Personal data and the rights of data subjects.

Overview of individual rights.

Requests are answered within 30 days of receipt.

• Access to data — A request for a copy of the personal data HÆ processes about you.
• Rectification — A request to correct inaccurate or incomplete information.
• Erasure — A request to delete data. Exceptions apply to data that must be retained by law (e.g. accounting records for 7 years).
• Restriction of processing — A request to pause the processing of data while a matter is under review.
• Data portability — A request to receive your information in a machine-readable format.
• Withdrawal of consent — The right to withdraw previously given consent to processing.
• Objection — An objection to processing based on the organization's legitimate interests.

A fuller account of data subjects' rights is in the HÆ privacy policy.

Privacy request.

Please fill in the form. Receipt is confirmed within five working days. You can write your request in English.

Requests by email.

Privacy requests can also be sent directly to personuvernd@hagsmunasamtokaeskunnar.is. We recommend the form above to speed up handling, since it makes sure the necessary information accompanies the request.

Complaints to the Data Protection Authority.

Individuals who believe that HÆ's processing of their personal data violates applicable data protection law have the right to lodge a complaint with Persónuvernd (the Icelandic Data Protection Authority):