Privacy Policy

1. OBJECTIVE

To ensure security in the processing of personally identifiable data in all activities of the company in accordance with laws and regulations applicable to personal data protection.

2. GENERAL

Your privacy is of great importance to Klíníkin Ármúla ehf. This policy covers personal data, whether collected and stored electronically, on paper, or in other comparable ways. The policy covers the registration, retention, and processing of personal data that falls under the policy.

3. DATA PROTECTION LEGISLATION

The treatment of personal data is governed by the Act on Personal Data Protection and Processing of Personal Data as in force at any given time, as well as the relevant acts of the Agreement on the European Economic Area. The legislation addresses, among other things, the processing, retention, and sharing of personal data. 

4. RESPONSIBILITY

Klíníkin Ármúla ehf. is responsible for the registration of personal data and the processing of that data in its operations. Klíníkin Ármúla ehf., located at Ármúla 7, 108 Reykjavík, is the legal controller of the personal data you provide to the company. We can be contacted by sending a written inquiry to mottaka@klinikin.is and by calling 519 7000. The Data Protection Officer for Klíníkin Ármúla is Agnes Eir Önundardóttir, email agnes@klinikin.is.

5. COLLECTION AND USE

We collect information about:

• your name, phone number, and email address in order to complete bookings and fulfil our legal obligations to record your medical history during a consultation, phone call, treatment, or other communications related to your health,

• your name, Icelandic ID number (kennitala), type, scope, and date of transactions in order to fulfil our obligations under accounting laws,

• whether you have allergies or other health conditions, with your consent, to protect your vital interests and those of others,

•  your name, gender, phone number, and email address, with your consent, to contact you for quality control purposes,

You can view and use the website of Klíníkin Ármúla, www.klinikin.is, without providing any personal information. We do not collect information that your browser sends when you use our services, i.e., data that may include information such as your IP address, browser type, browser version, the pages of our service that you visit, the time and date of your visit, the time spent on those pages, and other statistical data. 

6. SHARING

We never sell your personal data. We never share personal data with third parties without your consent for the sharing (which you are free to deny), except where we are required to do so by law or in the cases listed in Chapter IV or in the following paragraph.

We are permitted to share personal data with third parties (processors) who are our service providers, agents, or contractors for the purpose of completing tasks or providing you with services or products you have requested or approved. We are also permitted to share information with processors when it is necessary to protect vital interests, e.g., in the collection of default claims. We also share information, for statistical purposes, with processors who work with us on quality and monitoring activities. We only provide processors with the personal data necessary for them for the aforementioned purposes and enter into an agreement with them where they undertake an obligation to keep information about you secure and use it solely for the aforementioned purposes. 

Your attention is also drawn to the fact that all content you publish or share on our social media pages is public information. Your attention is drawn to the fact that by linking your site account and your social media account, you give us permission to share information with the provider of the social media service, and the use of the information we share is governed by the social media's privacy policy. If you do not want your personal data to be shared with other users or with the provider of the social media service, do not link your social media account to your site account or share content on social media from the site. 

7. THIRD PARTIES 

This privacy policy does not cover information or processing by third parties, and we have no control over nor bear responsibility for their use, publication, or other actions. We therefore encourage you to familiarise yourself with the privacy policies of third parties, including the web hosts of sites that may refer to ours, software companies such as Facebook, Apple, Google, and Microsoft, as well as the payment services you choose to use.  

8. PROTECTION 

Klíníkin Ármúla places great emphasis on protecting all personal data and therefore has an internal control system designed to ensure that appropriate technical and organisational  security measures are always taken.

We will notify you without undue delay if a security breach occurs regarding your personal data that poses a high risk to you. A security breach in the aforementioned sense refers to a breach of security leading to the accidental or unlawful destruction of personal data or its loss, alteration, unauthorised disclosure, or access. 

However, your attention is drawn to the fact that you are responsible for personal data, e.g., name, Icelandic ID number (kennitala), and photo, that you choose to share or send in a public forum, e.g., through a chat room or Klíníkin Ármúla's Facebook page, www.facebook.com/KLINIKIN. 

We would also like to point out that data transmission over the internet is never completely secure. You are therefore advised to let us know immediately if you believe that certain information you have given us is at risk. 

9. RETENTION

Klíníkin Ármúla makes every effort to keep personal data about you accurate and reliable and updates it as necessary. We retain personal data about you for up to two years unless you have, with your consent, authorised us to retain it longer or if it is necessary for us to comply with a legal obligation. If we decide that we are not permitted to retain it further, we will cease all processing of the personal data from that time. If there is a possibility that the personal data may be needed later to fulfil legal obligations, e.g., towards tax authorities, or to establish or defend a legal claim, we will back up the relevant personal data and store it in a secure format for as long as necessary. 

10. YOUR RIGHTS

You have the right to, and can request, the following information by sending a written inquiry to mottaka@klinikin.is: 

a)    to know what personal data is recorded about you and how it was obtained, and to gain access to the personal data,

b)   to obtain information on how personal data about you is processed,

c)    that personal data about you be updated and corrected,

d)   that personal data about you be deleted, if there is no longer a legitimate reason to retain it, 

e)    to object to and/or restrict how personal data is processed,

f)     to receive personal data you have provided to us or have it transmitted directly to another party, within the limits set by the rights and freedoms of others,

g)   to withdraw your consent to processing when processing is based on that authorisation, in the same manner as you gave it or by sending us a written inquiry,

h)    to obtain information on whether automated decision-making takes place, including profiling, and the underlying logic, as well as the significance and envisaged consequences of such processing. 

Your request will be considered and the information provided to you (when applicable) within a reasonable time, subject to the limitations of the rights and freedoms of others, including trade secrets and intellectual property rights. Please note that a special photocopying fee is charged if more than one copy is requested. You will be notified and given an explanation if there is a delay in processing or if it is not possible to fully comply with the request no later than one month from its receipt. You can complain to the Data Protection Authority if we refuse to provide you with certain information and/or the Directorate of Health if the information relates to your medical records. 

11. CHILDREN'S PRIVACY

Personal data about children under 13 years of age is not collected except to fulfil legal obligations regarding the registration of medical records and due to accounting laws. Otherwise, it is not the policy of Klíníkin Ármúla ehf to collect or retain personal data about any individual under the age of 13.

When requesting the consent of a child or another individual who has difficulty receiving information, e.g., due to a disability such as blindness or deafness, illness, or senility, care shall be taken to ensure that the request is presented in a simple, clear, and accessible manner, accompanied by adequate education taking into account the person's maturity and skills.  

12. CHANGES

The privacy policy is reviewed regularly and may therefore undergo changes. You are therefore advised to read the privacy policy regularly, but changes to the policy take effect upon publication on the company's website; http://www.klinikin.is. We welcome all comments regarding the privacy policy and encourage you to send us an inquiry.