Geko Consulting (“Geko”) provides specialist HR and recruitment services with a focus on companies that have employees working in STEAM or similar fields. Your privacy is important to Geko, and this privacy provides information about the personal information that Geko collects and the ways in which Geko uses that personal information. 

The term personal information as used throughout this policy applies to any data relating to an identified or identifiable individual, including data that directly or indirectly identifies an individual. 

Geko is the data controller for the processing of personal information under applicable data protection law. 

Personal information collection

Geko will collect and use the following kinds of personal information:

• Information you provide to Geko, such as information that you provide using for the purpose of registering with the website, information that you provide for the purpose of subscribing to the website services and any other information that you send to Geko
• Information that is automatically collected, such as information about your use of this website
• Geko may also collect personal information from other websites that display information about you publicly, such as; social media accounts like Facebook and Twitter, your online profile on your current employer’s network, articles about you or other public listings of your profile.

Geko’s use of personal information

Geko  will use the personal information it collects to perform activities associated with providing the website and website services such as:

• Enabling your access to and use of the website and the website services;
• Using Geko’s recruitment database to match suitable candidates with roles posted by Geko’s clients;
• Progressing candidates’ applications and administering their personal records;
• Recording details of unsuccessful applicants to be considered for further suitable opportunities that may arise in the near future;
• Communicating with you;
• Administering the website;
• Customizing and personalizing the website for you through the delivery of tailored content and communications;
• Improving the quality of the website;
• Resolving disputes and/or troubleshooting problems; and with your separate consent, sending you marketing communications.
• Identify and authenticate you so you may use the website;
• Necessary to comply with legal requirements (for example, to comply with applicable accounting rules and to make mandatory disclosures to law enforcement);
• Necessary for Geko’s legitimate interests (for example, to manage its relationship with you and to improve the website and Geko’s website services);
• Based on your consent (for example, to communicate about Geko’s services and provide you with marketing information), which may subsequently be withdrawn at any time without affecting the lawfulness of processing based on consent before its withdrawal.

You are required, as a necessity to enter into a contract, to provide Geko with personal information for processing as described above. If you do not provide personal information, Geko will not be able to provide you with all of the features available through the website and website services.

Sharing personal information about you

Geko does not disclose personal information about you through the website services, except as described in this privacy policy.

Geko will share with its client’s personal information relating to candidates.  

Limited members of Geko departments may access and otherwise process personal information in connection with their job responsibilities or contractual obligations. 

Your personal information may also be shared with Geko affiliate companies and with third-party providers who perform services for Geko. 

Third-party service providers will be obligated to use that personal information only in accordance with the terms of this privacy policy and applicable legal requirements. In addition to the disclosures necessary for the purposes identified above, Geko may disclose your personal information to the extent required to do so by law, in connection with any legal proceedings or prospective legal proceedings, and in order to establish, exercise or defend its legal rights.

Cross-border data transfers

Personal information may be stored and processed by and transferred between Geko affiliated companies - and third-party service providers - located in the United States of America and other countries outside of the European Economic Area, including in countries that may not provide the same level of data protection as your home country. 

If Geko expands business outside of Iceland, appropriate steps will be taken to ensure that recipients of your personal information are bound to duties of confidentiality and Geko implements measures such as standard data protection contractual clauses to ensure that any transferred personal information remains protected and secure. 

Securing your personal information Geko has appropriate technical and organisational measures in place to prevent accidental or unlawful access to or destruction, loss, misuse or alteration of your personal information. Geko will store all the personal information you provide on secure servers.

Automated decision making

Geko does not use automated decision-making technologies

Retention of personal information

Geko will retain personal information only for so long as reasonably necessary for the purposes set out above, considering criteria such as applicable rules on statute of limitations and at least the duration of your use of the Geko website and services. 

Your rights

You may be entitled, in accordance with applicable law, to object to or request the restriction of processing of your personal information, and to request access to, rectification, erasure, and portability of your own personal information. Requests should be submitted by using the contact details set out below.

If you are aware of changes or inaccuracies in your personal information, you should inform Geko of such changes so that its records may be updated or corrected. You may lodge a complaint with a supervisory authority if you consider that Geko’s processing of your personal information infringes applicable law.

Other websites 

This website contains links to other websites. Geko is not responsible for the privacy policies or practices of any third party.

Contact Geko

If you have any questions about this privacy policy or Geko´s treatment of your personal information, please send an email to dataprotection@geko.is 

Updating this policy

Geko may update this privacy policy periodically by posting a new version on this website. You should check this page occasionally to ensure you are familiar with any changes. If the changes made to the policy are material, Geko also may post a notice on the website prior to the effective date of the change, or, in some cases, may provide notice of the changes by email.

This policy was last updated on the 27th of February 2020