JONATANSSON & CO Legal Services
Privacy Policy
I. In general
Jonatansson & Co. Legal Services, Sudurlandsbraut 6, 108 Reykjavik (henceforth also “J&CO”, “we” or “the firm”) is concerned about protecting the privacy of its clients and we want you to know how we collect, use and disseminate personal data. This Privacy Policy encompasses personal data regarding individuals who are doing business with the firm, individuals who contact the firm, individuals who represent a legal entity who are doing business with the firm, as well as other individuals who contact the firm (henceforth collectively referred to as “client” or “you”).
II. Purpose and legal obligation
J&CO strives to fulfill its obligations according to privacy legislation in all regards and this Policy is based on the current Privacy Act, as well as the General Data Protection Regulation 2016/679 of the European Parliament and the Council (EU) of 27 April 2016.
III. The collection and processing of personal data by Jonatansson & CO
We collect and preserve various personal data regarding our clients. Different personal data may be collected about you, depending if you yourself are doing business with the firm or if your are representing a legal entity doing business with the firm.
IV. Sharing with third parties
J&CO may share your personal data with third parties, such as in connection with their contractual relationship with the firm, or for the legal service to you or the company whose contact you are.
We may also share your personal data with third parties to the extent that is permitted or required on the basis of applicable laws and regulations, such as to the government, the courts, the counterparty in a dispute, witnesses, colleague’s of clients or other interested parties.
Also, personal data might be shared with third parties who supply us with information technology services and other services related to processing and which form part of the firm’s activities.
Finally, personal data on you may be delivered to the extent permitted or required on the basis of applicable laws or rules or to respond to legal measures such as house searches, subpoenas or a court order.
V. Security of personal data
J&CO seeks to take appropriate technical and organizational measures to protect personal data with particular regard to their nature. These measures are intended to protect personal data against being lost or changed by accident and against unauthorized access, copying, use or dissemination. Examples of security measures taken by J&CO are access controls to the firm’s systems and the encryption of data when appropriate.
VI. Changes and corrections to personal data
It is important that the personal data processed by J&CO are both accurate and pertinent. Therefore, it is important that the firm be notified of any changes that may occur to your personal data.
You have the right to have unreliable personal data about you corrected. Taking into account the purpose of processing your personal data, you also have the right to have incomplete personal data about you completed, including by submitting additional information.
VII. Your rights regarding the personal data processed by the firm.
You have the right to obtain confirmation whether we process personal data about you or not, and if so, you may request access to the data and how it is processed. You have the right to transfer your own data. You have the right to correction and deletion of personal data (“the right to be forgotten”). Furthermore, you have the right to complain to The Data Protection Authority and to object to any promotional material for direct marketing.
Under certain circumstances, you may request that your personal data be deleted without delay, e.g., where retention of the data is no longer necessary in light of the purpose of the processing or because you have withdrawn your consent for the processing of the personal data and the processing is not based on any other authorization. If the processing is based on consent, you may at any time withdraw your consent.
If you do not want to have your data deleted, e.g., because you need them for your defence against a claim, but you nevertheless do not want them to be processed further by the firm, you may request their processing to be limited.
If the processing of your personal data is based on legitimate interests of the firm, you also have the right to object to such processing.
However, your above rights are not absolute. Thus, laws may obligate the firm to reject a request for deletion or access to data. In addition, the firm may reject your request in consequence if the firm’s rights, such as on the basis of intellectual property rights or the rights of other parties, such as to privacy, if the firm considers these rights to prevail.
VIII. Inquiries and complaints to The Data Protection Authority
If you wish to exercise the rights described in this Policy, or if you have questions regarding this Privacy Policy or how the firm processes your personal data, please contact us, cf. Article 9 of this Policy.
If you disagree with the firm’s processing of personal data, you may submit a communication to The Data Protection Authority (www.personuvernd.is).
IX. Contact information
Below you can find our contact information:
Jonatansson & Co legal service
Sudurlandsbraut 6 (4th floor)
108 Reykjavik
e-mail: info@jonatansson.is
tele: +354 533 3434
X. Revision
J&CO may from time to time change this Privacy Policy in accordance with changes to applicable laws or regulations or as a result of changes in the way the firm processes personal data.
Any changes that may be made to this Policy will take effect after the updated version has been published on the firm’s website.
15 July 2018