Fajnie jest wyjść z długów…
od tego trzeba zacząć.
SKILUM’S PRIVACY POLICY
General
This Privacy Policy applies to the processing of personal data by Skilum ehf., ID number 460918-0730, (hereinafter referred to as “Skilum”). Skilum is a debt collection company owned by Kvika banki hf. and operates in accordance with the Debt Collection Act No. 95/2008, based on an operating license from the Financial Supervisory Authority of the Central Bank of Iceland.
The policy provides information on what personal data Skilum collects, how it is processed and for what purpose, how long the data can be expected to be stored, where it may be shared and how its security is ensured in Skilum’s operations.
Skilum is the controller of any personal data that Skilum collects and processes and is therefore responsible for ensuring that the processing of personal data is in accordance with applicable data protection laws.
Skilum's processing of personal data is primarily based on a legal obligation that Skilum has in connection with debt collection activities. In other respects, the processing is based on an agreement with the creditor, legitimate interests or the consent of the payer.
Source of personal data
Skilum receives personal data from creditors, companies that maintain a delinquency register (e.g. Creditinfo), the National Registry and other public institutions, payers, other parties to cases or third parties for the purpose of handling cases. Creditors are independent controllers of the personal data that they provide to Skilum and are responsible for the accuracy of that information.
Use of personal data
Skilum uses personal data primarily to provide services for the benefit of Skilum's payers for the purpose of collecting claims. In the case of debt collection, this service mainly involves working on the progress of debt collection, such as electronic debt collection from payers, communication with creditors and payers, receipt and return of payments, and so on. For the above purposes, personal information such as telephone numbers, email addresses, home addresses or other contact information is used, including when sending debt collection notices to payers and other communications.
Personal information processed
Skilum processes the following information as applicable:
Contact information: Name, address and other contact information, such as email address and phone number.
Social Security number, and forms of identification: Social security numbers, ID cards, passports, driver's licenses and electronic identification so that Skilum can identify the payer.
Financial information: e.g. business history, information about defaults
Public information: e.g. information from the national registry, real estate registry, vehicle registry, information about defaults.
Sensitive personal data: Some personal data is classified as sensitive in data protection laws. These include, for example, information concerning race or ethnic origin, political opinions, religion or philosophical beliefs, trade union membership, genetic information, biometric information and health information. Skilum neither collects nor processes this personal data without the customer's consent unless specifically authorized by law. As a general rule, Skilum does not store sensitive personal data, but information about, for example, health may be relevant to the handling of a case and such information is usually communicated to Skilum by the payer or a party on their behalf. In such circumstances, we store this information with the payer's consent. Such consent may be withdrawn.
Cookies: Cookies are small computer files that are sent to a user's computer or smart device when the Skilum website is visited. They are stored on the user's device and are sent back when the user visits the website again. Necessary cookies are essential for the website to function as intended and for logging into the payer website. Other cookies are used to monitor the performance and efficiency of the website and to specifically mark the parts of the website that are related to the user's visit. They do not collect any information that can be used to identify the user.
Retention of personal information
Skilum stores information for as long as necessary for the processing of cases and in accordance with the requirements of other laws such as the Income Tax Act, the Accounting Act and the Act on the Expiration of Claims. Skilum and its employees are bound by a duty of confidentiality regarding personal and operational or business matters and other matters that they become aware of in their collection work and must be kept confidential according to law or the nature of the matter. Personal information is deleted as soon as it is no longer needed.
Disclosure of personal information
Skilum may be required or obliged to disclose personal information to third parties, such as public authorities, lawyers, creditors or our partners. When the disclosure of information is due to cooperation with a third party for which we are responsible, the disclosure takes place solely on the basis of a processing agreement.
Automated decision-making
Skilum's operations are not based on automated decision-making. However, Skilum uses automated processes to prepare decision-making, which is never automated. This therefore does not affect the rights or obligations of payers.
Payer rights
The payer has, in connection with the processing of personal data about him, the right to:
request information about how Skilum processes the personal data and to receive a copy of that information;
request the correction of incorrect personal data processed by Skilum or request the completion of incomplete personal data;
request that Skilum restrict the processing of personal data in certain cases, such as when processing has been objected to;
request to receive the personal data in a structured, commonly used and machine-readable format and have them transmitted to another organization;
withdraw previously granted consent for the processing of personal data, if applicable. Withdrawal of consent does not affect the lawfulness of processing based on consent until withdrawal;
object to processing for direct marketing purposes;
file a complaint with the Icelandic Data Protection Authority if the customer believes that the processing of their personal data by Skilum violates applicable law. If the customer objects to the processing of personal data, Skilum will cease processing the personal data unless Skilum can demonstrate a legal obligation or legitimate interests that override the customer's interests.
Contact information
The payer can contact Skilum with all matters related to the processing of their personal data and how they can exercise their rights under the Privacy Act. If the payer has questions regarding the processing of personal data or comments on this policy, they should send their comments to the email address personuvernd@skilum.is
This Privacy Policy was last revised in January 2026