Handling of personal data

When you choose to do business with us and make use of our personalized services, such as applying for an N1 card, an N1 key, establishing a regular business relationship, or shopping in our online store, you are asked to provide us with certain information about yourself. We collect this information so that we can provide you with the services you have requested.

We collect and store various personal data about our customers. Different personal data may be collected about you depending on whether you are doing business with the company personally or whether you are acting on behalf of a legal entity doing business with the company, e.g., a supplier. We collect this information so that we can provide the services that have been requested.

When you do business with us, we collect and maintain information related to your transaction history with us. We collect this information to provide you with an overview of your transactions with us and so that we can offer you a more personalized service.

When you shop in our online store, we collect personal data necessary for logging into the online store, such as name, email address, and phone number.

When you choose to communicate with us, e.g., emails, messages sent through web chat or web interfaces, recorded phone calls, letters, or other communications.

When you want to stay in touch with us and receive information (such as newsletters, marketing emails, and promotional brochures) from us on a regular basis, you are asked to provide us with the necessary information. This is subject to your choice.

Sometimes you are offered the option to voluntarily provide us with additional information about yourself. This is information we request because we believe it can help us provide you with better service. You never have to provide such information unless you choose to do so.

You may be offered the option to authorize us to process your information for profiling purposes, which enables us to provide you with information about products and services tailored to your needs. Profiling may be based on automated decision-making. Processing of information for profiling is always subject to your consent. If you conduct business with us on behalf of a legal entity, profiling will only be processed based on all purchases made by that legal entity, including purchases initiated by other individuals authorized to conduct business with us on behalf of the legal entity.

When you use our web interface, we also collect personal data through cookies, IP addresses, and other information related to the device you use (such as hardware type, operating system version, etc.). You can choose whether you wish to provide us with this information.

Footage from security cameras in and around N1 premises where such a system is installed and notified.

The personal data we collect about you depends on what services you have requested or the purpose for which you have contacted us. The information we collect includes:

Your name, national identification number (kennitala), address, phone number, and email address.

Credit card number, debit card number, billing information, or other bank-related information.

Your transaction history with us, including what products and services you have purchased from us.

Communications you choose to have with us, such as emails, messages sent through web interfaces, recorded phone calls, letters, or other communications.

Payment information/billing transaction information – e.g., dates of services performed or payments received.

Information about your use of our websites, including "My Pages" (mínar síður). This information includes, among other things, when you visit the site, how long you use it, your estimated location when using the site, and information about the device you use to access the site.

Camera surveillance: There may be security cameras (digital cameras) at N1 locations, and customers visiting N1 locations may therefore be recorded on video. The processing of information collected through camera surveillance is based on the company's legitimate interests, as the processing is carried out for property and security protection purposes. Care is taken to provide those subject to electronic monitoring by security cameras with appropriate information about the surveillance. Care is also taken to ensure that the surveillance is clearly notified and appropriate information about it is provided, by means of a sign or other prominent manner.

Mailing lists: If a customer signs up for N1's mailing list, the company will process information about the customer's email address and, as applicable, other information that the customer provides to the company, such as name, address, and gender. This processing is based on the customer's consent, but they are entitled to withdraw their consent at any time and unsubscribe from the company's mailing list.

If you act on behalf of an N1 partner, such as a supplier, contractor, or a customer that is a legal entity, N1 may process your contact information, such as name, phone number, and email address. N1 may also process communication history and, as applicable, billing information. This processing is necessary for the company to fulfill its obligations based on a contract with the partner in question. Furthermore, the company may be required to process information based on a legal obligation, such as accounting laws.

Marketing: N1 may use the personal data that customers have provided to the company to send them offers and advertisements based on this information. Such processing is based on the informed consent of the customers.

Complaints and suggestions: If you send us a suggestion or a complaint, N1 will generally process your contact information, such as name and email address, and the content of the complaint or suggestion that you have chosen to submit.

Grant applications: In connection with grant applications, N1 processes contact information, such as name, national identification number, email address, and phone number, as well as other information sent to the company in such an application. This processing is carried out based on your request to enter into a grant agreement with the company.

As a general rule, N1 obtains personal data directly from the customer or the customer's representative. However, information may also come from third parties. If personal data is obtained from a third party, the company will endeavor to inform its customers of such.

We may use your personal data to:

Provide you with the services or products you have requested.

Process requests you have submitted to us.

Offer you specific services under specific terms.

Inform you about new products and services.

Send you invoices for business with us or charge you for service and/or product purchases.

Assess your creditworthiness.

Understand how you utilize our services and products, so we can better further develop our selection of services and products.

Answer questions you direct to us.

When our locations are visited, customers may be recorded on video. The processing of material resulting from electronic camera surveillance is only carried out for property and security protection purposes. Processing of the information collected through camera surveillance is based on N1's legitimate interests.

We may share information about you with the following parties:

Authorities, such as government agencies, courts, and law enforcement authorities.

Credit rating agencies and financial institutions.

Our subsidiaries.

Collection agencies.

Service companies acting on our behalf.

Our specialists, such as lawyers, auditors, and external consultants.

We only share information with third parties pursuant to a data processing agreement stipulates the handling and security of personal data, unless otherwise required by a legal obligation. Should circumstances arise where fraudulent or illegal conduct is suspected, we will share with the appropriate parties personal data that may be relevant for the purpose of protecting our interests, your interests, and/or the interests of our customers.

In the event that we merge with another company and/or are taken over by other owners, the information may be transferred to the new company.

Personal data is stored in approved, access-controlled computer systems where care is taken to ensure that only those who need to have access to the data do. N1 ensures that all general computer system defenses are in place, updated, and monitored regularly.

All computer equipment involved in storing personal data is from approved suppliers; it is monitored and updated regularly.

Services are purchased from an approved security company that handles regular external vulnerability scanning of all external services in operation at N1.

We will retain your transaction history for up to 4 years in accordance with point expiration, unless the law requires or permits a longer retention period. If the information is no longer needed or the law dictates its deletion, the information will be anonymized and/or deleted.

Information covered by accounting laws is retained for 7 years from the end of the relevant financial year. It may be necessary to retain certain information longer, e.g., if it is likely that N1 will need to establish, exercise, or defend legal claims. In those cases, the retention period will be based on the rules regarding the limitation period of claims.

You have the right to receive information from us on how your personal data is utilized by us and what information we hold about you. You also have the right to update information about you so that it is correct, request corrections, or that information about you be deleted, provided there is no longer a reason for us to store it. In the case of profiling based on automated decision-making, it shall always be based on your consent, which you can withdraw at any time. You also have the right to submit comments regarding profiling and/or automated decision-making if you believe it affects your interests.

Similarly, you can request to have information about you delivered, but for that, you need to request a form to fill out at personuverndarfulltrui@n1.is

If questions or comments arise in connection with this privacy policy or our processing, or if you wish to complain about a possible violation of data protection laws, you should contact us by sending an email to the email address personuverndarfulltrui@n1.is

We will make every effort to respond as quickly as possible.

You also always have the right to direct your complaint to the Data Protection Authority (Persónuvernd) in accordance with applicable laws on data protection and the processing of personal data, currently Act No. 90/2018. The website of the Data Protection Authority can be found at www.personuvernd.is.

Personal data resulting from electronic monitoring is retained for as long as necessary, though never longer than 90 days unless permitted by law at any given time.

This privacy policy may change over time, e.g., due to changes in laws and regulations or official requirements directed at us and the handling of personal data. We therefore encourage you to regularly monitor updates, which we publish on our website.