Privacy Policy

General

Olíudreifing ehf., with the company ID 660695-2069 and located at Hólmaslóð 8-10, 101 Reykjavík, (hereafter referred to as "Olíudreifing" or "the company,") cares deeply about the privacy of individuals and takes data protection very seriously. The company places significant emphasis on ensuring that the handling of personal data is always in compliance with applicable data protection legislation. In this data protection statement, you can see what personal data Olíudreifing collects about individuals and for what purpose. It also includes information about other recipients of the data and the duration of its storage. Additionally, it provides details on the legal basis for Olíudreifing’s collection of personal data, the rights individuals have, and other important information related to the laws on data protection and the processing of personal data under Act No. 90/2018 (hereinafter referred to as data protection laws).

What are personal data and processing of personal data?

Personal data refers to all information that can be linked to a specific individual, such as name, national ID number, address, email, phone number, financial status, health, IP address, and more. A more detailed definition of personal data can be found in paragraphs 2 and 3 of Article 1, Clause 3 of the data protection laws.

Sensitive personal data refers to personal data that enjoys special protection under the data protection laws, such as information about ethnic origin or race, political and religious beliefs, union membership, genetic data, health, sex, or sexual orientation.

The processing of personal data refers to all handling and use of personal data, such as collection, recording, storage, modification, or deletion. A more detailed definition of the processing of personal data can be found in paragraph 4 of Article 1, Clause 3 of the data protection laws.

How does Olíudreifing process personal data?

At Olíudreifing, the processing of personal information is conducted on a lawful basis and in accordance with data protection laws. Olíudreifing also ensures that personal information is not further processed in a manner that is incompatible with the original purpose of the processing. Olíudreifing adheres to the following principles:

Personal information is processed fairly.
Personal information is collected only for clear purposes.
No more personal information is collected than is necessary.
Personal information is accurate and updated as needed.
Personal information is not stored longer than necessary.
The security of personal information is maintained with appropriate precautionary measures.

Automated decision-making

Automated decision-making refers to a process where a decision is made automatically without any human intervention. Such decisions can be based on profiling, i.e., when personal information is used to assess certain aspects of an individual's situation, especially to analyze or predict factors regarding their work performance, financial status, health, etc. An example of automated decision-making would be if a decision about a loan issuance on a website were based solely on a creditworthiness assessment.

No automated decision-making takes place in the processing of personal information at our organization.

Who does Olíudreifing collect personal data from?

In the company's operations, it is necessary to collect and process personal information about different groups of individuals. The personal information the company holds may be about its employees, contractors, clients, and other third parties with whom communication is necessary.

What personal data does Olíudreifing collect?

Olíudreifing collects various personal data about different groups of individuals, depending on the nature of the activity. In all circumstances, Olíudreifing strives to collect only those personal data that are necessary, considering the purpose of the processing.

In certain cases, we need to collect sensitive personal information, such as health information and union membership of employees. Special care is taken in handling such information.

We collect and process the following categories of personal data about applicants, clients, suppliers, former and current employees:

Basic information (name, address, email, etc.)
Facial image
Union membership
Banking details
Tax information
Information from job applications
Information from employment contracts
Timekeeping records
Salary payments
Health information
Email communications
Holiday information
Child support payments
Phone use details (duration and timing of calls)
Course participation
Incident reports
Project status
Performance reviews
Reasons for warnings/dismissals
Employee interviews

Olíudreifing collects and processes the following categories of personal data about employees, lessees, and suppliers.

Email communication

We use email, among other methods, to communicate with applicants, clients, and supplier contacts. For this purpose, we collect contact information along with the communications themselves.

Contracts

In order to make agreements with counterparts and other parties with basic information about them.

Invoicing

With the purpose of issuing invoices and collecting payments, we collect basic information about customers along with invoice amounts.

Customer register

With the aim of maintaining a record of our current and past customers (partners), along with their transaction history, we collect basic information about them.

Maintenance of sold goods and services

The information that Olíudreifing needs to collect in order to keep track of sold products and services primarily includes names, payment details, what products or services were purchased, and for what amount.

Security cameras

Security cameras are present at all main premises of the company. Olíudreifing retains the footage from the security cameras temporarily, but the footage is primarily deleted after 90 days.

Purpose of collecting personal data

Olíudreifing collects personal information primarily for the following purposes:

To facilitate contract obligations, such as with employees.
To provide specific services.
To safeguard the legitimate interests of the company.
To safeguard the legitimate interests of others.
To comply with legal obligations.
For security and asset protection purposes.

Legal basis for processing personal data

Olíudreifing collects and processes personal information on the following legal bases:

To fulfill legal obligations.
To fulfill contractual obligations.
Based on the consent of individuals.
To establish, assert, or defend legal claims.

How long does Olíudreifing retain personal data?

Olíudreifing stores personal information only for as long as necessary for the company's legitimate purposes. When there is no longer a need to retain the personal information, the company securely deletes it.

From whom does Olíudreifing collect information?

Olíudreifing primarily collects personal information directly from the individuals concerned but also relies on public records and information from other authorities in its operations. When and if information is obtained from third parties, the organization makes every effort to inform the individuals involved.

When and why do we disclose personal data to third parties?

ChatGPT

Olíudreifing shares personal information with third parties who are contracted by the company to perform specific tasks, such as service providers, representatives, or contractors. In such cases, the company establishes a working agreement with the relevant party. This agreement includes obligations for the third party to comply with Olíudreifing's instructions regarding the handling of personal information and prohibits them from using it for any other purposes. Furthermore, the third party is required to ensure the security of the information in an appropriate manner.

Additionally, Olíudreifing may need to share footage from the company's security cameras with the police if there is a legal request for it. The sharing of such information would be carried out based on legal obligations.

Transfer of personal data outside the European Economic Area

ChatGPT

The company is aware that strict conditions apply to the transfer of personal information to countries located outside the European Economic Area. The company will only do so if there is adequate authorization in accordance with the Data Protection and Processing of Personal Data Act No. 90/2018. Under no circumstances will the company transfer personal information without such lawful authorization.

Security of information

ChatGPT

The company is committed to implementing appropriate technical and organizational security measures to ensure the security of personal information in accordance with the Data Protection and Processing of Personal Data Act No. 90/2018. This includes restricting access to personal information so that only employees who require it for the performance of their duties have access.

Furthermore, the company promotes increased awareness among employees through regular training and education on how to safeguard the security of personal information.

Your rights

ChatGPT

Individuals who have given their consent for the processing of specific personal information have the right, according to the Data Protection and Processing of Personal Data Act No. 90/2018, to withdraw their consent at any time. However, this right does not affect the legality of the processing that occurred before the consent was withdrawn.

Additionally, individuals have other rights, including the right to be informed about the processing, the right to access their data, the right to rectify incorrect or misleading information, the right to have their data erased, the right to object to the processing of their data, and the right to data portability. It should be noted that individuals' rights are not always absolute and may be subject to various conditions and limitations.

Contact information for Olíudreifing

Name: Olíudreifing ehf.

Address: Hólmaslóð 8-10, 101 Reykjavík

Email: odr@odr.is

Phone Number: 550-9900

Data Protection Officer

ChatGPT

If individuals have further questions about this privacy statement, they can always contact our Data Protection Officer. Here are the contact details for our Data Protection Officer:

Name: Dattaca Labs Iceland ehf. Address: Kalkofnsvegur 2, 101 Reykjavík. Email: dpo@dattacalabs.com. Phone Number: 517 3444.

Right to lodge a complaint with the Data Protection Authority

If you have any doubts that Olíudreifing is handling your personal information in accordance with the Data Protection and Processing of Personal Data Act No. 90/2018, you have the right to file a complaint with the Data Protection Authority.

Review of this Privacy Policy

This privacy statement may, from time to time, be amended in accordance with changes in relevant laws and regulations or if changes are made to how Olíudreifing processes personal information. If changes are made to this privacy statement, such changes will be notified on Olíudreifing's website odr.is.

After amendments have been made to the privacy statement, they will take effect once the updated version has been published.

Last updated in September 2021.

Ef þú ert með spurningar, sendu þá tölvupóst á odr@odr.is

Olíudreifing

Privacy Policy

Olíudreifing ehf.

Quick links

Telephone

Emergency 552 6900