PRIVACY POLICY AND PROCESSING OF PERSONAL DATA

MISSION

HB Grandi is concerned about personal privacy of individuals and the security of personal data that the company holds. This privacy policy describes the purpose of collecting personal information and how the data is processed.

HB Grandi collects personal data as controller. Our mission is that employees, customers and other individuals are informed about how HB Grandi collects and processes personal data.

 

COLLECTING AND PREOCESSING OF PERSONAL DATA

HB Grandi collects information about employees, customers, and suppliers that the company is required to keep in accordance with laws and regulations, collective agreements, employment contracts, approval of the registered person or other legitimate interests of the controller.

HB Grandi does not use automatic decision making, including the formatting of personal data, in connection with the processing of personal data. If automated decision making is required, HB Grandi will disclose such use in accordance with the provisions of the Data Protection Act.

HB Grandi collects only information necessary to provide advice or services. If a customer chooses not to provide personal information, HB Grandi may not be able to provide the goods or services.

 

SECURITY AND STORING OF PERSONAL DATA

HB Grandi uses appropriate technical safety precautions to secure all personal data.

Personal information and other information kept by HB Grandi is stored in the company‘s information systems or with other authorized hosting company.

HB Grandi does not use personal information for purposes other than those for which they were collected. HB Grandi will not use the information for other purposes or deliver it to third parties except on the basis of legal authorization (eg, police), government orders, court order, written agreement or employee approval. However, HB Grandi reserves the right to provide non-personally identifiable information to third parties for legitimate purposes.

 

RETENTION PERIOD

Data collected for electronic monitoring is stored in accordance with the provisions of the Data Protection Act no. 837/2006, on electronic monitoring and processing of personal data resulting from electronic monitoring.

The company does not keep any other personal information longer than necessary and it is deleted when their practical value has been completed.

 

Reykjavik, June 5th, 2018