Your privacy is important to Já. This policy applies to personal information whether it is collected and stored electronically, on paper or in other comparable ways. The policy covers the collection, storage and processing of personal information stated by the policy. The policy is available on Já’s website.
II. PRIVACY LEGISLATION
The relevant law about the handling of personal information is law no. 90/2018 about personal privacy and the processing of personal information as it is at each time and the relevant sections of regulations of the European Parliament and Council (EU) 2016/679 about the protection of individuals concerning the processing of personal information and the free distribution of such information. The laws specify processing, storage and disclosure of personal information.
III. RESPONSIBILITY AND CONTACT
Já hf. is generally responsible for the registration of personal information given to Já and its processing in its operations and is the so-called data controller of the processing in the sense of the privacy laws because of Já’s service but can in some instances be the processor of the information or in some cases a common data controller with another entity.
You can contact us at Álfheimar 74, 104 Reykjavík, by sending a written request at email@example.com and by calling 522 3200 if you have any questions about privacy protections.
IV. COLLECTION AND USE
Our mission is to distribute information about individuals, companies and service providers who have requested it and agreed to be registered in a telephone directory. Your registration is only published in the way you have agreed to. Já’s information processing is based on either the execution of contract, permission, directives in laws, rules and government directives or on the bases of legal interest. To be able to fulfill our mission we collect the following information and process it for the following purpose:
You can view and use the website and app of Já, and we collect the information provided by your browser or phone which is important to our best use of our services, i.e. data that may include information such as phone number, IP address, browser type, browser version, service pages, time and date of visit, and other statistics.
The aforementioned information is either given by the relevant individual or the relevant telecommunications company where an individual registers in a telephone directory. The information regards services provided or automatic collection of information about the use of Já’s website and app.
Our mission is to share information about individuals, companies and service providers who have requested it and agree to be listed in a telephone directory. We provide a variety of services to access the information we provide, for example: the information number 1818 and Já.is web / app, we also provide companies and service providers with technical services that simplify their access to the information we provide.
If you are registered in the telephone directory, we will share the personal information that you have agreed to have disclosed, with third party entities. These third party entities are independent guarantors as regarding the processing of information on their part, for instance, for marketing purposes. In some cases, we might also share personal information to third parties that we are required to by law or in the cases listed in Section IV or those mentioned in Section VII.
VI. THIRD PARTIES
We have permission to share personal information with a third party (processor) who is a service provider, agent, or a contractor to be able to finish a project or give you service or products you have asked for or agreed to. We have also permission to share information with processors when necessary to protect vital interests, for example when collecting a payment in default. We also share information, for statistical purposes, with processors who work with us on quality control and marketing. We only share with them the personal information necessary for them in the aforementioned purpose and we make an agreement with them where they undertake the duty of keeping your information safe and to only use them for the aforementioned purpose.
Já strongly emphasizes the protection of all personal information, and thus has an internal control system to ensure that appropriate technical and organizational safety measures are always taken.
We will notify you without undue delay in the event of a breach of security regarding your personal information that poses a high risk to you. Security violations in the above sense means security breaches that result in unintentional or unlawful destruction of personal data or with the consequence that it is lost, altered, displayed, or granted unauthorized access.
However, your attention is drawn to the fact that you are responsible for personal information, e.g. name, social security number, and picture you prefer to share or send in the public domain e.g. via chat or Já’s Facebook page.
Já strives to keep your personal information accurate and reliable, and update it as needed. We keep your personal information while you want to be registered in a telephone directory. We provide a special service for your listings and continuously assess whether we may retain them. If we decide that we may not retain them, we will discontinue all processing with your personal information from that time. If there is a possibility that your personal information might be needed later to comply with legal requirements, e.g. to the tax authorities, or to appeal or defend against a claim, we will copy the relevant personal information and keep them in safe form for as long as necessary.
IX. YOUR RIGHTS
a) To know what personal information is stored about you, and how it is accessed, and to access your personal information
b) To get information about how your personal information is processed
c) To request that your personal information is updated and corrected
d) To request your personal information is deleted, if there is no longer any reason to preserve it
e) To criticize and/or limit the way in which personal information is processed
f) To obtain any personal information you have provided to us or ask that it is sent directly to another party with the limitations that the rights and freedoms of others impose
g) Revoke your consent for processing when processing is based on that authorization in the same way as you provided it or by sending us a written inquiry
h) To obtain information on whether automatic decision making is being used, including profiling, and the arguments underlying it and the significance and intended consequences of such processing
Your request will be considered, and we will supply the information (as applicable) within a reasonable period of time, subject to the restrictions imposed by the rights and freedoms of others, including business secrets and intellectual property rights. We draw your attention to the collection of a special operations fee if more than one copy is requested. You will be notified and given a statement in case of delay or if the request cannot be completed in full, no later than one month after receipt of it.
You always have the right to complain to the Data Protection Agency (Persónuvernd) if there is any disagreement about the handling of personal information, but we would appreciate it if you gave us a chance to solve the problem before you to talk to the Data Protection Agency.
X. CHILDREN'S PERSONAL PRIVACY
Personal information about children under the age of 18 is not collected.
First approved: April 17th, 2018
Last modified: November 9th 2018