Privacy Policy

Who is responsible

The controller of your data is Íranska Samfélagið á Íslandi — the Iranian-Icelandic Community — a non-profit association registered in Iceland, Viðihvammur 1, 220 Hafnarfjörður.

Any question about your data goes to info@iranskasamfelagid.is.

What we collect when you open an account

To be a member you give us a name and an email address. Everything else on your profile is optional and you can change or clear it at any time.

• Your name and email address, and a password stored only as a cryptographic hash — we never see it.
• If you sign in with Google instead, we receive your name, email address and profile picture from Google, and nothing else. Not your Google password.
• Anything you choose to add to your profile: a photograph, a short biography, your city, telephone number, education, workplace and preferred language.
• Your kennitala, if you enter it.

Why we ask for a kennitala

The kennitala is optional for an ordinary member account. It is required for a donation and for registering a child.

We use it to keep the membership register unambiguous, to have payment claims issued for donations, and to report participants in children's activities where we are obliged to.

The first six digits of a kennitala are a date of birth, and the site uses them for one more thing: sending you a birthday greeting. If you would rather we did not have it, leave the field empty or clear it later in your profile.

Events, classes and children

When you register for an event we store which event and when you registered.

For a children's activity we also store the parent's name, email address and telephone number, and each child's first name, last name and kennitala. A parent or guardian gives us this, we are required to report the participants, and only the administrators running that activity can see it.

Donations

A donation record holds your name, kennitala, telephone number, the amount and any note you wrote.

The site never receives card numbers or bank credentials — the payment happens in the bank, not here.

Donation records are part of the association's accounts, so they are kept for as long as Icelandic accounting law requires. That means a donation record remains even after you close your account, though it is no longer linked to an account.

Messages, applications and what you publish

The contact form stores your name, email address, subject and message. A job application stores your name, email address, covering letter and a link to your CV. A volunteer application stores your name, email address, motivation and skills. Business listings, appointment requests, reviews, stories, comments and photographs store what you write and send.

What you publish is public. What you send us privately is read by the board and by the administrators it concerns.

Newsletter

If you subscribe we store your email address and your language, and we use them for nothing but the newsletter. You can unsubscribe at any time in your settings or from the link in the email.

Notifications

If you allow notifications, your browser gives us an address to deliver them to and two encryption keys, and we store those together with your browser's name and your language.

The message itself is encrypted so that only your browser can open it — the push service that carries it (Google, Mozilla or Apple, depending on which browser you use) cannot read it.

Turn notifications off in your settings or in the browser and the record is deleted.

Our own website statistics

For each page opened we store four things: the address of the page, the language, the site you came from if there was one, and the time.

We store no IP address, set no cookie for it, and there is nothing in these records that points back to a person. This happens for every visit and we do not ask permission for it, because it identifies nobody.

Google Analytics

We use Google Analytics to understand how the site is used: which pages people read, where they arrive from, and what is worth writing more of.

It sets its own cookies (their names begin with _ga) and Google receives the pages you open, roughly where you are, and your IP address, which is shortened. It is never used to show you advertising, and Google's advertising features are switched off for this site.

You can turn it off at the bottom of this page. Doing so stops it and deletes those cookies.

Cookies

The cookies that keep you signed in and the one that remembers your language: those the site needs to work at all. On top of those, the Google Analytics cookies described above, which you can turn off at the bottom of this page. No advertising cookies and no cross-site tracking.

Where your data is kept

The database and the files you upload are held by Supabase in Ireland. The website itself runs on a server in Finland. Both are inside the European Economic Area.

Data is encrypted in transit and at rest, and rules inside the database itself limit each row to you and to the administrators who need it.

Nobody outside the association sees your data, and we sell nothing to anyone. The companies that host the site and the database can technically reach it as part of running the service and are bound by contract. Google sees your email address only if you chose to sign in with Google, and receives the analytics data described above unless you have turned it off.

How long we keep it

Your account and everything attached to it stays until you delete it.

Deleting your account in Settings removes your profile — including your kennitala and telephone number — your event registrations along with any children you registered, your applications, reviews, appointment requests, comments, stories, notification subscriptions and the photographs you uploaded, and it unsubscribes you from the newsletter.

What stays is what the association must keep: donation and accounting records, with your name kept for the accounts and the link to your account removed. The anonymous page statistics are unaffected, because they never held anything about you in the first place.

Your rights

You have the right to see what we hold about you, to have it corrected, to have it deleted, to object to how we use it, and to receive a copy of it.

Most of it you can do yourself: correct your details in your profile, delete your account in Settings.

For anything else — including a copy of everything we hold about you — write to info@iranskasamfelagid.is and we will answer within one month.

If you believe we are handling your data wrongly you may complain to Persónuvernd, the Icelandic Data Protection Authority, at personuvernd.is.

Changes to this policy

We may update this policy. The date at the top of the page is the date of the current version, and we announce material changes to members by email.