General

This privacy policy describes how Sjálfsbjörg processes individuals' personal data. All processing of personal data by the organization is carried out on the basis of Act No. 90/2018 on the Protection of Personal Data and the Processing of Personal Data ("„privacy law“).

Personal information refers to all information that can be traced back to a specific individual. This includes information such as name, social security number, address, telephone number, email address, images, online ID, communications and more. In Section 2 of Article 3 of the Privacy Act, a more detailed explanation of what falls under the term "„personal information“.

The processing of personal data refers to an operation or series of operations in which personal data is processed. Examples of the processing of personal data include their collection, registration, storage, modification, dissemination, use, inspection and more. Section 4 of Article 3 of the Personal Data Protection Act explains in more detail what falls under the term "„processing“.

Responsible party

The controller of personal data is the party that determines the purposes and methods of processing, cf. Section 6 of Article 3 of the Personal Data Protection Act. Sjálfsbjörg is the controller when it comes to the processing of personal data about individuals covered by this privacy policy.

Self-help contact information:

• Self-reliance National Association of the Physically Disabled, ID 570269-2169
• Hatuni 12, 105 Reykjavik
• Phone number: 550-0360
• Email: info@sjalfsbjorg.is

When does Sjálfsbjörg process personal information?

When we receive a company letter

Associations that are members of Sjálfsbjörg submit an updated membership list to the association every year. The annual membership fee of the associations to Sjálfsbjörg is a certain amount per member. Sjálfsbjörg therefore processes this information for the purpose of ensuring that payments to the association are correct. Authorization for processing is based on Section 6, Article 9 of the Personal Data Protection Act.

When you become a member of Sjálfsbjörg

Membership of individuals from areas where no member association operates is permitted and individuals then become direct members of Sjálfsbjörg. Sjálfsbjörg is also required to manage and process information about members of the association in connection with its operations. Authorization for processing is based on Section 6, Article 9, of the Personal Data Protection Act.

When you rent an apartment from us

Sjálfsbjörg rents out apartments and enters into lease agreements with tenants that contain personal data. The purpose of this is to establish a contractual relationship and fulfill the obligations incurred in accordance with the content of the agreement. Authorization for processing is based on Section 2, Article 9 of the Personal Data Protection Act.

When you become a Hollvinur

Individuals who wish to support the activities of Sjálfsbjörg can become Hollvinur and pay a monthly donation. The organization then processes personal data for the purpose of collecting the amount that Hollvinur has decided to support the organization. Authorization for processing is based on Section 2, Article 9, of the Personal Data Protection Act.

When you participate in a lottery

Sjálfsbjörg processes the personal data of individuals who participate in the organization's lottery. The purpose is to enable the person concerned to participate and draw winners. Authorization for processing is based on Section 1. Article 9. of the Personal Data Protection Act.

Invoicing

It is necessary for Sjálfsbjörg to prepare invoices and preserve accounting data for the purpose of fulfilling legal obligations under Act No. 145/1994 on Accounting. Authorization for processing is based on Section 3 of Article 9 of the Personal Data Protection Act.

When you sign up for a mailing list

Those who wish to receive news about our activities can sign up for our mailing list by providing their email address. Authorization for processing is based on Section 1, Article 9, of the Personal Data Protection Act.

When you send us an email or contact us via the website

Individuals can send Sjálfsbjörg an inquiry by email or contact them through the organization's website. Authorization for processing is based on the purpose of the inquiry in each case, but generally it is based on Section 1, Article 9, of the Personal Data Protection Act.

When you use our website

Cookies are small text files that are stored on your computer or other smart device when you visit a website. Sjálfsbjörg uses the following cookies:

Necessary cookies. These cookies are necessary for our website to function properly. Authorization for this is based on Section 6, Article 9 of the Privacy Act.

Third-party access

Sjálfsbjörg uses information technology systems that facilitate the registration, management and dissemination of information. Sjálfsbjörg also uses accounting services for invoicing and accounting. Service providers may have access to personal information in connection with their services to the systems. Contractors who undertake certain tasks may also have access to information. In these cases, a confidentiality agreement is made with the person concerned, which stipulates his obligation to maintain the utmost confidentiality, ensure security and only handle personal information in accordance with Sjálfsbjörg's instructions.

Otherwise, a third party will not be granted access to personal information unless required to provide such access by law.

Personal information security

Sjálfsbjörg has taken security measures and is committed to ensuring the confidentiality, reliability and availability of personal information in all respects. Access controls are in place to the organization's systems and premises. Employees also receive regular training and education on how to ensure the security of personal information. Security measures are intended to protect personal information from being changed, lost, disclosed or accessed without permission.

Retention period of personal information

Sjálfsbjörg stores personal information for as long as it is necessary for the organization to keep it. Accounting records are stored for seven years in accordance with Act No. 145/1994 on Accounting. When Sjálfsbjörg no longer needs to keep personal information, it is securely deleted.

Your rights

You have certain rights under the Data Protection Act. If you wish to exercise these rights, please contact us via the email address info@sjalfsbjorg.is. We have one month to respond to your request, but we can extend the deadline by two months if the request is particularly extensive. It is worth noting that your rights are not absolute and may be subject to certain conditions. Here is an overview of your main rights:

Right of access. You have the right to request access to your data and receive a copy of your personal information.

Right to rectification. You have the right to receive information about you that is incorrect and inaccuracies corrected.

Right to erasure. In certain cases, you may have the right to have your personal data erased. This applies in particular where the information is no longer necessary, you have objected to the processing, the processing is unlawful, or if the processing is based on consent that you have withdrawn.

Right to object to processing. If our processing of your personal data is based on legitimate interests and you believe that it infringes your fundamental rights, you can object to the processing. We will then stop the processing unless we demonstrate an overriding interest in continuing it.

Right to restriction of processing. In the following cases, you have the right to request that we stop processing your personal data:

• If you dispute the accuracy of personal information (until we can confirm that it is accurate).
• The processing is unlawful, but you do not want the personal data to be deleted.
• We no longer need the information but you require it to establish, exercise or defend legal claims.
• You have objected to the processing and we have not identified any overriding interests in continuing it.

Right to withdraw consent. In cases where we base processing on your consent, you may always withdraw such consent. However, withdrawal of consent does not mean that the processing that took place before consent was withdrawn is unlawful.

Right to file a complaint with the Data Protection Authority. If you believe that your personal information is not being processed in accordance with data protection laws, you always have the right to file a complaint with the Icelandic Data Protection Authority (www.personuvernd.is).

More information

If you have further information about how Sjalfsbjörg handles your personal information, you can send us an inquiry at info@sjalfsbjorg.is.

Revision

This Privacy Policy may change from time to time in accordance with changes in applicable laws and regulations or if there are changes in how Sjálfsbjörg processes personal information.