Privacy Statement

Premium's  Privacy Statement  

1.  General
Premium ehf. (ID nr. 561210-0630, Aðalgötu 34, 580 Siglufirði,  hereinafter referred to as “Premium”, “the Company”, “we”, us”) cares about personal privacy protection. The Company strives to ensure that the processing of personal data is always in accordance with applicable privacy laws. This notice contains information on the personal data that the Company collects on individuals during its operations and the purposes of data collection. It also contains information about other data recipients and how long we retain data, as well as information on the basis on which Premium collects personal data, the rights of individuals, and other important information related to Act no. 90/2018 on Data Protection and the Processing of Personal Data.​

2.  What is personal data, and the processing of personal data?
Personal data is all information that can be traced to a specific individual, such as information about the individual’s name, ID number, address, email address, phone number, finances, health, IP address, and more. A more detailed definition of personal data can be found in Article 3, items 2–3 of the Act on Data Protection and the Processing of Personal Data. ​

The processing of personal data refers to all processing and use of personal data, such as collection, registration, storage, modification, or deletion. A more detailed definition of the processing of personal data can be found in Article 3, item 4 of the Act on Data Protection and the Processing of Personal Data.​

3. How does the Company process personal data?
Premiums data processing is carried out on a legitimate basis and in accordance with Act no. 90/2018 on Data Protection and the Processing of Personal Data. The Company also ensures that personal data is not further processed in a manner that is incompatible with the original purpose of processing.​ 

The Company will ensure compliance with the following principles:
  • Personal data is processed in a fair manner.
  • Personal data is only collected for clear purposes.
  • That no more than the necessary personal data is collected.
  • Personal data is accurate and updated when necessary.
  • Personal data is not retained longer than necessary.
  • That the security of personal data is protected through appropriate safeguards.​

4.  What personal data does Premium collect?
Premium collects various personal data on individuals depending on the company's activities. Sparnaður seeks to collect only the personal data that is necessary for the purpose of the processing. ​Sparnaður collects the following personal data about customers:

4.1. Collection of contributions from employers:
Premium has an agreement with Versicherungskammer (Bayern Líf) to collect fund members' contributions from employers. The personal information that Premium collects in connection with these activities is basic information (name, email address, telephone number and address), salary information and information about the employer.

4.2. Payment of contributions:
Premium is responsible for paying premiums for customers. In connection with these activities, it is necessary for Premimum to collect basic information (name, e-mail address, telephone number and address), salary details and contract number at Bayern Líf.

4.3. Disbursement of pension savings:
Premium pays out pension savings to customers from Bayern Life. The personal information that Premium collects in connection with these activities is basic information (name, email address, telephone number and address), pension savings balance and bank details.

4.4. Access registrations on the members' website:
In order for fund members to have access to electronic documentation and information about their contributions, they must provide an identification number and web key or use electronic ID when logging in to the fund members' website.

4.5. Access registrations to employers' website:
The website is intended to best serve employers in terms of premium submission and disclosure. When registering, you must provide an identification number and web key or use electronic ID. To enhance communication, Premium also retains an email address with the employer's contact person. 

4.6. Information disclosure:
Premium provides fund members with information on the status of contracts with Bayern Líf, premium overviews and business statements. The information Premium collects about you in connection with these services includes basic information (name, email address, telephone number and address), salary information and premium information.

5. Why does Premium collect personal information about you?
The purpose of the collection of information is in particular to: 
  • Be able to fulfil a contractual obligation. 
  • Can provide customers with requested services. 
  • Assist with premium registration. 
  • Handle contribution collection from employers. 
  • Pay premiums. 
  • Comply with legal obligations.

6. On what legal basis does Premium process your personal data?
Premium collects and processes personal data on the following legal basis: 
  • Your consent. 
  • To fulfil a contractual obligation. 
  • To comply with a legal obligation. 
  • To protect the legitimate interests of the company.

7.  How long does Premium retain personal data  ?
Premium only retains personal data for as long as it is necessary for the Company. When personal data is no longer needed, the Company deletes it in a secure manner.​

8.  From whom does Sparnaður collect data?
Premium generally collects personal information directly from the party to whom the information relates. Under certain circumstances, Premium collects information from third parties, such as employers and the German insurance company Vershicherungskammer (Bayern Líf). When obtaining information from third parties, Premium will endeavor to inform the individual concerned to the best of its ability.

​9. When and why does Sparnaður disclose personal data to third parties?
Premium shares personal information with third parties hired by the company to perform predetermined work, such as service providers, agents or contractors. In such cases, the company enters into a processing agreement with the relevant party. Such an agreement stipulates, among other things, its obligation to comply with Premium's instructions regarding the privacy of personal information and may not use it for any other purpose. At the same time, he is obliged to ensure the security of the information by appropriate means.

In other cases, it may also be necessary for Premium to share personal data with third parties, for example to German insurance company Versicherungskammer (Bayern Líf), PM-Premium Makler GmbH, credit institutions and when required to do so by law.

10. Transfer of personal data outside the European Economic Area
Premium is aware that strict conditions apply to transfers of personal data to countries located outside the European Economic Area. The company does not do so under any circumstances unless adequately authorised to do so in accordance with Act No. 90/2018 on Data Protection and Processing of Personal Data.

11. Your rights
If you have given your consent to the processing of certain personal data, you have the right under the Act on Data Protection and the Processing of Personal Data No. 90/2018 to withdraw your consent at any time. However, that right does not affect the lawfulness of the processing carried out before the withdrawal of consent. You also have other rights, such as the right to access your data, the right to have incorrect or misleading information rectified, the right to have your personal data deleted, the right to prevent the processing of your personal data and the right to port your own data. Please note that your rights are not always unequivocal and may be subject to various conditions.

12. Security of personal data
Premium has implemented appropriate technical and organizational security measures to ensure the security of personal data in accordance with the Act on Privacy and Processing of Personal Data no. 90/2018. This implies, among other things, that only those employees have access to personal information that needs it for their work. In addition, the company encourages employees to receive regular appropriate education and training on safety issues. 

13. Contact information for Premium
Name: Premium ehf. 
Address: Aðalgata 34, 580 Siglufjörður. 

If you have further questions about how Premium handles your personal information, you can send a message topersonuvernd@premium.is


14. Right to lodge a complaint with the Data Protection Authority
If you doubt that Premium will handle your personal information in accordance with Act No. 90/2018 on Privacy and Processing of Personal Data, you have the right to lodge a complaint with the Data Protection Authority (www.personuvernd.is).

15. Review of this Privacy Statement
This Privacy Statement was adopted on 19.12.2019 and will next be revised on 19.12.2023.
Leit