Privacy Policy — Version History

Adds transparency information for enquiries submitted through the contact form on the public website, which are now also recorded in our HubSpot CRM in addition to being delivered by email.

• Website Enquiry Data category describing the contact-form fields, consent record, dual delivery (EU SMTP email and HubSpot CRM) and the data we deliberately do not share with HubSpot (§2.8)
• Processing purpose and legal basis for responding to and following up on website enquiries (§3)
• HubSpot as a sub-processor for website enquiries, hosted in its EU data centre (§5, §6.1, §6.3)
• Retention period of 24 months after the last interaction for website enquiry data (§7.1)
• Configured SMTP relay entry now also covers delivery of website contact-form enquiries (§5)

Operating entity update following the rebrand to Treyst Solutions. No changes to processing purposes, legal bases, retention periods, or data subject rights.

• Data controller entity renamed from Vikonnekt ehf. to Treyst Solutions (§1, §13)
• Company registration number updated from 450326-1490 to 700725-1460 (§1)
• Registered and postal contact address updated to Kristnibraut 95, 113 Reykjavík, Iceland (§1, §13)

Introduces the legal monitoring module: new data categories, processing purposes, automated relevance classification, and the retention schedule that governs monitoring data.

• Legal monitoring module data categories (§2.7): monitoring profiles, scraped public legal case content, AI relevance classifications, monitoring notifications, case feedback, and scheduled task execution logs
• Separate EU-hosted monitoring database for alerts and classification data
• Processing purposes and legal bases for automated monitoring, digest email delivery, and relevance-feedback oversight (§3)
• Section §4.1 on automated AI relevance classification for monitoring (data transmitted, triggers, human oversight)
• De-identified and aggregated data use policy (§3)
• GDPR Art. 22 rights disclosure and explanatory note for automated relevance classification (§8)
• Sub-processors for monitoring: EU-configured SMTP relay and public legal/regulatory source websites (read-only retrieval) (§5)
• Retention schedule and lifecycle rules for monitoring data, including 12-month purge for in-app notifications and 6-month rolling deletion for scheduled task execution history (§7.1, §7.7)
• Processor breach-notification obligations to B2B customers (§11)
• Statement that the Platform is not directed at users under 18 (§2)
• Legal-disclosure notice and cooperation obligations when Customer Data must be disclosed by law (§5)