Friðhelgisstefna

1. Introduction

The aim of our privacy policy is to provide you with complete information about who we are; how we collect, store and use your data; and about your rights in this regard.

2. Data controller

Nora
Bryggjubakki 12
110 Tórshavn
Telephone: + 298 30 69 90
E-mail: nora@nora.fo

3. Purpose and authority

When you subscribe to our newsletter on our website, we collect data about you. Collecting this data allows us to send you our newsletter.

When you fill out a form on our website, we collect data about you. Collecting this data makes it possible for you to attend NORA events or to apply for a NORA grant.

The legal authority to process your data is granted pursuant to section 8(1)(1) of the Data Protection Act (Løgtingslóg nr. 80 frá 7. juni um vernd av personupplýsingum).

Types of personal data

We process the following types of personal data about you:

General personal data:

  • Given name
  • Surname
  • Occupation
  • Telephone number
  • E-mail address
  • Address
  • Payment information

Sensitive personal data:

  •  Allergies

4. Sharing personal data

We share your personal data with our data processor, who help us process your data properly and safely. All processing of your personal data is carried out by the data processor in accordance with a data-processing agreement between us and the data processor.

Will the data be transferred abroad or to third parties?

When you subscribe to our newsletter or sign up for an event, your information is sent using Mandrill. Mandrill saves a copy of the message for 90 days. Mandrill is owned by US-based Mailchimp. You can read Mailchimp’s privacy policy here: mailchimp.com/legal/privacy. 

Our grant-application forms are managed by Umsokn. Information submitted in a grant-application forms are safely stored in an EU country. You can read Umsokn’s privacy policy here: umsokn.com/page/privacy-policy.

5. How long do we retain your personal information?

We retain the personal information you submit when subscribing to our newsletter until you ask us to erase it.

Other information is stored in NORA’s electronic application and document-management system and will be transferred to Tjóðskjalasavnið for storage after the end of the record-keeping period for the matter the data relates to was concluded.

6. Your rights

The Data Protection Act invests you with certain rights that determine how we process your personal data. You are, for example, entitled to know which personal data we have about you and to have the data erased, provided certain conditions are met.

If you would like to exercise your data-protection rights, please write to us at nora@nora.fo. We will then contact you regarding the right(s) you wish to exercise, as well as to confirm your identity.

The right to be informed

You have the right to request information about the personal data that we collect about you. This means that you may inquire about which personal data we process, for what purpose etc.

The right to object

You have the right to object if you disagree with the legitimacy of an aspect of our data processing. This means that we may continue to use your personal data for any other legitimate purposes.

The right to rectification

You have the right to have inaccurate personal data rectified if they are incorrect.

The right to erasure

You have the right to request that we erase personal data that we have inappropriately stored. This right is not absolute. The data will not be erased if they are covered by other legislation, or if agreement and purpose provide us with the right to store them.

The right to restrict processing

You have the right to request that processing of your personal data be restricted. This does not mean that your personal data will be deleted, but they will be classified as restricted from processing, and access will be limited.

The right to data portability

Under certain circumstances, you have the right to obtain the personal data that you have provided us with yourself. Data are delivered in an organised, commonly used, digital format.

The right to restrict processing

You have the right not to be subjected to profiling unless it is necessary for the completion of an agreement.

The right to withdraw consent

If the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time.

If you choose to withdraw your consent, it will not affect the legitimacy of our processing prior to your withdrawal. If you withdraw your consent, the withdrawal only applies to future processing.


The right to object

If you have any questions regarding the processing of your personal data, you are welcome to contact us at nora@nora.fo.

If you disagree with our processing of your personal data, you can contact the Data Protection Authority for further information or to file a complaint. The Data Protection Authority’s contact information is available at dat.fo.

This policy was updated on 14. January 2023.