Ducara helps you comply with the Icelandic Constitution and the GDPR, which protect the right to privacy and data protection for individuals. Ducara ensures that your personal data processing is based on valid legal grounds, adequate, and relevant, and that you respect the data subjects’ rights and preferences. Ducara also assists you with the obligations and procedures established by the Icelandic Data Protection Act of 2018 (as amended in 2019), such as designating a representative in Iceland or in another EEA state (if applicable), applying codes of conduct or certification schemes (if available), implementing security measures (including pseudonymization or encryption), cooperating with Persónuvernd (the Icelandic supervisory authority), etc.