PRIVACY POLICY

1 INTRODUCTION

Islandsdottir is committed to upholding the privacy of users and the protection and security of their personal data. Due to this, the user is informed, here below, of the manner in which Islandsdottir collects, processes and protects the personal data that are provided by Clients, Potential Clients, Collaborators and others (hereinafter, Users), irrespective of the medium used for this. Users must read this privacy policy carefully and determine, freely and voluntarily, whether they wish to provide their personal data to Islandsdottir. In addition, users guarantee that they are of legal age and that the data provided are true, precise, complete and up-to-date, with them being responsible for any damages, whether direct or indirect, that may be caused as a consequence of non-fulfilment of said obligation. Should the data provided belong to a third party, the users guarantee that they have informed the third party of the aspects contained in this document and obtained authorization to provide its data to Islandsdottir for the purposes indicated. 

2 PURPOSE AND SCOPE

The purpose of this privacy policy is to inform Users in relation to the conditions that will be applicable to the processing of personal data that Islandsdottir will perform, being applicable to all processes managed by Islandsdottir that involve the obtainment and processing of personal data. 

3 PURPOSES AND LEGAL GROUNDS FOR PROCESSING

Islandsdottir will process the personal data of Users, in an automated form or otherwise, as may be appropriate, for the achievement of the following purposes, under the express consent of the users by means of their acceptance of this Privacy Policy: 

  • To manage requests sent, irrespective of the class of the same, via any of the means made available by Islandsdottir. 

  • To assist in the writing of grant applications from public, private, national or international entities, that Users may opt for. 

  • To send users communications of an informative, promotional and/or publicity related nature related to the activity of Islandsdottir, such as information of services, events in which Islandsdottir participates, or other initiatives, via electronic mediums. 

  • Should this have been so requested; to manage the enrolment and participation of users in any activities / events in which Islandsdottir may participate, whether these may be organized individually or jointly together with other entities. The processing of data for the mentioned purposes will be necessary for the achievement of the purposes inherent to the corporate purpose of Islandsdottir, with Islandsdottir not taking any automated decisions in respect of the data collected. 

4 TYPES OF DATA PROCESSED

All of the personal data requested is mandatory, with the exception of those in relation to which it may be expressly otherwise indicated, due to which refusal to provide them would imply the impossibility of attending to the request made to us. In order to achieve the purposes indicated above, among others, we may process the following categories of personal data:  Identification / contact data: name, surnames, address, National Identification Document number, telephone number (landline and mobile), and e-mail address.

Professional data: the company at which the person works and is representing with their request. 

5 COMMUNICATION OF PERSONAL DATA

Islandsdottir processes all personal data under the strictest conditions of security and confidentiality, with them being solely and exclusively processed by the former, except whenever it may be necessary, for the fulfilment of requests by users, to communicate the data to third parties, in which case this will be informed in advance (E.g.: Public entities, whether national or European, in the case of applications for grants). Without detriment to the foregoing, for the processing of data of users, Islandsdottir has service providers to fulfil some of the aforementioned purposes. Said service providers will process the data only for the purposes established by Islandsdottir and following its precise instructions, complying with legal regulations on personal data protection, the security of information and other applicable rules, with no user data to be communicated to said entities in any case. 

6 INTERNATIONAL TRANSFERS OF DATA

Islandsdottir will not transfer the personal data of users outside the European Economic Area without previously obtaining their consent, and, in any case, this shall be done to entities that guarantee a level of security and protection equivalent to that required in data protection regulations in Europe. 

7 TERMS OF STORAGE

The data will be stored by Islandsdottir for the time necessary to attend to user requests, and, once these have been attended to, for the time during which the purpose of the processing continues to be valid or until any possible future responsibilities prescribe, whatever the class of these may be, and, in any case, always provided that users do not exercise their rights of objection and cancelation. 

8 SECURITY MEASURES

Islandsdottir will process user data in an absolutely confidential manner at all times, and respecting the mandatory duty to secrecy in respect of the same, in conformity with that provided in applicable regulations, adopting, for this purpose, any measures of a technical and organizational kind that may be necessary to guarantee the security of their data and prevent any modification, loss, or non-authorized processing or accessing of the same, taking into account the state of the art, the nature of the data stored and the risks to which they are exposed. 

9 EXERCISING OF RIGHTS

You may exercise your rights by writing to the e-mail address info@Islandsdottir.is. Specifically, you may: a) Revoke any consent previously granted. b) Access and be informed of the type of data that we have in relation to you. c) Rectify any imprecise or incomplete data. d) Request the erasure or cancellation of your data when, among other reasons, the data is no longer necessary for the purposes for which they were collected. e) Object to certain types of processing, provided that these are not essential for the fulfilment of the contract and/or any associated legal obligations. f) Request the portability of your data, as well as restriction on processing, in those cases provided for in data protection regulations. In the same manner, you may submit a claim relating to the protection of your personal data to the Spanish Data Protection Agency, at Calle de Jorge Juan, 6, 28001 Madrid. 

Last updated 25 May 2023.