hy.isJobs in Iceland, in English
← Back to all jobs

Privacy Policy

Last updated: 14 June 2026

hy.is is a job board that helps people find work in Iceland that doesn't require Icelandic. This policy explains what personal data we collect, why, how long we keep it, and the rights you have over it. We are committed to handling your data lawfully and transparently under the EU/EEA General Data Protection Regulation (GDPR).

Where your data is stored

All personal data is stored on servers located within the European Economic Area (EEA), in Iceland. Your data is not transferred outside the EEA. We use a small number of EEA-based processors (for example, our email-sending provider on its EU infrastructure) strictly to operate the service.

What data we collect

  • Account data: your email address and (for employers) company details, created when you sign up.
  • Job-seeker profile: the information you choose to add — name, headline, summary, skills, languages, education, work history, years of experience, driving licences, profile photo and your CV file.
  • Applications: when you apply to a job, the name, email, phone number, cover text and CV you submit, plus the status of your application.
  • Saved jobs & job alerts: jobs you save and the saved searches you use to receive email alerts about new roles.
  • Messages: messages exchanged between you and an employer about an application.

Why we use it

We use your data only to run the job board: to show your profile and applications to the employers you apply to, to send you job alerts you asked for, to enable messaging about your applications, and to keep the service secure. We do not sell your personal data.

How long we keep it

We follow the principle of data minimisation and delete data we no longer need:

  • Applications (and their attached CV, messages and notes) are automatically deleted 365 days after they were submitted.
  • Applications that were rejected are deleted sooner — 90 days after submission.
  • Your profile and account data are kept while your account is active. When you delete your account, they are erased (see below).

This clean-up runs automatically on a daily schedule.

Your rights

Under the GDPR you have the right to access, correct, export and erase your personal data, and to object to or restrict its processing. We make the two most common rights available to you as self-service from your dashboard:

  • Download my data — get a machine-readable JSON copy of your profile, applications, saved searches, saved jobs and messages (the right to data portability).
  • Delete my account — permanently erase your profile, CV, applications, saved jobs, alerts and login. This cannot be undone (the right to erasure).

You'll find both options in the “Privacy & your data” panel of your dashboard.

Contact

For any privacy question or request — including access, correction or erasure — email us at hy@hy.is and we'll help. You also have the right to lodge a complaint with the Icelandic Data Protection Authority (Persónuvernd).