Privacy Policy – Arthritis Iceland

1. About the terms

The Arthritis Society of Iceland places great emphasis on the security, confidentiality and responsible handling of personal data in accordance with the Act no. 90/2018 on the Protection of Personal Data and Processing of Personal Data and the European General Data Protection Regulation (GDPR). These terms apply to all processing of personal data that takes place in connection with the association's activities, including membership, courses, the purchase of memorial cards and the use of the association's website.

2. What information do we collect?

We only collect the information that is necessary for the operation and services of the association.

This may include:

– Name, email address, telephone number and home address

– National Insurance number (if applicable, e.g. for membership)

– Payment information (e.g. purchase of a memorial card, course fees, membership fees)

– Registration information in relation to courses

– Email correspondence and other comments you send us

NOTE: When members request access to closed groups (e.g. on social media), they are asked if they have a rheumatic disease. Such information is used solely to confirm the validity of access and is neither stored nor recorded in the association's systems or databases.

3. Purpose of processing

We process personal data for the following purposes:

– To establish and maintain membership

– To process course registrations

– To process the purchase of memory cards

– To answer enquiries and provide a service

– To fulfil legal obligations (such as accounting)

– To improve the web experience and functionality

4. Data security

We implement technical and organisational security measures to ensure the security of personal data and prevent unauthorised access, alteration or loss of data.

5. Sharing with third parties

We share personal information only when necessary, e.g.:

– With service providers working on payment solutions, web hosting or system administration

– With public authorities when legally required

– Never with irrelevant third parties without consent

All partners and contractors who work with personal data do so on the basis of data processing agreements.

6. Cookie Policy

The Arthritis Society of Iceland website uses cookies to improve the user experience.

Types of cakes we use:

– Necessary cookies: To ensure the normal functioning of the website

– Analytics cookies: To collect anonymous information about website usage (e.g. with Google Analytics)

– Functional cookies: To remember a user's choices, e.g. language settings

Consent and control:

We use a cookie banner where users can accept or decline the use of optional cookies. You can also change your browser settings to manage or delete cookies at any time.

7. Your rights

You have the right to:

– Access the personal data we hold about you

– Demand correction of incorrect or insufficient information

– Requiring the erasure of data in certain circumstances

– Object to processing or restrict it

– Withdrawal of consent (if processing is based on consent)

– Lodge a complaint with the Data Protection Authority

Requests can be sent to: gigt@gigt.is

8. Data retention period

Personal data is not stored for longer than is necessary.

Account information is retained for a minimum of 7 years in accordance with accounting laws.

– Answers to questions about rheumatic diseases are not recorded or saved – they are used only to grant access to closed groups and are deleted immediately afterwards.

9. Communication and Controller

Enquiries about privacy, data or complaints can be sent to:

The Arthritis Society of Iceland

Email address: gigt@gigt.is

Telephone: 530 3600

Address: Brekkuhús 1, 112 Reykjavík.

10. Changes to the terms

The Arthritis Society of Iceland reserves the right to change these terms at any time. Changes take effect upon publication on the society's website.

Reykjavik, 7 April 2025