Icelandic Authorities have imposed infection control measures for all travelers travelling to Iceland. The Government has today announced that all passengers arriving in Iceland from 15 June can choose to be tested for COVID-19 upon arrival (free of charge for an initial two-week period) or quarantine for two weeks.
Passengers are required to fill out a pre-registration form before departure to Iceland where they choose if they want to be tested for COVID-19 or quarantine for 14 days. which requires passengers to provide their personal details and contact information, flight information, travel dates and address(es) during their stay in Iceland if they choose 14 days quarantine.
The purpose of this privacy statement is to inform passenger travelling to Iceland about the processing of personal data taking place in relation the infection control measures.
The data controller is the Directorate of Health, Katrínartún 2, 105, Reykjavik, Iceland.
All data will be processed in accordance with the EU´s General Data Protection Regulation, GDPR, which has been transposed into Icelandic law.
Which data do we process?
Passengers must fill out a pre-registration form before departure to Iceland. The pre-registration form includes the following information.
Type of transport:
Flight no:
Arrival date:
Icelandic notation ID number: (Where applicable)
Date of birth:
Family name:
Given name:
Nationality:
Country of residence:
Place(s) of residence for the first 4 days of your stay in Iceland:
Email address:
Mobile phone:
I have stayed outside risk areas last 14 days. (Where applicable)
On arrival to Iceland, I choose to Quarantine / PCR test
The registration form will be kept for 21 days in a database only accessible by a selected group of personnel working at border stations. All access to the data is strictly limited to what is necessary for the functioning of the border control measures.
If you choose to be tested for COVID-19 at the airport your sample will be taken at the airport and analysed by the National hospital of Iceland or contractors who the National hospital have engaged to perform such analysis. The sample will only be identified by a sample number, no other personal data will be available for those performing the analysis. All samples will be destroyed after the analysis has been performed and only used for diagnosing COVID-19, as stipulated in the Regulation on Quarantine, Isolation and Testing at the Icelandic Border in response to COVID-19, nr. 580/2020. Positive samples may be kept for further analysis to assess which measures will be taken in regards to individuals who test positive for COVID-19, after which they will be destroyed.
Negative test results will be communicated by a notification in the Rakning C-19 app or by a text message to the phone number you provided in the registration form if you do not wish to download the app. If you have provided an Icelandic social security number the results will be communicated through the website Heilsuvera.is. All negative test results will be stored for 14 days, after which they will be deleted.
Anonymised test results will be used for statistical purposes.
Positive test results will be communicated by a phone call by health care professionals at the National Hospital or members of the contact tracing team of the Department of Civil Protection and Emergency Management. Further processing of personal data relating to infected individuals is regulated by Icelandic laws on health records and laws regarding patient rights.
If you choose 14 days quarantine information about where you quarantine will be kept for the duration of the quarantine period and accessible for members of Department of Civil Protection and Emergency Management who are responsible for the enforcement of rules relating to quarantining.
What is the purpose of the processing?
The purpose of the processing is infection control during a pandemic. The processing is necessary for effective infection control of travelers entering Iceland.
Disclosure
Your data will only be disclosed for personnel involved in enforcing infection control measures.
Selected information from the pre-registration form will be accessible for border control agents and personnel involved in testing at the border.
Test will be shared with laboratories who perform the analysis. Tests will only be identified by a sample number, no personal data is disclosed to laboratories.
Negative test results will be made available to you and further processed for statistical purposed anonymously.
Positive test results will be shared with health-care personnel at the National Hospital of Iceland and members of the contact tracing team of the Department of Civil Protection and Emergency Management.
In other cases, we only disclose your personal information if we are required to by law.
We do not transfer personal data to anyone outside the EU/EEA area.
What is our legal basis for processing your data?
The processing of personal data is processing is based on the authority vested in the Chief Epidemiologist of Iceland by the Act on Health Security and Communicable Diseases, No. 19/1997, and the Regulation on Quarantine, Isolation and Testing at the Icelandic Border in response to COVID-19, nr. 580/2020.
Security
We take care of your personal data in a secure way to ensure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.
All communication of personal data is encrypted or routed through encrypted communication channels.
All databases are encrypted and secured by firewalls. Automated threat detection and response mechanisms are used to prevent any unauthorized access or attempts to breach databases.
Access to databases is logged and access is only granted to pre-defined personnel. Access is granted based on certified electronic ID with assurance level high as defined in the eIDAS regulation.
Your Rights
We are committed to respecting the data subjectsʼ rights. You have the right to access all data we may process regarding you. You also have the right to ask us to correct your personal information. You also have the right to demand amendment or deletion of personal information we have about you as well as the right to data portability restriction of processing of your personal data, to object to the processing and to file a complaint with the Icelandic Data Protection Authority, Persónuvernd.
If you intend to exercise your rights or if you need any further information, please contact us at: personuvernd@landlaeknir.is.
The Directorate of Health and The Department of Civil Protection and Emergency Management are responsible for this website.
