Introduction
In this privacy policy, you will find answers to who we are, how we collect, store, and use your information, and what rights you have in relation to this.
Data Controller
Sp/f KodioStrandatún 1
490 Strendur
VAT-number: 612111
Telephone: 76 50 00
Email: kodio@kodio.fo
Purpose and Legal Basis for Processing Personal Information
Regular Customer Communication
When you contact us via email or telephone, we collect information about you. The purpose of processing your information is:
- To handle and respond to your messages
- To address and respond to your inquiries
- To improve the user experience
- Managing offers
- To send automated messages
The processing of your information is conducted in compliance with the authorization stated in §8, paragraph 1, number 6 of the faroese data protection law.
Contact Form on the Website
By using the contact form on our homepage to send us a message, we collect information about you. The purpose of processing your information is to respond to the messages you send us through the website.
The processing of your information is conducted in compliance with the authorization stated in §8, paragraph 1, number 6 of the faroese data protection law.
Job Applications for Advertised Positions
When we post a job vacancy, we provide a form on our website where we gather information about you. The purpose of processing your information is to assess the suitability of applicants for the position.
The processing of your information is conducted in compliance with the authorization stated in §8, paragraph 1, number 2 of the faroese data protection law.
Types of information
Regular Customer Communication
- Full name
- Email address
- Phone number
- Job title
- Other voluntary information
Contact form on the website
- Name
- Email address
- Phone number
Job applications
- Full name
- Email address
- Phone number
- Brief description of yourself
- Other voluntary information
Will the information be transferred to foreign or third countries?
When you send us a message through the website, it is transmitted via Mandrill, a service provided by Mailchimp, based in the USA, which retains a copy of the messages for 90 days. You can review Mailchimp’s privacy policy here: https://mailchimp.com/legal/privacy. The messages sent through Mandrill, as well as those sent via email, are subsequently stored on Google’s email system, which is located in various locations, including the USA. You can find Google’s privacy policy here:https://policies.google.com/privacy?hl=en-DK&fg=1.
Email communications with current and prospective customers may also be logged in our customer management system. We use Hubspot, a system based in the USA. You can review Hubspot’s privacy policy here:https://legal.hubspot.com/privacy-policy.
When you submit a job application, your personal information, along with Mailchimp and Google, is stored on our server hosted by Digital Ocean, located in the Netherlands. You can read Digital Ocean’s privacy policy here:https://www.digitalocean.com/legal/privacy-policy.
How long do we keep your information?
Regular customer communication and website contact form:
We retain your personal information for as long as necessary to fulfill the purpose of processing. If we have no contact with you for 18 months, your personal information will be deleted.
However, the information may be stored for longer periods if required by other applicable laws.
Job applications for advertised positions:
If your job application is accepted, we will retain your personal information for 12 months after you have left the position.
If your job application is not accepted, your personal information will be deleted 6 months after the position has been filled.
Your rights
Under data protection legislation, you have specific rights concerning the processing of your personal information. These rights include being informed about the personal information we hold about you and, under certain circumstances, the right to have your information deleted.
If you wish to exercise any of these rights, please contact us via email at gdpr@kodio.fo. We will promptly respond to your request, confirming the rights you wish to exercise and verifying your identity.
The Right to Access
You have the right to request access to the personal information we process about you. This includes the right to obtain details about the specific personal information we hold, the purposes of the processing, and any other relevant information.
The Right to Object
You have the right to object to certain processing activities if you have legitimate grounds to do so. This means that you can request that your information not be used for certain purposes.
The Right to Rectification
You can request the correction of any personal information that you believe to be inaccurate or incomplete.
The Right to Erasure
You have the right to request the deletion of personal information that you believe we should no longer retain or have the right to keep. However, please note that this right is not absolute, as certain personal information may be exempt from deletion due to legal obligations, contractual agreements, or legitimate purposes that require the retention of such information.
The Right to Restriction of Processing
You have the right to request the restriction of processing your personal information. This means that while the information will not be deleted, it will be marked to limit further processing and restrict access to it.
The Right to Data Portability
In certain circumstances, you have the right to receive the personal information you have provided to us in a structured, commonly used, and machine-readable format. This enables you to transfer your personal information to another organization or service.
The Right to Non-Profiling
You have the right to object to being subjected to profiling, except when it is essential for the establishment or fulfilment of a contract.
The right to Withdraw Consent
Um viðgerðin av tínum persónupplýsingum er grundað á títt samtykki, hevur tú til eina og hvørja tíð rætt til at taka títt samtykki aftur.
If the processing of your personal information is based on your consent, you have the right to revoke your consent at any time.
Please note that revoking your consent does not affect the lawfulness of our processing of your personal information prior to the revocation. The revocation only applies to future processing activities
The Right to Complain
If you have any inquiries regarding the processing of your personal information, please feel free to reach out to us at gdpr@kodio.fo
If you are unhappy with how we handle your personal information, you have the option to file a complaint or contact the Data Protection Authority. You can find the contact details for the Data Protection Authority here: https://dat.fo.