Data Protection Declaration
Privacy Notice
Introduction
We are dedicated to protecting your privacy. We do not collect and use any more of your personal data than is necessary. By using our services, you accept our processing of your personal data to the extent necessary for providing the service.
We process your personal data in accordance with Icelandic data protection law.
This Privacy Notice explains how we collect and use your personal data when using our website and with CCTV at Keflavík Airport (KEF). It also describes your rights towards us and how to exercise them.
For any matters related to privacy and data protection, you are welcome to contact us by sending an email to [email protected].
If you wish to request access to the personal data processed by Isavia or its subsidiaries, please log in to Isavia's authentication portal using your electronic ID. Once logged in, you can submit a request to view your personal data. Click here to log in.
Key points
Data collection and use: We collect and use only the personal data necessary to provide our services.
Legal compliance: All data processing activities are carried out in compliance with Icelandic data protection laws.
Your rights: You have rights concerning your personal data, including the right to access, correct, and request deletion of your data. Please contact us to exercise these rights.
More information
Information you give us
You may directly or indirectly provide us with information about yourself when you use any of our services through our website or contact us via our web portals. This information may include:
Personal contact information: Name, address, email address, telephone number, etc.
Payment information: Credit and debit card data
Information we collect about you
When you use our services (e.g., booking a parking space or receiving flight notifications via social media), we may collect the following information:
Personal and contact information: Name, email address, phone number, etc.
Information on goods and services: Information about the goods and services you purchase from us
Financial information: Negative payment remarks, if applicable
Historical information: Purchase, payment, and credit acceptance history
Information about interaction between you and Isavia: Interaction via Isavia's website
Device information: IP address, language settings, browser settings, time zone settings, etc.
Geographical information: Your geographical location
Cookies
Name
Purpose
Google Analytics
_ga
_gat
_gid
nmstat
These cookies are used to collect information about how visitors use our website. We use the information to compile reports and to help us improve the website. The cookies collect information in an anonymous form, including the number of visitors to the website and blog, where visitors have come to the website from and the pages they visited.
Accessibility settings
userstyles
Cookies used to configure the best accessibility settings to the web for users with reading difficulties, f. ex. dyslexia and visual impairment.
Siteimprove
siteimproveses
nmstat
sz_notrack
Cookies used to help the website perform at it's best, for example improving accessibility, SEO, content quality, security issues.
Facebook Advertising
fr
_fbp
This cookie will help deliver our advertising to users who have already visited our website when they are on Facebook or a digital platform powered by Facebook Advertising.
Allowing cookies is not strictly necessary for the Website to work, but doing so will provide you with a better browsing experience. These cookies are placed as the default, but you can delete or block these cookies. If you do some features may not work as intended. If you indicate your approval by clicking ‘I understand’ on the cookies banner, we will receive all cookies from the Website.
Isavia only shares information with third parties for processing purposes related to the purposes mentioned here.
Isavia stores information securely in accordance with its procedures for each processing activity.
The duration for which we keep your information varies:
Materials produced in the course of our work must be preserved for 30 years in accordance with the Public Archives Act No. 77/2014, after which they are submitted to the National Archives. This includes enquiries related to the Freedom of Information Act and all queries received through our web portals.
Other personal information is stored only as long as necessary and then deleted in accordance with Isavia's internal procedures.
Isavia operates a surveillance system in Keflavik Airport and is the controller for processing personal data from this system. The primary purposes of surveillance include safety, safeguarding assets, and aviation security. Additionally, footage may be used for supervising building utilization, development, and staff training. For purposes other than security, we strive to ensure individuals are not identifiable.
Footage is accessible to a narrow group of Isavia staff and may be shared with a processor for bug analysis and updates (Dallmeier). Footage related to accidents or criminal acts can be handed over to the police, and to insurance companies if necessary for an insurance case. The footage is stored for 30 days, except in limited cases where the law allows for longer storage.
Other operators at the airport may also use surveillance systems which are not the responsibility of Isavia.
According to data protection law, you have the right to:
Know about and access the information we have on you
Correct inaccurate or incomplete information about yourself
Have the information forwarded to a third party
Have the information erased
If you wish to request access to the personal data processed by Isavia or its subsidiaries, please log in to Isavia's authentication portal using your electronic ID. Once logged in, you can submit a request to view your personal data. Click here to log in.
For further information or requests, please contact the Data Protection Officer at [email protected].