13th of September 2018
- GENERAL PROVISIONS
- THE LEGISLATION
Act no. 90/2018 on Data Protection and the Processing of Personal Data, as well as the relevant part of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
Maskína is responsible for the recording of personal data and their processing in the company’s operations. Maskína is the data controller within the meaning of the Act on the Protection of Privacy, and is frequently the data processor, e.g. when conducting surveys on behalf of customers. In some instances it is the joint controller with others.
The parties with whom Maskína would, in some cases, share data, cf. Section 5 of this policy, are independent controllers as regards their data processing. They are independently responsible for complying with privacy laws when it comes to their handling of data. Normally, Maskína will never transfer data to third parties.
Anyone who wants further information or has any questions on privacy can contact Maskína, e.g. by calling 578 0125 or e-mailing maskína@maskina.is.
- PROCESSING AND COLLECTION OF PERSONAL DATA
Maskína operates according to the strictest data protection standards, and places great importance on safeguarding the confidentiality and security of personal data. Maskína is a member of ESOMAR, the international organisation for market, social, and opinion researchers, and operates according to its strict code of conduct.
Maskína takes care to present data so that responses or results cannot be traced to individuals. All Maskína employees sign a non-disclosure agreement to ensure the confidentiality of all information concerning respondents and purchasers of research services.
Maskína may retain the following personal information in connection with individual projects:
- Name, personal identity number, address, gender, nationality and telephone number. Maskína uses this information so everyone has the opportunity to take part in surveys conducted by the company.
- The name, telephone number and e-mail address are required in order to answer queries from individuals.
- In order to control the workload of individual respondents, Maskína oversees the participation of individuals in its panel, whose members take part in a number of market and opinion surveys.
- The name and e-mail of company representatives and the scope and nature of the transaction, in order to fulfil requirements according to the Act on Accounting and for quality control.
The collection and processing of personal data is in all instances based on the consent of the individual, and the consent can always be revoked.
Responses in Maskína’s surveys can never be traced to individuals. Maskína promises that the processing of personal data will be fair, legal and transparent.
- TRANSFER OF PERSONAL DATA
We will never provide information about individuals to third parties without the prior consent of the individual in question. Personal data may be shared with a processor who is our service provider, contractor or agent, for the purpose of completing a project. We only transmit to processors the personal data that they require for the above purpose, in which case special agreements are made with these entities, requiring them to maintain the security of the data and to only use them for this purpose.
- RETENTION OF INFORMATION
Maskína does not save personally identifiable information with individual answers. Personally identifiable information in sample files is deleted 30-60 days after a report on the results of the research is delivered. The deletion of personally identifiable information marks the conclusion of the research.
- RIGHTS OF RESPONDENTS
Maskína ensures that respondents will receive information about their personal data retained by Maskína, upon written request to firstname.lastname@example.org. Such information includes the data on the individual in question, the data processing, whether the data are up to date and correct and whether and when they will be deleted.
Such a request will be processed and the information delivered within a reasonable period, albeit with some possible limitations, e.g. if the request involves trade secrets or intellectual properties.