Privacy Policy of Advise ehf
General
Advise is committed to privacy, data protection, and data security. This privacy statement outlines how personal data is processed, secured, and the rights of employees, customers, and other contractors and individuals.
Data Controller
Advise ehf., reg. no. 590320-1370, Hlíðarsmári 6, 201 Kópavogur, acts either as a data controller or a data processor for the processing of personal data related to Advise’s services.
Personal Data Processed by Advise
Advise processes personal data both as a data controller, concerning information about its employees and customers that the company is required to process in accordance with laws, regulations, contracts, the consent of the data subject, or other legitimate interests of the data controller. Additionally, Advise acts as a data processor for its clients based on agreements, the consent of the data subject, or other legitimate interests.
Advise processes personal data of its customers for three main purposes:
1. To provide access to services in accordance with the terms and conditions or business agreements,
2. To ensure that services are tailored to their needs, and
3. To communicate with them for marketing purposes.
On the Advise website, advise.is, the company collects certain information through the use of cookies and similar technologies. More details can be found here .
Advise only processes personal data that is necessary for providing services and to the extent permitted by applicable laws and regulations.
Disclosure to Third Parties
Advise does not share personal data with third parties unless consent has been obtained, in accordance with the terms and conditions, business agreements, or as required by law or a court order.
To fulfill obligations towards its customers, Advise may need to share personally identifiable information with service providers, such as IT hosting providers and telecommunications companies.
Advise uses the Google Firebase Authentication service for customer authentication during login. Login-related information is shared with Google Inc. as a data processor. Google processes data such as IP addresses, email addresses, user passwords, and phone numbers for authentication purposes. The information is shared with Google in an aggregated and anonymized format.
For more details on what data Google collects, how it is used, and how to manage the information sent to Google, please refer to the following pages:
Google Firebase Data Processing Terms
Google Privacy Policy
Transfer of Personal Data Outside the EEA
Advise uses service providers located outside the European Economic Area (EEA), such as for customer authentication (Google Firebase) and hosting (Amazon), which in some cases may process personal data outside the EEA. In such instances, we ensure that data transfers to non-EEA countries occur only in accordance with applicable data protection laws and based on Standard Contractual Clauses (SCCs) for data protection.
Security of Personal Data
Advise implements appropriate security measures to prevent personal data from being lost, altered, disclosed, or accessed without authorization. Access to the data is also restricted to individuals who require it and are bound by confidentiality obligations.
If a security breach occurs that affects personal data, we will report it to the Icelandic Data Protection Authority (Persónuvernd) and, where applicable, notify other relevant parties as required by law.
If you have any inquiries or concerns regarding the processing of personal data, you may contact us in writing at advise@advise.is. If you feel that Advise has not adequately addressed your concerns, you may file a complaint with the Icelandic Data Protection Authority (www.personuvernd.is).
This Privacy Policy was approved on February 1, 2022.
Our privacy policy is subject to continuous review, and changes may be made. Any such updates will be published on our website.