Privacy Policy of Slysabætur ehf.

Slysabætur ehf., reg. no. 440309-1000, Skólavörðustígur 12, Reykjavík (hereinafter referred to as "the Company"), places great importance on ensuring the protection of personal data and that all processing is carried out in accordance with applicable laws and regulations. This Privacy Policy applies to personal data relating to the Company's clients (including contact persons of clients who are legal entities) and individuals who contact the Company (collectively referred to as "clients"). The Policy is based on Act No. 90/2018 on Data Protection and the Processing of Personal Data, and its purpose is to inform clients about what personal data is collected, the purpose of its use, and how it is handled.

Personal Data Collected by the Company

Personal data means any information relating to an identified or identifiable natural person — i.e., information that can be traced to a specific individual, directly or indirectly. The Company collects various types of personal data about its clients and their representatives, including but not limited to: Names, Gender, National identification numbers, Addresses, Email addresses, Phone numbers, Bank account details, Photographs, audio, and video recordings, Income information. In addition, the Company may collect sensitive personal data, such as information on race and ethnic origin, trade union membership, health, sexual orientation, and genetic data — when such information is necessary for handling cases on behalf of clients. Personal data is most often obtained directly from the client or their contact person, but it may also come from other parties, such as opposing parties, public authorities, courts, Creditinfo, or, where applicable, other attorneys.

Purpose, Retention, and Disclosure of Personal Data

The Company uses personal data to provide legal services to its clients. This includes identifying and communicating with clients, corresponding with opposing parties, protecting clients' interests, and conducting proceedings before courts. Personal data is also used to maintain case records. The Company stores personal data securely and in compliance with applicable laws and regulations. As a general rule, personal data relating to a case is not retained for more than ten years after the case is closed, except for data that must be retained by law or when there is a legitimate reason for continued retention. The Company may disclose personal data to third parties with the client's consent or when necessary to fulfill contractual obligations. Personal data may also be shared with the Company's service providers, such as software or IT system providers. Furthermore, personal data may be disclosed to third parties to the extent permitted or required by applicable law — for example, to public authorities, courts, opposing parties, witnesses, partners, or other relevant stakeholders.

Rights of Data Subjects

Clients have the right to obtain confirmation as to whether the Company processes personal data about them. If so, they may request access to such data and information about the processing. Clients also have the right to withdraw their consent to data processing at any time (where processing is based on consent). They may request the correction or restriction of processing of their personal data, or object to such processing. In some cases, clients may also have the right to request the transfer of their personal data to another controller. These rights may be subject to limitations under applicable laws and regulations. Clients are also entitled to be informed of the source of personal data not collected directly from them and have the right to file a complaint with the Icelandic Data Protection Authority (Persónuvernd) if they believe the Company has not respected their data protection rights.

Reservation

The Company reserves the right to amend this Privacy Policy as necessary. The latest version will always be published on the Company's website. Clients who wish to obtain further information or exercise their rights are welcome to contact the Company directly. This Privacy Policy was adopted on 11 November 2018.

Cookies

Our website uses cookies to improve your experience. You can set your browser to reject cookies, but this may limit the functionality of the website.

Your Rights

You have the right to access your personal information, correct it, delete it, or limit its processing. You can also object to the processing of your personal information and request its transfer.

Changes to Privacy Policy

We may update this privacy policy at any time. We will notify you of any changes by posting the new version on our website.

Contact Us

If you have questions about our privacy policy or how we handle your personal information, please contact us via email at slysabaetur@slysabaetur.is or by phone at +354 588 0188.