Privacy & Data Protection policy
Our privacy statement
Table of contents:
- Name of the data controller
- Data Controller
- Contact information for the Data Controller
- We value your privacy
- What do we use your personal information for?
- What information do we collect?
- From which sources is the data collected?
- Will your information be transferred or disclosed?
- Will your data be transferred outside the EU or the EEA?
- How long is your personal information kept?
- How is your information secured?
- Content and hyperlinks embedded from other sites
- What are your rights?
- Requests for rights
- Mandatory disclosure?
1. Name of the Data Controller
Howden Finland Oy, útibú á Íslandi (“Howden Iceland”)
2. Data Controller
Business ID 651120-2170
Suðurlandsbraut 20, 108 Reykjavík
3. Contact information for the Data Controller
Our customer service answers questions and feedback about the data controller: [email protected]
4. We value your privacy
Howden Iceland (hereinafter “Howden”) takes your privacy seriously and is committed to protecting your privacy and complying with data protection laws and good data protection practices in its operations.
The purpose of this Privacy Statement is to describe our privacy practices that apply when Howden is the controller and when we refer to the application of this Privacy Statement in connection with your use of our services.
We use personal information to deliver our services, for customer service, marketing, and to personalize and develop our services and marketing. Personal data is any information from which a person is either directly or indirectly identifiable.
Please read this privacy statement carefully. Please also review our privacy statement regularly, as we may change it from time to time. We will update the changes on this website.
5. What do we use your personal information for?
The purpose of our communications and marketing register is:
- Providing our services and customer communication
Your personal information may be used to implement our services and for customer communication, to identify the user, to answer your requests and questions, to execute the choices you have made and to perform other similar tasks. Personal information can also be used to make the service more personal and user-friendly, for example by making recommendations about content that may be of interest to you.
- Marketing and contacting our customers and potential customers
Personal information may be used to contact our current and potential customers, direct advertising and direct marketing, and other marketing communications. Direct marketing can be implemented for the user when the marketing can be considered to be related to the person's job or area of responsibility or with the person's separate consent. The register is also used to registration for events and to manage visitors.
- Development of our services
Your personal information may be used to develop Howden’s services and improve the user experience, as well as to conduct inquiries, surveys and feedback related to our services.
Your information may also be collected and processed in order to comply with legal obligations.
We collect, store and process personal data only for pre-defined purposes and ensure that we always have a legal basis for processing your personal data.
6. What information do we collect?
The following information can be stored about the registrant:
- Email address
- Telephone number
- Company and position
- Company address information
- Services ordered by the customer
- Electronic marketing order information or a choice to block marketing information
- Newsletter reading and analytics
- Site behavior and analytics
- Information collected from social media channels
7. From which sources is the data collected?
Personal data is mainly collected from the users themselves when contacting us or using our services. We may also collect information at events and in connection with various marketing activities such as sweepstakes. Personal information may also be collected from Howden’s partner registries and public sources such as social media channels.
We use Google Analytics and Jungle CEM to collect visitor data of our website in order to analyse and improve our website and target relevant marketing to our website visitors. Information is automatically stored in the register when a user submits information on our website or uses the website.
The marketing automation we use is designed to help us better serve our site users. This allows us to target our marketing to topics of interest to the user, avoiding unnecessary mass mailings.
Profiling refers to the use of personal information in such a way that a user's personal characteristics, behaviour and preferences are used to predict their possible future behaviour and interests.
We use profiling to send marketing messages that we believe are appropriate for you and avoid sending irrelevant messages. You have the right to refuse profiling in connection with direct marketing by contacting us. Contact information for this purpose can be found in the Rights Requests section.
9. Will your information be transferred or disclosed?
As a general rule, your personal information is processed by people employed by Howden when it relates to a person's job duties.
In some cases, your information may be disclosed in confidence to our partners or service providers who process personal information under a written agreement. These include cloud storage services, vendors of the IT systems we use, and external services purchased to support sales and marketing.
Our service providers and partners process personal information in an agreed manner, in accordance with our written instructions, and only to further agreed, lawful purposes.
We may disclose anonymized or statistical information that cannot be associated with an individual. If such information is no longer considered personal information, we may also disclose the information to third parties for purposes other than those stated herein.
10. Will your data be transferred outside the EU or the EEA?
In principle, we always store personal data within the EU and the EEA. Howden Finland Oy is part of the international Howden Broking Group and in certain situations we may also transfer personal data to third countries outside the European Economic Area. In doing so, we always comply with obligations under data protection law and transfer mechanisms, such as model clauses approved by the European Commission.
11. How long is your personal information kept?
We will retain your personal information in accordance with applicable law and only for as long as is necessary to fulfil the purposes described in this statement. In general, we will store your data while you are a customer of Howden and for a moderate time after termination, usually not more than 4 years. If you are not currently a customer of Howden your data will generally not be stored for more than 4 years.
12. How is your information secure?
We pay special attention to data protection and security in the design, implementation and maintenance of our services. Personal information is protected from access by third parties through firewalls, anti-virus programs, personal usernames and passwords. Access to personal information is restricted to Howden-authorized individuals whose duties require the processing of personal information. We disclose personal information only confidentially and on a limited basis on a contractual basis to our contractual partners, such as our service providers. Our contractual partners must undertake to implement adequate data security and in all respects the lawful processing of personal data. Processors of personal data are bound by professional secrecy.
Cookies are small text files that are automatically stored on a computer / terminal when a visitor visits various websites. Our online service utilizes cookies so that we can offer our services as user-oriented and high-quality as possible.
The cookies we use are related to our marketing automation system (Jungle CEM), Google Analytics, and the social media channels we use such as Facebook and Linkedin.
However, please note that if you disable cookies, you may need to reconfigure certain settings each time you return to the site. It may also be the case that not all services and features of the Site are available to you and that the Site will not function as intended.
14. Content and hyperlinks embedded from other sites
15. What are your rights?
You are entitled in certain situations to
- obtain information about the processing of your personal data
- gain access to data
- correct information
- delete the data and become forgotten
- restrict data processing
- transfer data from one system to another
- oppose the processing of data
You have the right to check what information we have collected about you. You also have the right to request the correction or deletion of incorrect, incomplete, unnecessary or outdated personal data and the right to restrict the processing of personal data.
You may refuse to process your information for direct marketing purposes and related profiling. There is always a link in our newsletters and other direct emails where you can block direct emails to your email in the future. Contact information for submitting rights requests can be found in the next section.
You can always file a complaint regarding how Howden processes your personal data with the Data Protection Authority in Iceland.
16. Requests for rights
Inquiries and requests related to the register can be directed to our customer service by e-mail [email protected] or by letter to
A request for verification of information must be sent in writing and proof of identity must be provided at the time of the request.
We will respond to requests within one month of the request, unless there are specific reasons to extend the response time. We may also refuse to comply with your request on the grounds provided by applicable law.
17. Mandatory disclosure?
If you do not agree to the terms of this privacy statement, we cannot guarantee that we will be able to serve you in the best possible way. In this case, we do not recommend that you use our website and we ask that you do not provide us with any of your information.