InfoMentor as a data processor is highly committed to ensuring the InfoMentor information system is designed and developed with the data subject’s rights in mind and that the system is capable of assisting the data controller in ensuring compliance with the obligations towards the data subjects.
Data subjects cannot approach InfoMentor directly regarding personal information that is stored in the InfoMentor system as the information that the system retains is the responsibility of the educational institutions (the data controllers). In such cases, the data subject needs to go to the corresponding educational institution with the request of removing personal information. As the data controller, InfoMentor is committed to ensuring that the rights of the data subjects relating to their stored personal information complies to applicable privacy laws and regulations.
All data subjects from whom InfoMentor collects personal information has the right to know what information that is collected and stored about them with the company. This privacy policy has identified what information is collected by InfoMentor and for what purpose. Data subjects can request access to their personal information.
If a data subject believes the personal information InfoMentor collects is incorrect, they may ask us to correct any inaccuracies in the personal information. Data subjects also have the right to object to data processing or have their personal information erased or deleted. Data subjects can make a request or exercise these rights by contacting InfoMentor’s data protection officer (dpo@infomentor.is).
When processing personal data is based on the data subject’s consent, data subjects can at any time withdraw their consent.
If a data subject believes that the processing of personal information at InfoMentor in any case does not comply with applicable data protection laws or regulations and does not adhere to safe data processing methods, they can send a complaint or notice to our data protection officer (dpo@infomentor.is).
Everybody has the right to seek out the Data Protection Authority (the Information Comissioners Office, or ICO) if they believe their privacy rights have been infringed upon or if they believe privacy laws have been broken. Information regarding complaints and notifications to the Data Protection Agency can be found on their website: https://www.personuvernd.is/umsoknir-og-eydublod/um-kvartanir/.