Privacy Policy
Kozmoz ehf. (hereinafter "Kozmoz" or "the company") is committed to data protection. We take our responsibilities seriously and place a strong emphasis on safeguarding your personal information in accordance with laws and regulations. With this privacy policy, we want to inform you about how the collection, storage, and other processing of your personal information is handled by us. Kozmoz only works with your personal information for legitimate purposes and either in compliance with legal obligations, with your informed consent, or based on legitimate interests that we may have.
1. Scope and Liability
Kozmoz is the data controller. The company is a private limited company that provides services through the Kozmoz app. The service offered by the Kozmoz app involves providing users with a platform to advertise mainly home improvement projects, offering their services to industry professionals as experts in the relevant projects, viewing posted projects, communicating with homeowners (or their legal representatives), and professionals within the app, and having the opportunity to write reviews.
The privacy policy extends to the management, staff of the company, and contractors that Kozmoz engages to find projects on behalf of its service. Additionally, the privacy policy serves as the basis for the processing agreements that Kozmoz enters into with those who work with personal information on behalf of Kozmoz (if applicable).
The privacy policy extends to the management, staff of the company, and contractors that Kozmoz engages to find projects on behalf of its service. Additionally, the privacy policy serves as the basis for the processing agreements that Kozmoz enters into with those who work with personal information on behalf of Kozmoz (if applicable).
2. Types of personal information that Kozmoz collects
The collection and processing of personal information are prerequisites for Kozmoz to provide you with services. The processing of personal information carried out by us or on our behalf is the responsibility of Kozmoz. Information about our customers is collected in various ways, and this can depend on the type of user (homeowner or professional). General types of personal information we collect include:
- basic information such as name, national identification number, address, phone number, and email contact information
- all communications with us, e.g., emails, online chats, written and oral communications (if applicable)
- information about our business relationship with you, such as the type of service and your purchases from us
- user's location (subject to user's approval), required for project's time registration
- financial information, information related to current and past transactions, transaction overview, transaction history, collection process, defaults, and other matters related to billing
- technical information, e.g., equipment, devices used to connect to our app
- public information and information from third parties such as the National Registry and Creditinfo
- other information
The above list is not exhaustive, and we may work with other information about you that is necessary at any given time, such as in the development of our app, which includes information recorded in the app and the usage of it.
3. For what purposes do we use the personal information?
Kozmoz processes personal information for clear and declared purposes as required by data protection laws and other privacy regulations. We only use personal information to provide you with requested services or necessary information, which may include the following:
Kozmoz processes personal information to;
- respond to inquiries
- to provide information about new products or changes to products, services, or terms of service and pricing
- verify users, for example with a query to the National Registry or Creditinfo
- compare your personal information with your transaction history in our business system
- generate invoices for services provided
- give tradesmen the option to calculate hourly rates due to worked hours on individual projects
- perform quality measurements on the service with the aim of improving the service and service offering
- make corrections, process feedback, and resolve disputes
- prevent illegal behavior or misuse of Kozmoz systems
4. Your rights
You have the right to access, and in certain cases, receive a copy of your personal information that we have processed. You also have the right to request corrections if your information with us is incorrect. Under certain circumstances, you have the authority to request that your information be deleted or that their processing be restricted. These rights are further described in the data protection laws, see e.g., sections 17 and 20 of Act no. 90/2018. According to the latter provision, you also have the right to transfer your own data or we limit the processing of your personal information, subject to more specific conditions. You also have the right to object to the processing under section 21 of the laws. Additionally, you have the right to lodge a complaint with the Data Protection Authority regarding the processing. Their office is located at Rauðarárstígur 10, 105 Reykjavik, and their email address is postur@personuvernd.is.
5. Data retention and information security
When registering and handling personal information with us, we always prioritize security. We have extensive experience in processing personal information and have established internal regulations on information security, privacy, and access control. Through regular education and training, we also promote an active security awareness among our staff.
If you have any questions or concerns about the handling of your personal information by us, you can contact us by sending an email to kozmoz@kozmoz.app.
If you believe that your personal information has been compromised by us, we request that you provide us with information about it as soon as possible. We also point out that incidents can be reported directly to the Data Protection Authority, which monitors the processing of personal information if there is suspicion of non-compliance with laws and regulations.
If you have any questions or concerns about the handling of your personal information by us, you can contact us by sending an email to kozmoz@kozmoz.app.
If you believe that your personal information has been compromised by us, we request that you provide us with information about it as soon as possible. We also point out that incidents can be reported directly to the Data Protection Authority, which monitors the processing of personal information if there is suspicion of non-compliance with laws and regulations.
6. Provision of information to third parties
We may provide third parties with information about you to fulfill legal obligations or to provide requested services, such as for collection or defaults. If a third party is engaged to perform tasks involving the processing of personal information, a processing agreement is always concluded with them, outlining the terms for the handling and security of data and information. In case of defaults on your part, we may involve a third party to collect outstanding accounts and also provide companies like CreditInfo with such information.
7. Data storage period
Our general rule is to store personal information for as long as necessary and never longer than permitted by law. The retention period of the information is determined based on varying needs for preservation according to the nature of the service described above.
The retention period is determined, among other things, by retention rules that apply to the data:
- General and basic information about the user is deleted or anonymized six months after the business relationship ends. However, this does not apply to financial information.
- Financial information and accounting data are stored for 7 years in accordance with accounting laws.
The privacy policy is reviewed every two years or more frequently if specific needs arise.