1. Introduction

This Privacy Policy applies exclusively to visitors of AVIA’s website. It outlines our commitments and practices regarding the collection, use, protection, and sharing of personal data of our website users, ensuring compliance with Icelandic laws nr 90/2018 and best practices according to the General Data Protection Regulation (GDPR) (EU) 2016/679.

2. Data Controller

AVIA is the data controller responsible for processing personal data under this policy. For questions or requests related to this privacy policy, please contact our Data Protection Officer at avia@avia.is.

3. Personal Data We Collect

To enhance your experience on our website and respond to your inquiries, we may collect, use, or process the following information about you:

• Country of Origin (automatically collected when you visit our website)

• Full Name (when you fill out a contact form)

• Email Address (when you fill out a contact form)

We use this information solely to understand our global reach and to respond to your inquiries.

4. Legal Basis for Processing

We process this personal data under the following legal basis:

• Consent: By visiting our website and providing your information, you consent to the processing of your data for the purposes outlined in this policy.

• Legitimate Interests: Processing is necessary for the purposes of the legitimate interests pursued by us, such as understanding website traffic and improving our services.

5. Purposes of Data Processing

The personal data collected is used to:

• Understand the geographical distribution of our website visitors.

• Respond to your inquiries and provide customer support.

6. Data Protection and Security Measures

We implement robust technical and organizational measures in compliance with Article 32 of the GDPR, including encryption, access control, and secure data storage solutions, to ensure a level of security appropriate to the risk associated with the processing activities.

7. User Rights

Under the GDPR, users have the following rights:

• Access: The right to be provided with a copy of their personal data (Article 15 GDPR). This can be requested by contacting us.

• Rectification: The right to require us to correct any personal data if it is inaccurate or incomplete (Article 16 GDPR).

• Erasure: The right to request that we delete personal data in certain circumstances (Article 17 GDPR).

• Restriction: The right to request that we restrict the processing of personal data in certain circumstances (Article 18 GDPR).

• Data Portability: The right to receive the data supplied to us, in a structured, commonly used, and machine-readable format in certain circumstances (Article 20 GDPR).

• Object: The right to object to the processing of personal data in certain circumstances (Article 21 GDPR).

Users may exercise these rights by contacting our Data Protection Officer at avia@avia.is.

8. Data Sharing and Third-Party Disclosure

AVIA does not sell, distribute, or profit in any form from the processing of your data and does not share your data with any irrelevant third parties.

9. Policy Updates

This Privacy Policy may be updated periodically to reflect changes in our practices, legal requirements, or the needs of our users. Notifications of significant changes will be sent via email to the users’ registered email addresses.

10. Compliance and Regulatory References

This policy is designed to comply with the requirements of the GDPR and the Icelandic Data Protection Act (Law No. 90/2018). We commit to monitoring our compliance with these laws and any other relevant regulations continually, to protect the data privacy rights of our users.

11. Contact Us

For further information about our privacy practices or if you have any questions or concerns, please contact us via email at avia@avia.is or through our website avia.is.