Privacy Policy

Last updated: September 20, 2026

At Icelandair VIrtual, we take your privacy seriously. This policy explains what personal data we collect when you apply for a role, why we collect it, and how we protect it.

Who we are

Icelandair VIrtual

[Company Address]

hello@icelandairvirtual.org

{{#ENTITY_WEBSITE}}https://icelandairvirtual.org{{/ENTITY_WEBSITE}}

We are the data controller for the personal data you submit through our careers page.

What we collect

When you apply for a position, we collect:

Contact details, name, email address, phone number, location

Professional background, resume/CV, LinkedIn, GitHub, portfolio

Application responses, answers to screening questions, cover letter

Technical metadata, IP address, browser type, device info (collected automatically)

We only collect what we need to evaluate your application. We don't ask for sensitive data unless legally required or directly relevant to the role.

Why we process your data

Purpose	Legal basis (GDPR)
Reviewing and evaluating your application	Art. 6(1)(b), pre-contractual steps
Communicating with you about your candidacy	Art. 6(1)(b), pre-contractual steps
Keeping your profile for future opportunities	Art. 6(1)(a), your consent
Improving our recruitment process	Art. 6(1)(f), legitimate interest

How long we keep it

Active applicants: 6 months from the final hiring decision

Talent pool (opted-in only): 24 months from the date of consent

After these periods, your data is securely deleted unless we're legally required to keep it longer.

Who we share it with

Your data is only shared with:

Members of our hiring team directly involved in evaluating your application

Infrastructure and tooling providers (under data processing agreements)

We do not sell, rent, or trade your personal data. Ever.

Your rights

Under GDPR, you have the right to:

Access the data we hold about you

Correct anything that's inaccurate

Delete your data (the "right to be forgotten")

Restrict how we process it

Port your data to another service

Object to processing based on legitimate interest

Not be subject to purely automated decisions

To exercise any of these rights, email us at hello@icelandairvirtual.org. We'll respond within 30 days.

International transfers

Your data is processed within the European Economic Area. If we ever transfer data outside the EEA, we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses).

Complaints

If you believe we've mishandled your data, you have the right to lodge a complaint with your local data protection authority. We'd always prefer to resolve concerns directly first. Reach out at hello@icelandairvirtual.org.

Changes to this policy

If we make material changes, we'll notify you by email or with a notice on our careers page. The "last updated" date at the top of this page reflects the most recent revision.

Careers

Open positions