1.1  

The following policy defines and describes Icepharma's use of cookies in more detail. The collection and processing of personal data in connection with Icepharma's use of cookies is in accordance with:

• Act on the Protection of Personal Data and the Processing of Personal Data No. 90/2018 (Personal Data Protection Act).
• Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, etc. (the General Data Protection Regulation or GDPR).
• Directive 2002/58/EC of the European Parliament and of the Council on privacy and electronic communications (as implemented in Icelandic law, cf. Act No. 81/2003 on telecommunications).

2.1 

Icepharma hf. maintains several websites in connection with its operations. These include the company's main website, www.icepharma.is, websites in connection with Icepharma's online stores, as well as other websites in connection with individual brands. When a user visits Icepharma's websites for the first time, the user's browser transfers certain information to Icepharma's web server. This is necessary for technical reasons so that the user can obtain the requested information. To facilitate user access to the websites, the following information is collected, stored for a short time and used:

• IP address of the device used to visit the website
• Date and time of visit to a specific website
• Time zone information
• Access status/HTTP code
• Transfer of data volume
• Website requesting access
• User's browser type, user's operating system type and version, user's screen size, number and length of visits to the website, user's journey through the website, search terms, language settings, etc.

For security reasons and to protect Icepharma's legitimate interests, the above information is retained for a limited period of time, including to maintain traceability in relation to personal information in the event of unauthorized access to Icepharma's servers.

3.1 

When the user first visits the Icepharma websites, information about the visit (cf. information specified in 2.1.) is saved in the form of text files with so-called cookies. These text files are saved in the device's memory via the user's browser; on a computer or other smart device of those visiting a website for the first time. The text files store certain information (such as information about the choice of language settings, etc.) that the browser may send back to the Icepharma server on the user's next visit to the website. The cookies thus enable websites to recognize users' computers and smart devices when a user visits the website again, and therefore a cookie is a kind of functional tag that remembers the user from their last visit to the website.

3.2 

Cookies have different purposes and different lifespans. Certain cookies only work while the browser is open and are deleted when it is closed. In this way, a cookie allows websites to connect to a user's actions while they are on the website, but when the user leaves the website, the cookie is deleted and is not stored for a long time. Such cookies are called session cookies. Other cookies have a longer validity period, so-called persistent cookies, and work in such a way that they are stored on users' computers and other smart devices for a long time and remember the user, i.e. their choices and actions on the website, when they visit the website again.

3.3 

Cookies are either first-party cookies or third-party cookies. The domain of the website using the cookie determines whether it is a first-party or third-party cookie. First-party cookies are basically cookies that are created on the website that the user is visiting. Third-party cookies are cookies that are created on a different domain than the one the user is visiting, but still have a specific function on Icepharma websites.

4.1

The use of cookies is based on Icepharma's legitimate interests in providing users with a good experience on websites and in order to promote their further development. Icepharma also has a legitimate interest in retaining the information collected for a limited period of time for security reasons, i.e. to ensure traceability of the information in the event of unauthorized access to Icepharma's servers. In other cases, the authorization is based on the user's consent.

Cookies do not collect information about users' names, email addresses, telephone numbers or social security numbers, and the purpose of cookies is not to identify users. However, in certain cases, a cookie may collect a large amount of other types of information that could potentially identify a user in one way or another. When applicable, the information is considered personal data within the meaning of Act No. 90/2018 on the Protection of Personal Data and the Processing of Personal Data. The legal basis for the technical collection, use and storage of personal data through the use of cookies is the user's consent.

5.1

Icepharma's purpose in using cookies is not to identify users, but primarily to enable Icepharma to provide users with a good experience when browsing Icepharma's websites and to contribute to their further development.

5.2 

Icepharma websites use both session cookies and persistent cookies, which are either first-party cookies or third-party cookies. Icepharma categorizes cookies according to their nature and purpose:

(1) Necessary cookies,

(2) Cookies for website settings,

(3) Cookies for analytics and website functionality

(4) Cookies for marketing.

5.3

The following is information about which cookies Icepharma uses on its websites, their purpose and expiration date:

Strictly necessary cookies:

Certain cookies are essential for the functionality of websites. Such cookies are not subject to user consent, but their use is based on Icepharma's legitimate interests, which are to provide a good experience on its website and to contribute to its further development. However, users can always choose to disable such cookies, but this may affect the functionality of the website.

Functional cookies:

Other cookies are used to recognize when a user returns to a website and allow Icepharma to customize the content and content of the website for the user based on their choices from the last visit, such as language settings, etc. Without these cookies, the functionality of the website and the user experience would be less than if such cookies were not used for this purpose. However, these cookies are subject to the user's consent and users can choose to disable their functionality at any time and thereby withdraw their consent to their use.

Analytical/performance cookies:

Icepharma uses in most cases two types of first-party session cookies to analyze traffic on websites related to Icepharma's activities and to collect statistical information about the use of the websites. The cookies are deleted when a user closes the browser used to view the website. The information collected with the cookies is used to analyze which parts of the website are viewed more than others. Icepharma also uses a single persistent first-party session cookie on its websites that is stored on a user's device for up to two years, but it is used to analyze whether a user has viewed Icepharma's websites before and how often a user visits the websites. The above-mentioned cookies are considered statistical cookies and their use is based on Icepharma's legitimate interests. A user can always choose to disable the use of such cookies.

Marketing cookies:

Icepharma websites also have connections to third-party cookies from Google, Facebook and Mailchimp. Such cookies serve a variety of purposes and Icepharma uses them, among other things, for web measurement, to analyze the use of Icepharma websites and for quality control, cf. Google Analytics. Google and Facebook use the cookies to personalize advertisements and display them to users on the website or elsewhere on the Internet. These cookies are classified as marketing cookies and are stored on the user's device for up to 24 months. The use of the above-mentioned cookies is subject to the user's consent at all times and users can always choose to reject the use of such cookies. Such cookies will therefore not be effective unless users specifically consent to them. It is noted that third parties, such as those who provide online marketing and analysis services, also use cookies. Information about their use of cookies can be found on their websites.

6.1 Upon first visit to the website:

When a user visits Icepharma's websites for the first time, a pop-up window appears on the homepage of the website informing the user about the website's use of cookies and requesting their consent for the use of cookies other than essential cookies. If the user gives their consent for the use of all types of cookies, the cookies are placed on the user's device and after that the pop-up window does not appear to the user again until the cookie's lifetime has become inactive. After the cookie's lifetime has expired, or if the user.

6.2 On subsequent visits to the website:

Users can always configure the use of cookies, i.e. accept or reject their use, by changing their browser settings. However, if a user chooses to reject the use of all cookies, including the use of strictly necessary cookies, this may affect or inhibit the functionality of the website.

6.3 Instructions on how to configure the use of cookies in your web browser:

Google Chrome:

Go to “Customize and control Google Chrome”

-> Settings

-> Advanced

-> Content settings

-> Cookies

Other browsers:

Further information on how to configure cookies in other browsers can be found on the following website about cookies: https://www.allaboutcookies.org/

If users would like more information about which cookies Icepharma uses and what information is collected when using them, they can send an email to Icepharma's privacy officer at the following address: personuverndart@icepharma.is. Further information about the processing of personal data in Icepharma's operations can be found on the Icepharma website: www.icepharma.is/personuverndartstefna.

Icepharma's Privacy Policy regularly reviews this notice to ensure that it reflects accurate disclosure of Icepharma's use of cookies and the collection and processing of personal data in connection with such use.