In connection with your job application at Airport Associates (hereinafter also referred to as ‘the company’ or ‘we’), the company, as the data controller, will collect and process your personal information for the purposes specified below. Strong data protection is a priority for Airport Associates. We place great emphasis on respecting your rights and ensuring that all personal information is always handled in accordance with applicable data protection laws and regulations, specifically Act No. 90/2018 on data protection and processing of personal information (hereinafter ‘Data Protection Act’).

What personal information do we process about you and for what purpose?

Airport Associates collects and processes, as applicable, personal information about you to handle your application and assess your suitability for the position in question at any given time. In general, the following categories of personal information are processed for the aforementioned purpose:

• Identification and contact information: Contact details, such as your name, social security number, email address, home address, and phone number.
• Information related to job applications: Information about your education, training, and qualifications. It may also cover work permits, driving licences, or machinery operation licences where applicable. Additionally, it includes your career history and experience. Other information that may be included in your job application are certificates, photographs, and any other details you choose to provide, such as information about your family circumstances and/or interests.
• Other information: Where applicable, information about you from references you provide or information from job interviews or other documents generated during the recruitment process.

In connection with your job application, Airport Associates requests confirmation that you have a clean criminal record. If you are offered a position, the company will, with your explicit consent, apply for access authorization on your behalf from Isavia, the authority responsible for airport access permissions at Keflavík Airport. Granting such authorisation requires you to pass a police background check for aviation security, conducted in accordance with Articles 158 and 159 of the Aviation Act No. 80/2022 and the Aviation Security Regulation No. 750/2016. As a part of this background check, you will be required to provide certain personal information, including details of your education, employment history, residence, and supporting documents for verification. Further information about the process can be accessed here.

We also process your personal information for the purpose of preparing an employment contract if recruitment occurs, such as information about your bank account, union membership, pension fund membership, and private pension fund membership.

The aforementioned list is not exhaustive, but the company only processes the information about you that is necessary at any given time.

Where do we obtain personal information about you?

Airport Associates primarily collects personal information about you from yourself when you apply for a job with the company. Where applicable, the company collects personal information about you from references you provide.

If recruitment occurs, we will obtain further personal information during your employment with the company in connection with your work.

What is the legal basis for the processing of personal information?

The collection and processing of your personal information in connection with your job application is carried out where necessary to establish or fulfil a contract between you and the company, or to comply with a legal obligation. This is in accordance with Article 9 (1), points 2 and 3, of the Data Protection Act.

With whom do we share your personal information and why?

Airport Associates does not disclose your personal information to external parties unless based on legal authorization, government directives, court orders, written processing agreements, or your consent.

The company may need to provide your personal information to recruitment agencies, consultants, contractors, and other third parties due to their work for the company in connection with the application process. Personal information may also be shared with third parties who provide us with IT services and other services related to processing and are part of the company’s operations. A data processing agreement with the relevant party underlies such sharing.

Airport Associates will not transfer personal information related to your application outside the European Economic Area unless permitted under applicable data protection legislation.

How long do we retain personal information about you?

Airport Associates retains personal information for as long as necessary according to the laws and regulations applicable to the company’s operations, or for as long as the company’s legitimate interests require and there is a reasonable cause. Personal information generated from this application is retained for 6 months from the end of the recruitment process if the applicant is not hired.

Security of your personal information

Airport Associates places great emphasis on ensuring the security of your personal information at all stages of processing within the company through appropriate technical and organizational measures. These measures are intended to prevent human error, theft, fraud, and protect personal information against unauthorized access, loss, destruction, accidental alteration, and unlawful use.

If a security breach occurs in the handling of personal information where it is confirmed or suspected that personal information has fallen into the hands of unauthorized individuals, the Data Protection Authority and, where applicable, individuals are notified of the security breach unless it does not pose a significant risk to individuals.

Automated decision-making

Airport Associates does not engage in automated decision-making or automatically create personal profiles about job applicants at the company, where personal information is used, for example, to assess certain aspects concerning individuals’ interests or to analyse or predict aspects related to matters such as reliability or behaviour. If this occurs, the company will provide information about it, such as by updating this privacy statement.

Your rights

Subject to the conditions further discussed in applicable data protection legislation, you have the right to:

• Receive information about what personal information the company has recorded about you and its origin, as well as information about how personal information about you is processed.
• Access and obtain a copy of all personal information processed about you, provided that the interests of others do not prevent this, such as due to the rights of others that should weigh heavier, or request that it be sent to a third party.
• Have incorrect, misleading, or incomplete personal information about you updated and corrected, as well as have its use blocked or deleted.
• Object if you wish to restrict or prevent the processing of your personal information, such as when the processing of your personal information is based on legitimate interests.
• Receive information about whether automated decision-making takes place, and if so, on what grounds such decision-making is based and a review of automated decision-making.
• Withdraw your consent for Airport Associates to collect, record, process, or store your personal information, when processing is based on that authorization. Withdrawal of consent shall not affect the legality of processing based on consent prior to its withdrawal.

If you wish to exercise your rights, you can send a written request to occurrence@airportassociates.com. We will confirm receipt of the request and respond within a month from receiving the request. If it is not possible to respond within a month, we will notify you of the delay in processing within a month.

You also have the right to contact the company’s data protection officer and/or file a complaint with the Data Protection Authority if you believe the company is not processing your personal information in accordance with data protection laws. Information about the Data Protection Authority can be found on the institution’s website, www.personuvernd.is.

Further information

You can contact the data protection officer at Airport Associates via the email address occurrence@airportassociates.com if any questions arise regarding the handling of personal information by the company or if you have suggestions or wish to exercise your rights provided by data protection laws.

Review and updates

Airport Associates reserves the right to regularly review this privacy statement and update it as necessary. If there is a substantive update, you will be notified of such before the updated statement takes effect. Minor changes, such as wording changes, take effect upon publication.

This statement was last updated on 07.05.2026.