Privacy Policy
Information & rules
Arev Securities hf. has established rules and procedures to ensure compliance with the laws and regulations governing its operations. Below is a reference to the rules governing the operations of Arev Securities hf. Before entering into a transaction, it is essential that clients familiarise themselves with the company's rules and terms and conditions. Arev Securities hf. is required to obtain various information from clients and to provide its employees with all necessary documentation for completion as soon as a decision to commence business is made. Below you can find the main rules of Arev Securities hf.
Arev's Privacy Policy
1. Introduction
Arev Securities hf., 530596-2229, Klapparstígur 25-27, 101 Reykjavík, has adopted a privacy policy based on Act no. 90/2018. The guiding principle of the policy is to ensure the reliability, confidentiality and security of the personal data the company collects and processes. The purpose is to inform clients about the handling of personal data held by the company, access and the rights of the company's clients. Arev Securities is responsible for ensuring that all processing and handling of personal data complies with applicable laws on data protection and the handling of personal data. Should you have any questions regarding this policy, please contact Arev on 5512500 or send an enquiry to arev@arev.is.
2. Collection, processing and storage of personal data
When establishing a business relationship, as well as when working for the company's clients, various information related to personal data is collected. The company is under a legal obligation to obtain information about its clients at the outset, for example under anti-money laundering legislation, as well as having a duty to provide information to regulators or other public authorities. Personal information is not collected unless there is a legal basis for doing so, or where the law requires it and with the client's consent. The main purpose of collecting personal information is to provide clients with the services they have requested and that the company offers. Information is retained as required by law, and for no longer than is necessary. After this time, the data is deleted or anonymised.
3. Disclosure to third parties
Arev Securities may disclose personal information of clients to third parties, for example in connection with their contractual relationship with the company. Arev Securities only provides a third party with the personal data that is necessary for the purposes of its business activities, and a contract is then entered into with that party. Such an agreement includes conditions regarding data handling and security, and the third party is also bound by confidentiality.
4. Security of personal data
Through appropriate technical and organisational measures, Arev Securities seeks to ensure the security of its clients' personal data. These measures are intended to protect personal data from accidental loss or alteration, as well as from unauthorised access, copying, use or disclosure. Examples of security measures that Arev Securities may implement include access controls on the company's systems. Furthermore, the risk posed to the processing of personal data is addressed with a risk assessment where the nature of the data requires it.
5. Client rights
An individual has the right to access their personal data and, in certain circumstances, to have it rectified, erased or its processing restricted. They also have the right to object to processing and to request the portability of their data. Furthermore, an individual has the right to lodge a complaint with the Information Commissioner's Office (ICO).
6. Retention period
During the course of a business relationship, personal data is retained for as long as required by law or as is necessary for legitimate purposes. When statutory retention periods no longer apply or are no longer required, the data is deleted. Typically, the retention period is 5-7 years, based on legislation concerning accounting, income tax, value-added tax, and money laundering, as well as legislation pertaining to the company's authorisation to operate.
7. Changes to the privacy policy
Arev Securities may update this privacy policy in accordance with changes in law or regulations, or due to changes in the company's processing of personal data. Such changes will take effect upon publication on the company's website., http://www.arev.is
Approved at the board meeting on 27 March 2026