Privacy and data protection
Privacy statement regarding optional COVID-19 test due to departure from Iceland
Please be informed that this privacy statement only covers processing of personal information in relation to optional COVID-19 tests due to departure from Iceland. The data controller of processing of personal information with relation to obligatory COVID-19 test for travelers travelling to Iceland is the Directorate of Health and the applicable privacy statement is here.
The data controller of processing of personal information due to optional COVID-19 test due to departure from Iceland is the Health Care Institution of North iceland.
All data will be processed in accordance with the EU´s General Data Protection Regulation, GDPR, which has been transposed into Icelandic law.
For clarification: (a) a negative test is a test whose results is that an COVID-19 infection is not present; (b) a positive test is a test whose results is that an COVID-19 infection is present.
Description of processing of personal information
Personal information that is recorded when an individual pre-registers in certificate sampling and personal information that is created during the processing of the sample is processed.
Your COVID-19 test will be taken at the location you chose in the registration form and analysed by the National hospital of Iceland (Landspítali) or contractors contracted by Landspítali for that sole purpose to perform such analysis. The sample will only be identified by a sample number, no other personal data will be available for those performing the analysis.
All negative samples will be destroyed after the analysis has been performed. Personal information regarding negative samples will be erased after 14 days.
Positive samples will be kept for further analysis and determination of treatment for individuals who test positive for COVID-19.
Communication regarding test results and certificates
Negative test results will be communicated by an email and a text message to the phone number you provided in the registration form. The PCR certificate will be sent to the email address you registered in the pre-registration form. If you have provided an Icelandic social security number, the results will be communicated through the website Heilsuvera.is. All negative test results will be stored for 14 days, after which they will be deleted. Anonymised test results will be used for statistical purposes.
Positive test results will be communicated by a phone call by health care professionals at the Landspitali or members of the contact tracing team of the Department of Civil Protection and Emergency Management. Further processing of personal data relating to infected individuals is regulated by Icelandic laws on health records and laws regarding patient rights and the obligations of the Chief Epidemologist of Iceland.
Personal information which you record in pre-registration will be kept in a database only accessible by a selected group of personnel working at the testing facility. All access to the data is strictly limited to what is necessary for the functioning of the delivery of the PCR certificate and test resutls.
Processing of statistical information is limited to anonymized information and is processed by the Directorate of Health.
Purpose of processing personal information
The purpose of processing personal data for optional COVID-19 test due to departure from Iceland is to provide individuals with services that involve detecting whether or not the person has a COVID-19 infection and to issue a PCR certificate if the result is negative and the service/treatment is provided by such an professional which is bound by professional secrecy.
The purpose of processing personal information if the result is positive is also to work on further analysis, to provide treatment and to share personal information with the members of the contact tracing team of the Department of Civil Protection and Emergency Management.
What is our legal basis for processing your data?
The processing of personal data in connection with optional COVID-19 tests due to departure from Iceland is twofold: The processing of personal data recorded by individuals during pre-registration as well as the processing of personal data during the analysis of samples where the results are negative is based on the legal basis that the processing to fulfill the agreement between HH and the individual regarding sampling and issuance of a certificate. A contract refers to an individual's optional order for sampling at HH to obtain results on whether an infection is present or not, and subsequently to have a certificate issued for being able to travel abroad.
The processing of personal data registered by individuals during pre-registration as well as the processing of personal data during the analysis of samples where the results are positive is based on the that it is necessary due to HH's legal obligation to share information on negative COVID-19 test results with the members of the contact tracing team of the Department of Civil Protection and Emergency Management.
Security of personal data
Personal information is processed in a secure manner.
Personal information is stored in encrypted form and its transmission takes place through encrypted and protected communication channels. Databases are protected by firewalls and other appropriate security measures. Access to and use of the database is only permitted for employees who have special access rights and all views are recorded and traceable.
Your rights regarding your personal data
You can access information regarding your rights in the general privacy statement of the Health Care Institution of North Iceland.
You can access the general privacy statement of the Health Care Institution of North Iceland.
Go back to registration form