Legal

Privacy Policy

Icelandair Virtual · icelandairvirtual.org

Privacy Policy

Last updated: September 20, 2026

At Icelandair VIrtual, we take your privacy seriously. This policy explains what personal data we collect when you apply for a role, why we collect it, and how we protect it.


Who we are

Icelandair VIrtual

[Company Address]

hello@icelandairvirtual.org

{{#ENTITY_WEBSITE}}https://icelandairvirtual.org{{/ENTITY_WEBSITE}}

We are the data controller for the personal data you submit through our careers page.


What we collect

When you apply for a position, we collect:

  • Contact details, name, email address, phone number, location
  • Professional background, resume/CV, LinkedIn, GitHub, portfolio
  • Application responses, answers to screening questions, cover letter
  • Technical metadata, IP address, browser type, device info (collected automatically)
  • We only collect what we need to evaluate your application. We don't ask for sensitive data unless legally required or directly relevant to the role.


    Why we process your data

    PurposeLegal basis (GDPR)
    Reviewing and evaluating your applicationArt. 6(1)(b), pre-contractual steps
    Communicating with you about your candidacyArt. 6(1)(b), pre-contractual steps
    Keeping your profile for future opportunitiesArt. 6(1)(a), your consent
    Improving our recruitment processArt. 6(1)(f), legitimate interest

    How long we keep it

  • Active applicants: 6 months from the final hiring decision
  • Talent pool (opted-in only): 24 months from the date of consent
  • After these periods, your data is securely deleted unless we're legally required to keep it longer.


    Who we share it with

    Your data is only shared with:

  • Members of our hiring team directly involved in evaluating your application
  • Infrastructure and tooling providers (under data processing agreements)
  • We do not sell, rent, or trade your personal data. Ever.


    Your rights

    Under GDPR, you have the right to:

  • Access the data we hold about you
  • Correct anything that's inaccurate
  • Delete your data (the "right to be forgotten")
  • Restrict how we process it
  • Port your data to another service
  • Object to processing based on legitimate interest
  • Not be subject to purely automated decisions
  • To exercise any of these rights, email us at hello@icelandairvirtual.org. We'll respond within 30 days.


    International transfers

    Your data is processed within the European Economic Area. If we ever transfer data outside the EEA, we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses).


    Complaints

    If you believe we've mishandled your data, you have the right to lodge a complaint with your local data protection authority. We'd always prefer to resolve concerns directly first. Reach out at hello@icelandairvirtual.org.


    Changes to this policy

    If we make material changes, we'll notify you by email or with a notice on our careers page. The "last updated" date at the top of this page reflects the most recent revision.