Privacy statement Aflvéla ehf

Strong personal protection is a major concern of Aflvéla and we place great emphasis on respecting the rights of individuals and that all processing of personal information is always in accordance with the Act on Personal Protection and Processing of Personal Information no. 90/2018 (hereinafter "Personal Protection Act").

With this privacy statement, it is reported how Aflvélar ehf., id. 480104-2340, Vesturhrauni 3, 210 Garðabær (hereinafter "Aflvélar" or "we"), is processing, such as collecting, registering, storing and sharing personally identifiable information about individuals (hereinafter also "you").

The statement mainly deals with the processing of personal data when individuals:

• Shop for products in our store or online store
• contact the company, whether by email, phone or social media
• visit our website, www.aflvelar.is or our social media pages
• When you create an account and log in to "My Pages" on our website

What personal information does Aflvélar collect about you?

Aflmýlar focuses on processing only the personal information that is necessary in accordance with the purpose behind the collection of the information.

Aflmélar processes, as we do in every case, in particular the following personal data:

• Identification and contact information, such as name and social security number, address, e-mail, telephone number
• Technical information, such as IP address
• Payment information, but only to the extent necessary to enable the relevant payment company to process the payment. Such information is not stored by Aflvél

Communication when individuals contact us

Aflvélar does not process personal information that is classified as sensitive personal information according to the Personal Protection Act, nor information about convictions in criminal cases or criminal conduct.

For what purpose does Aflvélar process personal information about you?

Aflvélar processes personal data mainly for the purpose of:

Process purchases of products, whether through a store or an online store
Do social media marketing
Respond to inquiries from individuals
Communicate with company contacts
Fulfill a legal obligation that rests on the company
When you use our website www.aflvelar.is, we collect information about your use, i.e. IP address, type or version of browser you use, timing and duration of visit and which subpages you visit within Aflvéla's website. Here you can find more information about our use of cookies.

Legal basis for processing personal data

Aflvélar processes personal data based on the following general sources:

• To fulfill a contractual obligation. This authorization applies in particular when individuals buy products in our store or online store.
• To comply with a legal obligation. This authorization applies in particular in relation to data covered by Accounting Act no. 145/1994.
• To protect the legitimate interests of the company. This authorization applies in particular to the collection of arrears.

How long do we keep personal information about you?

Power Machines stores personal data for the time necessary to fulfill the purpose of the processing as described above. For example, the information that is considered accounting data is stored for seven years according to the Accounting Act no. 145/1994.

From whom does Aflvélar collect your personal information?

We collect personal information from you and in certain cases personal information is obtained automatically, for example when using our website. Aflvélar has a connection with the National Register regarding social security numbers to ensure that information about the right person is being processed in cases where a party needs to be created in Aflvélar's system, such as when individuals buy products with a warranty.

When does Aflvélar share your personal information with third parties and why?

Aflvélar only communicates personal information to third parties where such is required by law or in the case of a service provider hired by Aflvélar to perform predetermined work. For example, we can mention entities that provide information technology and electronic communications services. In certain cases, such parties may be considered processors, and Aflvélar then enters into a processing agreement with the respective party in accordance with the requirements of the Privacy Act.

Aflmévar may also share personal information with third parties when this is necessary to protect the company's urgent interests, such as in the collection of arrears.

If it happens that a processor processes, including hosts, data outside the European Economic Area (EEA area), Aflvélar ensures that a legitimate basis is present according to the Personal Protection Act.

Aflmýlar would like to point out that when you access or contact us through our social media pages, the providers of the social media services may gain access to information, and we encourage you to familiarize yourself with their privacy statements.

Security of personal information and notification of security breaches

Security in the processing of personal information is important to Aflvélum and we have taken appropriate technical and organizational security measures to ensure the protection of your personal information in line with our security policy, including appropriate access controls.

In the event of a breach of security concerning your personal information, and such a breach is deemed to result in a high risk to your freedom and rights, we will notify you without undue delay. In this sense, a breach of security is considered an event that results in your personal data being lost or destroyed, altered, disclosed or unauthorized access to it.

Your rights

Subject to the conditions detailed in the Privacy Act, you have the right to:

Get information about what personal data the company has recorded about you and its origin, as well as information about how personal data about you is processed,
Get access to the personal information that is processed about you, or request that it be sent to a third party,
Your personal information is updated and corrected if necessary,
Power machines delete your personal data if there is no objective or legal obligation to preserve it,
Object if you wish to restrict or prevent the processing of your personal data,
Information on whether automated decision-making takes place, and on what grounds such decision-making is based and a review of automated decision-making,
Withdraw your consent that Aflvær can collect, record, process or store your personal data, when processing is based on that authorization.
If you want to exercise your right, you can send a written request to aflvelar(at)aflvelar.is. We will confirm receipt of the request and normally respond within one month of receiving the request. If it is not possible to respond within a month, we will notify you of a delay in processing within a month. No fee is charged when individuals exercise their right in accordance with the above, except in cases where the request is considered excessive or manifestly unreasonable.

You also have the right to file a complaint with Personal Protection if you see reason to do so. Information on Personal Protection can be found on their website, www.personuvernd.is.

Further information

If you would like to receive more information about issues related to your personal information, we suggest that you contact us:

Aflvélar ehf.
West lava 3
210 Garden town
Email address: aflvelar(at)aflvelar.is

Review and revision of Aflmeva's privacy statement

Aflvælurur's privacy statement is reviewed regularly and updated if necessary. The statement was last updated on 31.01.2022.