Hlutverkaseturs Privacy Policy
General
AE rehabilitation plc., identification number: 640505-0280, operates the Role Centre (hereafter referred to as “the RC”) and is the responsible party regarding the use of personal data gathered during its operation. RC is an activity- and rehabilitation-centre that operates based on laws no. 100/2007 regarding Social Security, no. 112/2008 regarding Health Insurance, no. 59/1992 regarding people with disabilities, and no. 55/2006 regarding labour market initiatives. All handling of personal data at the RC is in accordance with existing privacy laws, i.e. existing law no. 90/2018 regarding privacy protections and use of personal data.
The chief focus of the RC is to aid and provide motivation for people that have been unemployed for a lengthy period, experience social isolation, or have a desire to improve themselves and/or rejoin the workforce.
RC is located at Borgartun 1, 105 Reykjavik. RCs phone number is 695-9285 and its email address is hlutverkasetur@hlutverkasetur.is
Further information regarding the Role Centre’s work can be found on its website.
When and how does the RC handle personal data?
The RC uses various types of personal data. Personal data is defined as any information that can be used to identify a person. Which data is collected by the RC is situational.
Role Centre staff use, for example, personal data in relation to service agreements with the Department of Labour Affairs and the City of Reykjavik, during the creation of rehabilitation plans (when applicable), in communication with other professionals (when applicable and in consultation with the person involved), or while compiling the yearly report. In all these instances particular emphasis is placed on verifying that the information provided is exhaustive, appropriate, and not in addition to what its purpose requires. The RC furthermore stresses that no personally identifiable data appears in its yearly reports, only statistical information regarding attendance.
Staff manages personal data mentioned in the next section to comply with documentation requirements of service agreements.
What personal data does the RC work with?
The RC handles both general personal information and sensitive information. The information is only used for a legitimate purpose and in accordance with existing privacy laws. This information is gathered when a potential service user fills out a registration form. On this form people provide their name, identification number, residence, phone number, and email address. Also, people are asked for their chief source of income, their next of kin/contact person, how they intend to engage with our services, and about their hobbies and/or talents/strengths. In addition, an optional field is provided, titled: “Anything else we should know?” which sometimes contains sensitive information. Furthermore, there is a sign-in book that people sign daily and attendance sheets for various seminars provided.
When an individual is receiving a rehabilitation pension or special support additional sensitive information is also gathered.
Your rights under existing privacy legislation
You have, under certain circumstances, particular rights provided by privacy law. You have, for example, the right to know what personal information regarding you we are working with, and that this data is corrected if it is wrong. In some cases you have the right that particular information is deleted even if the maximum time that this information can be stored has not been exceeded. You can also request that information be deleted when it is no longer required to comply with the law. You may give us permission to use your information at any time and, as appropriate, withdraw this permission. These rights are conditional, and your request may be denied. In the case of partial or full denial of your request we will endeavour to explain our reasoning for this decision.
You can direct any questions you have regarding personal information by e-mail to the previously mentioned address.
You can always send questions and/or complaints to the Data Protection Authority (Persónuvernd). Their website, www.personuvernd.is, also contains further information and guidelines on the rights and duties of registered parties.
What is recorded when you contact the RC?
Phone calls received by the RC are neither recorded nor logged. Members of staff may temporarily note a caller’s name and number in some cases where further action is required.
Information regarding staff
The RC works with personal information of staff and contractors to facilitate payment of salaries and fees. Certain information is required this operation such as bank account numbers and the like.
Storage and deletion of data
The RC places particular emphasis on security when dealing with personal information and has taken the appropriate technological and procedural steps to ensure that; personal data is not lost, falls into the hands of third-parties, or becomes corrupted. All print-outs of personal data are always stored in locked compartments within the Centre. Data in digital form are individually password-protected and stored in password-protected computers used by staff that are tasked to work with personal information.
The RC retains information for as long as is necessary and in accordance with the purpose of its collection, including to comply with duties relating to legislation and accounting. For example, attendance sheets and the sign-in book are kept for 3 years, seminar sign-in sheets for 5 years, and digital and accounting records are kept for 7 years.
All changes to this privacy policy will be reported on the RC website.
This privacy policy was last reviewed and ratified on April 12th 2019.