This Privacy Policy outlines how Borealis Data Center ehf. ("we," "us," or "our") handles and protects the personal information collected from users ("you" or "your") who visit our website. We are committed to maintaining the privacy and security of your personal data and ensuring compliance with the General Data Protection Regulation (GDPR), and the laws of the Republic of Iceland.

Information that we collect

We collect and process the following categories of personal information:Information you provide voluntarily: When you interact with our website or services, you may choose to provide personal information such as your name, email address, telephone number, and any other details you provide through contact forms or other communication channels.Automatically collected information: Our cookie policy is integral to our commitment to safeguarding your privacy. We utilize cookies in accordance with your preferences and settings, ensuring a personalized browsing experience tailored to your needs. These cookies enhance functionality, analyze site usage, and facilitate targeted advertising, all while respecting your consent and privacy choices. By navigating our site, you agree to using cookies in alignment with your preferences, as outlined in the pop-up window.

Use of personal information

We use the collected personal information for the following purposes:Providing and improving our services: We process your personal information to fulfill your requests, respond to inquiries, provide technical support, and enhance the functionality of our website. Communication: We may use your personal information to communicate with you, send important notices, and provide updates regarding our services, including marketing communications where permitted by applicable laws.Analytics and performance: We analyze the data collected to monitor and improve the performance, security, and user experience of our website. Compliance with legal obligations: We may process personal information to comply with our legal obligations, such as preventing fraudulent activities, enforcing our terms of service, and safeguarding the rights, property, and safety of our users and the public.

Data sharing and disclosures

We may share your personal information with third parties under the following circumstances: Service providers: We engage trusted service providers to perform various functions on our behalf, such as hosting services, website analytics, and customer support. These third parties are authorized to process your personal information only as necessary to provide their services to us and are obligated to maintain its confidentiality.Legal compliance: We may disclose your personal information to comply with applicable laws, regulations, legal processes, or enforceable governmental requests, or to protect our rights, privacy, safety, or property.

Data retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Once the retention period expires, we will securely dispose of or anonymize your personal information.

Data security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. We regularly review and update our security practices to ensure the ongoing confidentiality, integrity, and availability of your data.

Your rights

Under the GDPR and other applicable data protection laws, you have certain rights regarding your personal information. These rights include:

Access: You have the right to request access to the personal information we hold about you and receive a copy of that information.

Rectification: You have the right to request the correction of inaccurate or incomplete personal information.

Erasure: You have the right to request the deletion of your personal information, subject to certain legal exceptions.

Objection: You have the right to object to the processing of your personal information on legitimate grounds.

Restriction: You have the right to request the restriction of the processing of your personal information in certain circumstances.

Data portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format and have the right to transmit that data to another controller.

Withdrawal of consent: If we rely on your consent to process your personal information, you have the right to withdraw that consent at any time.

International data transfers

As an Iceland-based company, your personal information may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure appropriate safeguards are in place to protect your personal information when it is transferred internationally.

Data privacy in the cloud

We recognize the importance of safeguarding your personal information when it is stored or processed in cloud environments. To ensure your data's security and privacy in the cloud, we adhere to additional measures and standards:

Cloud Service Provider Compliance: We select cloud service providers who meet our stringent security and privacy criteria, including adherence to ISO 27017 and ISO 27018 standards. These providers are chosen for their ability to maintain the confidentiality and integrity of your data. The selected cloud service providers are responsible for:

Data Encryption: Your data, when transmitted to or stored in the cloud, is encrypted to prevent unauthorized access. The selected cloud service providers (they) use industry-standard encryption protocols to protect your information from interception during transmission and while at rest.

Access Control: Access to your personal information in the cloud is restricted to authorized personnel only. They employ robust access control measures to ensure that only those with a legitimate need can access and modify your data.

Data Residency: They may store your data in specific geographic regions to comply with legal requirements and data protection regulations. Rest assured that they take the necessary steps to ensure that your data remains protected, regardless of its location.

Data Backups: To prevent data loss, they maintain backups of your information in secure cloud environments. These backups are subject to the same stringent security and privacy controls as the live data.

Although cloud service providers implement robust security measures to protect the confidentiality and integrity of your data stored in the cloud, it is important to acknowledge that no system can be considered entirely impervious. While they take every possible precaution to mitigate the risks, they cannot eliminate them entirely. It is therefore imperative to exercise due diligence in safeguarding sensitive information, such as using strong passwords, enabling two-factor authentication, and regularly updating software and security protocols. By adhering to these best practices, cloud service providers can mitigate potential risks and ensure the utmost protection of your data.

Regular Audits: Borealis Data Center conducts regular audits and assessments of our cloud service providers to verify their ongoing compliance with security and privacy standards.If you have any concerns or questions regarding the storage and processing of your personal information in the cloud, please do not hesitate to reach out to Borealis Data Center using the contact information provided in Section 9 of this Privacy Policy.We will continue to review and update our cloud security practices to maintain the highest standards of data protection.

Changes to the privacy policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. We will post the revised version of the Privacy Policy on our website, and the effective date will be updated accordingly.

Contact us if you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at [email protected].