Alma is committed to ensuring the reliability, confidentiality and security of personal information that the company collects about its customers. This privacy policy is intended to inform customers and those who apply for an apartment with the company about what personal information the company collects, how the company uses such personal information and who gets access to the information.
This privacy policy covers personal information concerning the company's customers and those who apply for a rental apartment with the company. In this policy, customers are also referred to as "your" and Alma as "ours".
If you are in doubt as to how the privacy policy applies to you, please contact the company's operations department for more information.
The company strives to comply with privacy legislation in every respect, and this privacy policy is based on Act no. 90/2018 on personal protection and processing of personal data („personal protection law“), with subsequent amendments .
Personal information in the sense of this policy is any information about an identified or identifiable person, i.e. information that can be traced directly or indirectly to a specific person. Data that is non-personally identifiable or anonymous is not considered personal data.
We may collect personal information about you in connection with our communications and, depending on the circumstances of the rental relationship. Different personal information may be collected about different parties and the processing and collection of personal information may depend on the nature of your relationship with the company.
In connection with our communication with you, we may work with various personal data, such as:
In addition to the above information, the company may also collect and process other information that you provide to the company, e.g. about complaints, as well as other information that is necessary for the company for its activities.
As a general rule, the company collects personal information directly from you. In cases where personal information is obtained from a third party, the company will endeavor to inform you of this.
Information is obtained from Motus and from Creditinfo in relation to debt status and creditworthiness.
The personal information we process about you is primarily processed on the basis of the company's lease agreement with you. It applies to your contact information so that we can contact you.
Personal data may also be processed on the basis of a request to conclude a contract with the company. It may e.g. to apply to information processed about recommendations, credit score, debt status.
It may also happen that personal information about you is processed on the basis of our legitimate interests, e.g. regarding criminal records.
If you do not provide the company with the necessary information, it may result in the company not being able to enter into a rental agreement with you and/or the company being unable to fulfill its obligations based on the contract.
In cases where the collection and processing of personal data is based on your consent, you are always entitled to withdraw such consent. All communications related to such withdrawal or change in the content of the consent shall be directed to the Operations Department.
The company undertakes that all processing of personal information is legal, fair and transparent. Information will only be collected for specific and legitimate purposes and that collection and processing do not go beyond what is necessary based on the purpose of the processing. Processing shall in all cases be sufficient, appropriate and limited to what is necessary for the purpose of the processing.
The company may share personal information about you with contractors and consultants for their work for the company. Thus, personal information could e.g. been communicated to external parties who provide us with IT services, but also to service providers who take care of maintenance and repairs in our apartments.
Third parties who provide us with services according to the foregoing may be located outside of Iceland. The company will not share personal information outside of the European Economic Area unless this is permitted on the basis of relevant privacy legislation. The company will endeavor to inform you about the transfer of personal information to countries outside the European Economic Area. No such sharing takes place today.
Finally, personal information about you may be disclosed to the extent permitted or required by applicable law or regulation or in response to legal process such as subpoenas, subpoenas or court orders. Delivery may also be necessary in an emergency or to ensure the safety of the company's employees or third parties.
The company strives to take appropriate technical and organizational measures to protect personal data, with special regard to their nature. Examples of such security measures are access controls to systems where information about you is stored. These measures are intended to protect personal information against accidental loss or alteration and against unauthorized access, copying, use or disclosure.
The company will endeavor to retain only personal information about you for as long as is necessary based on the purpose of the processing, unless otherwise permitted or required by law. The company may, instead of deleting personal information, make it non-personally identifiable so that it cannot be traced to a specific person.
As a general rule, information must be deleted within four years from the end of the contractual relationship, but it may be that the information will be deleted earlier. Information covered by accounting law is kept for 7 years based on legal obligation.
Applications for rental apartments are deleted within 3 months.
You have the right to access and in certain cases a copy of the personal data we process about you as well as information about the processing.
In certain circumstances, you may also be authorized to request that personal information about you be deleted or that its processing be restricted. Then you have the right to have your personal information corrected, if it is incorrect or unreliable. It is therefore important that you notify us of any changes that may occur to the personal information you have provided to us, at the appropriate time.
In addition, you may be entitled to a copy of the information you have provided to us in computerized form, or that we send it directly to a third party.
When we process your personal data based on our legitimate interests, you can object to that processing.
However, your above rights are not without priority. Thus, laws or regulations may authorize or oblige the Company to refuse your request to exercise said rights.
If you want to use the rights described in Article 8. in this policy, or if you have any questions about this privacy policy or how we handle your personal information, please contact our operations department who will endeavor to answer your questions and advise you of your rights under this privacy policy.
If you are dissatisfied with the company's processing of personal information, you can send a message to Privacy
At the company, the operations department oversees the follow-up of this privacy policy. Below you can find the field's contact information:
The company's operational department: personuvernd@al.is
Contact information about the company:
Alma íbúðafélag hf.
TIN 611013-0350
Sundagarðar 8
104 Reykjavík
The company may from time to time change this privacy policy in accordance with changes in relevant laws or regulations or due to changes in the way the company processes personal information. If changes are made to this privacy policy, the updated version will be notified to you in the same manner as this policy was announced.
This privacy policy was published on 16.10.2018
