Arctic Activity Travel in Iceland

1.0 Who does the Privacy Policy apply to
AATI emphasizes protecting the privacy of its clients and everyone who interacts with it to defend their human rights and privacy. The policy clarifies what information AATI collects about you, how it is used, how its security is maintained, and what rights data protection laws give you. The policy does not cover the activities of legal entities.

AATI processes personal data only for specific and clear purposes to provide the services you request, in accordance with data protection laws and this policy. The collection and use of your personal information by AATI is based on a contract between you and AATI. In some instances, AATI might ask for your consent to use your personal data. You can withdraw your consent anytime, and the processing will stop.

2.0 Types of Personal Information Recorded
Collecting and processing personal information is necessary for AATI to provide you with the services you request.
Only the essential client information is collected based on the services AATI delivers. AATI does not share your personal information with outside parties without your consent. AATI may need to share your necessary personal information with guides, contractors, and other suppliers so they can deliver the services you request.

2.1 Basic Information
AATI records basic client information when a trip is booked, including name, Social Security number, date of birth, gender, address, phone number, email address, and other necessary details. AATI also retains a copy of your identification, such as your passport or driver's license, whether in physical or electronic form.

2.2 Sensitive Personal Information
AATI records details about ethnicity, health conditions (such as the need for assistive devices), allergies (including food allergies), and religious beliefs related to food choices. In exceptional cases, AATI must gather information that qualifies as sensitive personal data. During an incident, AATI processes relevant data, which may include health and injury details. AATI does not collect or use sensitive information about you without your explicit permission and only when necessary.

3.0 Contact and Contract Information
AATI records all your communications through email, phone calls, or other media. AATI also processes information related to or provided in connection with agreements between you and AATI regarding services you've requested, including travel plans, travel times, and financial details such as bank account, payment, and credit card information.

4.0 Technical Information
Technical information refers to data that is collected electronically, such as through electronic monitoring and the use of the AATI website. This information can be both personally identifiable and non-personally identifiable.

4.1 Data Collected Via Electronic Monitoring
AATI keeps audio recordings of electronic communications and video recordings from security cameras on AATI's premises. If an audio recording is being made, it will be announced at the beginning of the communication.

4.2 Derived information about behavior and usage
AATI gathers information about the equipment you use to access its website, including your IP address, browser type, and the websites you visit and view.

4.3 Location Information
Details that AATI can process when a vehicle has a location device installed.

4.4 Non-Personally Identifiable Information
AATI collects non-personally identifiable data, such as how often pages are viewed on the AATI website. AATI uses Google Analytics to monitor, analyze, and improve its information systems and evaluate the success of its promotional efforts.

4.5 Links to Other Parties' Websites
AATI's website contains links to other entities' sites. Clicking these links may allow those parties to collect your personal info. Since AATI does not control these other sites, it isn't responsible for their privacy practices. We suggest reviewing the privacy policies of the sites you visit after clicking links from our site.

5.0 Other information
The above list is not exhaustive, and AATI may collect additional information about you as needed from time to time, depending on your business relationship or interactions with AATI.

6.0 Processing of children's personal data
In accordance with data protection laws, personal data of children is processed only when necessary to provide the requested services to minors. If a child is under 16, AATI obtains parental or guardian consent.

7.0 How does AATI handle personal information in its operations
AATI gathers and utilizes personal data for multiple purposes, including:

- Contact you to verify your identity and ensure security and reliability in transactions, including through electronic identification.
- Provide the requested services and manage inquiries, including developing and sustaining business relationships.
- Improve AATI's service quality and offerings and respond to any suggestions or complaints received.
- We will conduct marketing and promotional activities and provide you with personalized, tailored services. We will send you information about services that may interest you or that you have requested.
- Operate and maintain the AATI website to improve user experience and provide access to information about AATI's services.
- Issue an invoice in your name, receive payments from you for services provided, and record the transaction in AATI's accounting records.
- Perform statistical analysis of service channels or specific parts of AATI's operations. AATI conducts such analysis without identifying individuals whenever possible.

8.0 Where does AATI get its information from
AATI collects your personal information in two ways: the data you give and what is recorded automatically.

9.0 Your rights
Data protection laws give you specific rights, including access to information about whether AATI processes your personal data and how it is handled within AATI's operations. You can object to processing your personal data based on your circumstances or, in some cases, request that the processing be temporarily restricted. You can also object to using your personal data for direct marketing and choose not to receive promotional materials. Ask us to correct any inaccurate or unreliable information about you at any time. In some situations, you also have the right to request the removal of specific personal data about you. If you have a dispute about how AATI manages your personal information, contact us to help resolve it. You also have the right to file a complaint with the Icelandic Data Protection Authority by emailing postur@personuvernd.is. Send email.

10.0 Personal Information Security
AATI keeps your personal information in a secure environment that prevents unauthorized access. AATI regularly evaluates the risks of processing personal data and implements suitable security measures to protect clients' privacy. All AATI employees are dedicated to confidentiality; however, no service or software is entirely secure. If you are concerned that your personal information has been compromised or someone has accessed it, please email info@arctic-activity-travel-iceland.com as soon as possible. Send email. If AATI becomes aware of a security breach affecting you, we will notify you as data protection laws require.

11.0 Web Cookies
The AATI website uses cookies. Cookies are small text files that help analyze your site usage, improve its features, and track traffic with Google Analytics. You can turn off cookies at any time in your browser settings.

12.0 How long does AATI keep the information
AATI will retain your personal information only to determine if a business relationship exists with you or if it is legally necessary and required based on the original purpose for which it was collected. AATI keeps personally identifiable information only as long as needed and guarantees its security. Emails and other electronic communications are stored for five years. Audio recordings of phone calls and video content collected during electronic monitoring are not kept longer than what is allowed by the laws and regulations of the Icelandic Data Protection Authority regarding home electronic monitoring. They are automatically deleted once the retention period expires. Certain laws require storing specific information, such as accounting records and personal identification documents.