Candidate Privacy Notice

Last updated: September 20, 2026

This notice is for people applying to roles at Icelandair VIrtual. It explains exactly how we handle your personal data during the recruitment process.

Data controller

Icelandair VIrtual

[Company Address]

hello@icelandairvirtual.org

What we collect and why

You provide directly:

Name, email, phone number, location

Resume/CV and cover letter

Answers to application questions

Links to professional profiles (LinkedIn, GitHub, portfolio)

Collected automatically:

IP address, browser type, device info

Pages visited and time spent on the careers site

We use all of this to evaluate your application, communicate with you, and, where you've opted in, consider you for future roles.

How long we keep your data

Active applications: 6 months from the final decision on your candidacy

Talent pool: 24 months, if you've given explicit consent to be considered for future roles

When retention periods expire, your data is permanently deleted from our systems.

Your rights

You can, at any time:

Request a copy of the data we hold on you

Ask us to correct or update it

Ask us to delete it

Withdraw consent for talent pool inclusion

Request that we restrict or stop processing your data

Email hello@icelandairvirtual.org and we'll respond within 30 days.

AI in our process

We use AI tools to help parse resumes and organise application data. AI is a tool that helps our team work faster, but it does not make hiring decisions. Every decision involving your candidacy is made by a human.

If you have questions about how AI was used in evaluating your application, just ask.

Complaints

You have the right to complain to your local data protection authority. We'd much rather resolve any concern directly, so please reach out first.