All of OR‘s handling of personal data is subject to the Act on data protection and processing of personal data and applicable rules in accordance with the Act. OR ensures that all processing of personal data within the company complies with the aforementioned Act and ensures that processors that gain access to personal data also comply with the Act.
OR informs individuals of the processing of personal data that takes place on behalf of the company and in what purpose it is performed. OR ensures that processing is not performed in any other purpose than already reported except with the full knowledge of the beneficiary and a satisfactory authorization under the Act on data protection.
Individuals can request information about the processing that takes place within OR and concerns them. They can object it if they consider it not to be in accordance with the applicable acts and regulations and, where appropriate, demand that false, misleading, or incomplete personal data be corrected or deleted.
OR guarantees that all processing of applicant‘s personal information is in accordance with OR’s privacy policy, the Icelandic act on data protection, and the processing of personal data.
a) Name
b) E-mail address
c) Phone number
d) Professional title
e) Organization (company, university, other)
f) Academic history
g) CV (if applicable)
h) Identification number
i) Banking details
For applicants that do not receive funding from VOR, items a) – g) apply, but for applicants who become recipients all the above items apply.
Those involved in processing the application, and privileged to personal information are:
- The fund's staff
- The board of the fund
- The professional council of the fund
- Specialists (experts on behalf of the professional council)
Information about applicants is stored at OR or on behalf of a company in Iceland or with a verified partner within the EEA, where the rules and regulations on data protection and privacy are the same as in Iceland. Personal information will never be handed over to a third-party, unless it is mandatory by law, government directive, court order, processing agreement or with the customer’s full consent.
OR reserves the right to make public the name of the research, the name of the grant recipient, and the amount of the grant as stated in Article 6 of VOR's allocation rules.
An applicant can request information regarding the processing of his personal information at OR if not hindered by the interest of another individual or legal entity. A request for the aforementioned information should be processed in a swift manner and should take no longer to process than one month from the day that the original request was received.
An applicant may also have the right to demand that all wrong, misleading, or improper personal information regarding him to be either corrected or deleted.
A customer may also file a complaint to the Icelandic Data Protection Authority at www.personuvernd.is.
Applicants must notify OR regarding any changes that must be made to his/her personal information that is stored by OR.
Access to personal information about a customer is limited to a group of staff which necessarily require such access in order to achieve the purpose of the processing. Employees are informed and aware of their duty to maintain the confidentiality and security of personal information to which they have access. Confidentiality remains after termination or resignation.
In other respects, than mentioned above, the processing of personal information shall always be in accordance with Icelandic law, especially law no. 90/2018 about data protection and the processing of personal information as well as the GDPR.
Reykjavik Energy Group’s privacy officer is Hörður Helgi Helgason, attorney at law at Landslög law firm, Borgartún 26, 105 Reykjavík, telephone: 520-2900, personuverndarfulltrui@or.is.