Polityka Prywatności
About the Policy
The firm's privacy policy is based on Act No. 90/2018 on Data Protection and the Processing of Personal Data.
The firm and its employees strive to comply with this legislation in all aspects and not process personal data without proper legal basis. The firm is the data controller of the processed information unless otherwise stated.
The firm ensures that staff are regularly informed about current laws and regulations regarding data protection and the processing of personal data and the privacy policy, and work accordingly.
Personal Data and Processing
Information is considered personal data if it identifies a specific individual or could be used to identify a specific individual.
Processing of personal data refers to an operation or series of operations where personal data is processed, whether the processing is automated or not.
Personal data is not processed except when permitted or required by law. Personal data is stored in a form that ensures that registered individuals cannot be identified for longer than necessary in accordance with the purpose of processing the information. The nature of the information collected depends on the individual's relationship with the firm. The firm processes, collects, and stores, among other things, the following information:
- •Name
- •Address
- •Phone number
- •Communication history
- •Information about bank accounts, defaults, and bank accounts
- •When the firm's work requires collecting sensitive personal data, e.g., information regarding client cases.
Extreme caution shall be exercised in the processing and storage of sensitive personal data. Sensitive personal data is defined in Article 3, Paragraph 1, Point 3 of the aforementioned Act.
Storage of Personal Data
The firm strives to ensure the security of personal data through appropriate technical and organizational measures that prevent unlawful processing and prevent data from being lost or accidentally altered. If a security breach occurs, it is reported to the Data Protection Authority and to the individuals concerned when applicable.
Individual Rights Regarding Personal Data
Right of Access
According to law, an individual may have the right to access or receive a copy of the personal data that the firm holds about them. Such information will be provided upon request. An individual requesting such information must visit the firm's office, sign a form, and present valid identification.
Right to Rectification
An individual has the right to have their personal data corrected if it is incorrect. In cases where an individual requests that information be corrected, they must visit the firm's office, sign a form, and present valid identification.
Right to Erasure and Restriction of Processing
In certain cases, an individual may have the right to have their personal data erased or its processing restricted. If clients have given their consent for the collection of personal data, they can withdraw such consent at any time without explanation. In such cases, the personal data is deleted unless such information must be retained according to law.
In cases where an individual requests that information be deleted or corrected, they must also visit the firm's office, sign a form, and present valid identification.
Third Party Requests
If a third party requests information on behalf of an individual, requests deletion or correction of information, they must have a clearly signed authorization or have legal authority.
Complaints to the Data Protection Authority
If an individual believes that the processing of personal data has not been in accordance with law, they have the right to file a complaint with the Data Protection Authority.
Changes to the Privacy Policy and Supervisor
The firm reserves the right to change the privacy policy at any time, and such changes take effect without notice upon publication of the changes on the firm's website.
The supervisor of the privacy policy and its implementation is Arnar Bjartmarz, owner of the firm. He can be contacted at arnar@bzlegal.is or phone 844-7242.
Reykjavík
2 grudnia 2025