Privacy Policy

Housing – Verkheimar ehf. is committed to protecting the personal data of users of this website in accordance with Act No. 90/2018 on the Protection of Personal Data and the Processing of Personal Data, which is based on the EU General Data Protection Regulation (GDPR).

This policy applies to the website hysi.is and all data that may be received by us through it.

1. Responsible party

The party responsible for processing personal data is:

2. What information do we collect?

We may process the following personal information:

• Contact information: name, email address and telephone number when you contact us via a contact form or email.
• Technical information: IP address, browser type, operating system, and website visit history, collected automatically through cookies and similar technologies.
• Communication: the content of inquiries or messages you send us.

3. Purpose and legal basis

We process personal data on the following basis:

4. Cookies

This website uses cookies to ensure the best possible experience and to analyze how you use the site. Cookies are small text files that are stored in your browser.

We use the following categories of cookies:

• Necessary cookies: Necessary for the website to function. Do not require consent.
• Analytics cookies: Help us understand how visitors use the website (e.g. Google Analytics). Require consent.
• Marketing cookies: Used to display relevant ads. Consent required.

You can always change or revoke your consent to cookies by clicking the fingerprint button at the bottom left of the page.
There you can choose which categories of cookies are allowed and change your settings at any time.

5. Disclosure of information to third parties

We do not sell or rent your personal information to third parties. However, we may share information with:

• Service providers who work on our behalf (e.g. hosting providers, analytics tools) and are bound by confidentiality agreements.
• To the authorities if required by law.

When data is sent outside the European Economic Area (EEA), appropriate safeguards are ensured in accordance with the GDPR.

6. Data retention period

Personal information is retained for as long as is necessary to fulfill the purpose for which it was collected, or as long as required by law. Data related to inquiries is generally destroyed after 24 months if there is no reason to retain it longer.

7. Your rights

According to GDPR, you have the right to:

• Access the personal information we hold about you.
• Correction if the information is incorrect or incomplete.
• Deletion (“right to be forgotten”) when the conditions of Article 17 of the GDPR are met.
• Restriction of processing in certain cases.
• Transfer of data in a technical format (right to data portability).
• Object to certain processing, particularly when it is based on legitimate interests.
• Withdrawal of consent at any time, without affecting lawful processing that has already taken place.

To exercise your rights, please contact us via email [email protected] or by phone 497-2700.

8. Complaints

If you believe that the processing of your personal information violates data protection laws, you can file a complaint with the Icelandic Data Protection Authority:

9. Data security

We employ appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure or destruction.