Draft · to be dated at launch
Privacy policy
What personal data we collect, why, who sees it, and your rights. Written for the people whose data it is.
Section headings and what each one covers. The legal text is written by counsel and placed here before launch.
Who is responsible for your data
ÍSA Agency ehf. is the data controller. Contact details for privacy questions.
What we collect
Account: name, email, password (hashed). Profile: CV file, role, sector, experience, area, start date, languages, permit status. Employer: company details, contact person. Payment: confirmation from Teya, never the card number. Technical: log data and cookies.
Why we use it, and the legal basis
To provide the service, review and match, send matches and receipts (contract). To meet legal duties (law). Anything optional only with your consent.
Who sees what
Employers see anonymised profiles. Name, contact details and CV are released only after you agree. ÍSA staff see what is needed to review and match. Processors: hosting, email delivery, Teya.
How long we keep it
While your account is active and for a set period after. Payment records for as long as Icelandic accounting law requires.
Your rights
Access, correction, deletion, restriction, objection and portability. How to ask, and how fast we answer. Your right to complain to Persónuvernd.
Cookies
Which cookies we set and why. Link to the cookie policy.
Transfers outside the EEA
Which processors are outside the EEA, if any, and the safeguards used.
Changes to this policy
How we announce changes.
Contact
Privacy contact email and postal address.