
Privacy policy
The National Gallery of Iceland is Icelands principal museum in the field of visual arts. It operates in accordance with the Museum Act No. 141/2011, the Visual Arts Act No. 64/2012, and Regulation No. 171/2014 on the National Gallery of Iceland.
The role of the National Gallery of Iceland is primarily to collect Icelandic visual art and to serve as a central institution for the preservation, research, documentation, and dissemination of Icelandic visual art. The Gallery also provides advice to other art museums, promotes collaboration among art institutions, and works toward a coordinated museum policy in the field of visual arts.
The National Gallery of Iceland is committed to respecting privacy and the security of personal data. The processing of personal data is carried out in accordance with this privacy policy, the Data Protection Act No. 90/2018, and the EU General Data Protection Regulation (GDPR) No. 2016/679.
The Gallery takes measures to ensure the security of personal information. Individual rights regarding access to personal data are handled in accordance with the Data Protection Act No. 90/2018 and the Information Act No. 140/2012.
The Gallery has appointed a Data Protection Officer in accordance with Article 35 of the Data Protection Act, and the handling of personal data is carried out in consultation with their guidance. Inquiries regarding data protection should be sent to: personuvernd@listasafn.is
This privacy policy is reviewed regularly.
I. PERSONAL DATA AT THE NATIONAL GALLERY OF ICELAND
The National Gallery of Iceland processes personal data relating to the following groups:
1. Parties to a Case
The Gallery processes contact information (name, phone number, email address, and postal address) and other information that appears in case documents, such as requests regarding exhibitions and collaborations.
2. Job Applicants
The Gallery collects personal data directly from applicants. This includes contact details (name, national ID number, email, and phone number), education, work experience, language and computer skills, and any other information submitted with the application. Application materials are recorded and stored in the museum's archive until they are transferred to the National Archives of Iceland, in accordance with Act No. 77/2014 on Public Archives.
3. Grant Applicants
The Gallery manages three funds intended to support visual artists: the Guðmunda Andrésdóttir Grant Fund, the Svavar Guðnason and Ásta Eiríksdóttir Grant Fund, and the Richard Serra Grant Fund. Information contained in grant applications is recorded and preserved in the Gallery's archive.
4. Employees
Employee data is recorded in Orri, the Icelandic government’s HR and payroll system. Work attendance is recorded in Vinnustund. The museum's photo archive includes photographs of staff members.
5. Museum Visitors
Photographs of museum visitors may be stored. Names and email addresses of individuals subscribed to the Gallery’s mailing lists (for newsletters and the Selma Club) are also recorded. Electronic surveillance (CCTV) is in place at all entrances to the Gallery’s premises.
At public events, such as symposiums or similar gatherings at the museum, audio and video recordings of guests, speakers, artists, and others may be made. This material may be shared via the Gallery’s Facebook page, YouTube channel, and Instagram account.
6. Donors of Artworks
Donors of artworks are recorded in the Gallery’s archives and in the SARP cultural heritage database (www.sarpur.is). The provenance of artworks, where known, is also recorded in SARP.
7. Artists
The Gallery maintains records of communication with artists, including agreements for individual exhibitions. The photo archive also contains images of artists. Information about artworks in the museum’s collection and the artists is made available through SARP.
II. HOW PERSONAL DATA IS PROCESSED
All processing of personal data at the National Gallery of Iceland is conducted in accordance with the Data Protection Act No. 90/2018.
The Data Protection Officer provides guidance on the handling and management of personal data, including internal monitoring to ensure the Gallery complies with the security measures it has implemented.
The National Gallery of Iceland is obligated to submit records to the National Archives of Iceland in accordance with Act No. 77/2014 on Public Archives and stores documents until they are delivered to the Archives, following the relevant rules.
III. COOKIES
So-called cookies are used to count visits to the Gallery’s website. The Gallery aims to use cookies sparingly and responsibly. Users can configure their browsers to be notified about cookies or to reject them.
When the Gallery receives a web form inquiry, it collects only the information necessary to respond. Only authorized staff have access to this information.
The system used to receive inquiries is hosted by a service provider on a web server located in Iceland. Submitted data is automatically deleted from the system after 180 days, and no further collection or processing of the data takes place.