Privacy Policy

The University of Iceland Centre for Artificial Intelligence (Gervigreindarsetrið) is committed to protecting your privacy and ensuring the security of your personal data. This privacy policy explains how we collect, use, and protect information when you visit our website.

1. Data Controller

The AI Research Center at the University of Iceland is the data controller for this website.

Contact Information:
- Email: ai@hi.is
- Address: Háskóli Íslands, Sæmundargata 2, 102 Reykjavík, Iceland

2. Legal Basis

We process personal data in accordance with Act No. 90/2018 on Data Protection and the Processing of Personal Data (the Icelandic Data Protection Act) and the General Data Protection Regulation (GDPR).

3. Data We Collect

3.1 Analytics Data (with your consent)
When you accept cookies, we collect:
- Pages visited and time spent on pages
- Browser type and device information
- Referring website
- General geographic location (country/region)

This data is used solely to improve our website and understand how visitors use it.

3.2 Account Information (if you create an account)
If you register on our website, we collect:
- Name
- Email address
- Subscription preferences
- Email verification status

3.3 Contact Form Submissions
When you submit a contact form, we collect:
- Your name
- Email address
- Message content

4. Cookies

We use cookies to:
- Remember your cookie consent preferences
- Track anonymous page views (only with your consent)
- Maintain dark/light mode preferences

You can accept or decline cookies when you first visit our website. You can change your preferences at any time by clearing your browser cookies and revisiting the site.

5. How We Use Your Data

We use collected data to:
- Improve our website content and user experience
- Respond to your inquiries
- Send newsletters and updates (if you subscribe)
- Fulfill legal obligations

We do not sell your personal data to third parties.

6. Data Retention

- Analytics data: Retained for up to 26 months
- Account data: Retained until you delete your account
- Contact form submissions: Retained for up to 2 years

7. Your Rights

Under GDPR and Icelandic law, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your data
- Portability: Receive your data in a portable format
- Object: Object to certain types of processing
- Withdraw consent: Withdraw consent for data processing at any time

To exercise these rights, contact us at ai@hi.is or use the data management features in your account settings.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include:
- Secure HTTPS connections
- Regular security updates
- Access controls for staff

9. Third-Party Services

Our website is hosted on Heroku and uses:
- Google Fonts for typography
- No third-party analytics services are used

10. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.

11. Complaints

If you believe your data protection rights have been violated, you have the right to file a complaint with the Icelandic Data Protection Authority (Persónuvernd):
- Website: https://www.personuvernd.is
- Address: Rauðarárstíg 10, 105 Reykjavík, Iceland