third parties in connection with work they perform for the company as part of the application process. Personal information may also be disclosed to third parties that provide us with information technology services and other services related to processing and the company's operations.
Third parties providing such services may be located outside Iceland. However, Hundadót.is will not transfer personal information outside the European Economic Area unless such transfer is permitted under applicable data protection legislation.
Personal information about you may be disclosed to third parties to the extent permitted or required under applicable laws or regulations.
6. How is the security of personal information ensured?
The company seeks to implement appropriate technical and organizational measures to protect personal information, taking particular account of its nature. Examples of such security measures include access controls for systems where information about you is stored. These measures are intended to protect personal information against accidental loss or alteration and against unauthorized access, copying, use, or disclosure.
7. Retention of personal information
The company will seek to retain personal information about you only for as long as necessary in relation to the purposes for which it is processed, unless otherwise permitted or required by law.
The retention period for personal information relating to an application is three months unless the applicant is hired, in which case the retention period is specified in the procedures contained in the company's operations manual.
8. Your rights regarding personal information processed by the company
You have the right to access and, in certain cases, receive a copy of the personal information we process about you, as well as information about the processing.
Under certain circumstances, you may also have the right to request that personal information about you be deleted or that its processing be restricted. You also have the right to have your personal information corrected if it is inaccurate or unreliable. It is therefore important that you notify us of any changes to the personal information you have provided to us when appropriate.
In addition, you may have the right to receive a copy of the information you have provided to us in electronic form or to have us transmit it directly to a third party.
When we process your personal information on the basis of our legitimate interests, you may object to that processing.
However, the rights described above are not absolute. Laws or regulations may permit or require the company to reject your request to exercise these rights.
9. Inquiries and complaints to the Data Protection Authority
If you wish to exercise the rights described in Section 8 of these rules, or if you have any questions regarding these privacy rules or how we process your personal information, please contact the Human Resources Manager, who will seek to answer your questions and advise you regarding your rights under these privacy rules.
If you are dissatisfied with the company's processing of personal information, you may submit a complaint to the Icelandic Data Protection Authority at www.personuvernd.is.
10. Review
The company may amend this privacy policy from time to time in accordance with changes to applicable laws or regulations or due to changes in how the company processes personal information. If changes are made to this privacy policy, applicants will be provided with the new version of the policy in a verifiable manner.
Any changes made to the policy will take effect after the updated version has been communicated.
This privacy policy was established on August 4, 2021.
:contentReference[oaicite:0]{index=0}