Privacy policy

Purpose

Hrafnista complies with law no. 90/2018 on personal protection and processing of personal information that entered into force on July 15, 2018. The aforementioned law was enacted to implement and codify the general privacy regulation (REGULATION OF THE EUROPEAN PARLIAMENT AND THE COUNCIL (EU) 2016/679, from April 27, 2016 on the protection of individuals in connection with the processing of personal information and on the free transfer of such information and the repeal of Directive 95/46/EC). Hrafnista takes pride in ensuring the confidentiality and protection of the personal information that Hrafnista has access to the data and how you can access further information about Hrafst's privacy policy.

What is personal information?

Personal information under this privacy policy is any information about an identified or identifiable individual. An individual is considered personally identifiable if it can be identified, directly or indirectly, such as by reference to an identifier such as, for example, a name, social security number, online identifier or one or more factors that characterize him in physical, physiological, genetic, mental, chemical, cultural or social terms.

What data do we collect and why?

The personal information that Hrafnista obtains is used, among other things, to fulfill a legal obligation that rests on the responsible party, such as the registration of health information in medical records, the provision of certain services to residents and other individuals, to meet the requirements of the labor market towards their employees, etc.

Information is also obtained for the purpose of fulfilling agreements made with individuals, such as employment contracts with staff and service contracts with residents. Hrafnista strives to improve the safety and living conditions of residents, and for that purpose the processing of personal information is often necessary. Hrafnista focuses on informing all concerned about the processing of personal information and obtaining its informed consent in cases where applicable.

Hrafnista may also collect and process information that individuals choose to provide to Hrafnista. This can be, for example, correspondence with suggestions or comments from residents, relatives, applicants or other customers or information that may be received by Hrafnista as a result of its activities, including its main activities, which consist of services to residents/its business, including health services.

Examples of information processed by Hrafnista about individuals for the above purposes:

General information; such as name and address.
Contact information; such as phone numbers and email addresses.
Social security number.
Gender.
Extensive health information.
Skills and health assessments.
Information about education and career.
Union membership.
Pension fund membership.
Wage and Wage issues.
Sickness and holiday entitlements and their exercise.
Working hours.
Account number.
Information about relatives; such as names, phone numbers and email addresses.

Where does the information we work with come from?

In principle, information that Hrafnista works with comes from individuals themselves. In some cases, however, the information comes from third parties. Examples include health authorities, doctors, tax authorities, trade unions, pension funds, relatives, etc.

How long do we keep the data?

Hrafnista falls under the provisions of the Act on Public Archives no. 77/2014. The data that Hrafnista obtains in its activities, including personally identifiable data, must therefore be kept for up to 30 years before it delivers it to the appropriate archive.

Who has access to the data?

The relevant employees and managers of Hrafnista have access to the data collected about registered persons. Co-responsible parties, such as self-employed doctors, also have access to certain data. Then Hrafnista's processors need to have access to certain data, there may be IT companies, pharmaceutical services, accounting services, etc. Furthermore, Hrafnistu is obliged to submit certain information to government agencies, such as the Office of the National Medical Examiner, Skills and Health Assessment Committees, the Icelandic Health Insurance, the National Tax Administration, etc.

Hrafnista never uses personal data for purposes other than those for which it was obtained.

How do we ensure data security?

Hrafnista seeks to protect personal data through appropriate technical and organizational measures Examples of such measures include access controls to systems, clear procedures, and staff training.

Websites and cookies

Hrafnista uses so-called cookies/web tracking tools (eg Google Analytics) to measure Hrafnista's websites. Cookies are small text files that are stored on your computer or smart device. When visiting Hrafnista's website, information about the time, date, keywords, which website you come from, browser type, operating system type, etc. is recorded.

The information is used in the improvement of Hrafnista's website and during its development, among other things to make it more efficient and improve the user's experience. The information is not sold to third parties.

More information

Hrafnista has appointed a Privacy Officer who will oversee and monitor your home's privacy issues. If you would like more information about this privacy policy or how Hrafnista processes your personal information, please contact the Privacy Officer.

His contact details can be found below:

Gunnhildur E. Kristjánsdóttir
personuvernd@samtok.is
telephone: 560 0201

Review

This privacy policy is reviewed regularly and may be updated or changed in accordance with changes in laws or regulations or due to changed procedures for the processing of personal information within Hrafnista.

This privacy policy was approved by Hrafnista's executive council on June 13, 2018.