Privacy Policy

I.
General

Vefmiðlun ehf., ID number 591199-3749, Borgartúni 27, 105 Reykjavík, hereinafter referred to as Manor, is committed to respecting the privacy of individuals and takes data protection very seriously. Manor places great emphasis on ensuring that the processing of personal data is always in accordance with applicable data protection laws. This notice provides information about the personal information collected by the company about individuals for its operations and purposes. It also provides information about other recipients of the information and the retention periods. In addition, it contains information about the legal basis for Manor's collection of personal data, the rights individuals enjoy, and other important information related to the laws on data protection and the processing of personal data, Act No. 90/2018.

II.
Personal Information and Processing of Personal Data

Personal information refers to any information that can be attributed to a specific individual, such as name, national identification number, address, email address, telephone number, financial information, health information, IP address, and more.

Processing of personal data refers to all handling and use of personal data, such as collection, recording, storage, alteration, or erasure.

III.
Processing of Personal Data

At Manor, the processing of personal data is carried out on a lawful basis and in accordance with the laws on data protection and the processing of personal data, Act No. 90/2018. The company also ensures that personal data is not further processed in a manner incompatible with the original purpose of the processing.

The company ensures compliance with the following main principles: personal data is processed fairly, personal data is collected only for specified purposes, personal data is not collected more than necessary, personal data is accurate and up-to-date, personal data is not retained longer than necessary, and appropriate security measures are taken to protect personal data.

IV.
Collection of Personal Data

In the operations of Manor, it is necessary to collect and process personal data about various groups of individuals. The personal data held by the company may relate to its employees, customers, business partners, and other third parties with whom it is necessary to have communication. Manor also handles personally identifiable data on behalf of its customers, who are also responsible parties for the processing of such data.

V.
Nature of Personal Data

Manor collects different types of personal information about various groups of individuals depending on the nature of the company's operations. Under all circumstances, the company strives to collect only the personal data that is necessary considering the purpose of the processing.

Manor collects necessary information about its employees, such as name, national identification number, address, telephone number, attendance, salary, and more. Additionally, Manor needs to maintain necessary contact information, such as names and email addresses, about business partners and other third parties.

VI.
Purpose of Collecting Personal Data

The purpose of collecting the information is to be able to fulfill contractual obligations with employees and business partners, provide requested services to customers, protect the legitimate interests of the company, and comply with legal obligations where applicable.

VII.
Legal Basis for Collecting Personal Data

Manor collects and processes personal data based on the individual's consent, fulfillment of a contractual obligation, fulfillment of a legal obligation, and to protect the legitimate interests of the company.

VIII.
Source of Personal Data

Manor collects personal data directly from individuals. In cases where personal data is obtained from a third party, efforts are made to inform the individuals concerned about the data acquisition and its purpose.

IX.
Retention of Personal Data

Manor retains personal data only for as long as necessary and securely deletes the data after that period.

X.
Disclosure of Personal Data to Third Parties

Manor shares personal information with third parties who may be contracted by the company to perform specific tasks, such as service providers, representatives, or contractors. In such cases, Manor enters into a processing agreement with the relevant party. This agreement includes obligations to follow Manor's instructions regarding the handling of personal information and prohibits the third party from using the information for any other purpose. Additionally, the third party is obliged to ensure the security of the information in an appropriate manner.

Manor also shares information with third parties when required by law.

XI.
Transfer of Personal Data outside THE EEA

Manor acknowledges that strict conditions apply to the transfer of personal data to countries located outside the European Economic Area (EEA). Manor will only engage in such transfers if there is sufficient legal authorization in accordance with the laws on data protection and processing of personal information, specifically Regulation No. 90/2018.

XII.
Rights of the Data Subject

If you, as the data subject, have provided your consent for the processing of specific personal information, you have the right, according to the laws on data protection and processing of personal information, specifically Regulation No. 90/2018, to withdraw your consent at any time. However, this right does not affect the lawfulness of the processing that occurred before the consent was withdrawn. You also have other rights, such as accessing your data, rectifying inaccurate or misleading information, deleting personal information about yourself, preventing the processing of personal information about yourself, and the right to data portability. These rights are not absolute and may be subject to various conditions.

XIII.
Security of Personal Information

Manor has implemented appropriate technical and organizational security measures to ensure the security of personal information in accordance with the laws on data protection and processing of personal information, specifically Regulation No. 90/2018. This includes limiting access to personal information to only those Manor employees who need it due to the nature of their work or contractual obligations with clients.

XIV.
Contact Regarding Data Protection

All inquiries regarding data protection at Manor should be directed to the company by phone at 546-8000, by email at manor@manor.is, or by postal mail to Vefmiðlun ehf. (Manor), Borgartúni 27, 105 Reykjavík.

XV.
Right to file a Complaint

It should be noted that the data subject has the right, according to the laws on data protection and processing of personal information, specifically Regulation No. 90/2018, to file a complaint with the Icelandic Data Protection Authority (www.personuvernd.is) if they believe that the processing does not comply with the law and regulations.

XVI.
Acceptance and Review

This privacy statement was approved by the Manor board of directors on 01.01.2022 and will be reviewed annually or more frequently if necessary.