- Controller
- 41 Club Iceland, registration no. 510516-0600, registered as Old Tablers Ísland
- info@41.is
This page describes what personal data 41 Club Iceland processes, why and on what basis, and how long it is kept. It covers the website 41.is, the association’s portal and registration for events. The processing is governed by the Icelandic Act no. 90/2018 on Data Protection and the Processing of Personal Data and the General Data Protection Regulation (EU) 2016/679. The Icelandic version of this page is the authoritative one.
The association does not sell personal data or use it for marketing.
The website 41.is
The website uses no cookies or analytics and loads nothing from other servers.
It is hosted on GitHub Pages by GitHub, Inc. in the United States. GitHub logs visitors’ IP addresses for security purposes, as described in GitHub’s statement on data collection. The same applies to app.41.is and event addresses such as hym2026.41.is, which currently forward through GitHub Pages.
The national board
The Board page (Stjórn) shows the board members’ names, clubs, terms of office and photos from 41er*world. The basis for publishing them is the board’s consent, given on 7 October 2026. Each board member can withdraw their consent at any time, and their details are then removed from the website. The details are refreshed from 41er*world after each annual general meeting, and those who have left the board disappear.
The association’s portal
In the portal, app.41.is, the national board and the club boards prepare meetings and events and have their clubs’ member lists to hand. While the portal is being tested, it runs at app-41is-demo-f5jkgo.azurewebsites.net.
Signing in
Sign-in now uses a Microsoft account in the association’s Microsoft Entra directory, which holds the account’s email address and logs sign-ins. The portal receives the account’s ID and name, and the webmaster grants access individually.
The plan is for members to sign in with their 41er*world (TABLER.WORLD) account, the member system of the Round Table family, run by Round Table International. The password will then be typed only at 41er*world, and the portal will never receive it. When you sign in, the portal will receive your 41er*world user ID and your name, and read which offices you hold in the association and in your club.
Your offices will decide what you can do in the portal; a club secretary, for example, can work on their club’s agendas. They will be read again at every sign-in, so access ends at the next sign-in after you leave an office. If you hold no office that gives access, you are told that you have no access. A few people who need access without holding an office, such as the association’s webmaster, will still be given it individually. This page will be updated when sign-in with 41er*world goes live.
The portal keeps your user ID, name and access rights. It does not keep your email address or other contact details from the sign-in, nor any access tokens from Microsoft or 41er*world. It also keeps an audit log of who did what and when, for example when access is granted or removed.
The basis for this processing is the association’s legitimate interest in its board and the club boards being able to do their work, and in access being limited to those authorised to have it.
Sign-in records (user ID, name and access rights) are deleted 12 months after the last sign-in. The audit log is kept for two years.
The portal uses only necessary cookies: to keep you signed in, to protect forms against misuse, and to remember your event registration after you open it with your own link. It uses no analytics.
Club member lists
For clubs that use the portal, members’ first names, last names and status (active, on leave or inactive) are copied from 41er*world. The club’s board and the national board see the list in the portal and use it to prepare meetings. Contact details and 41er*world IDs are not copied, nor is anything about former members.
The list is replaced in full at every update, so someone who leaves the club disappears from it at the next update. The basis for this processing is the clubs’ legitimate interest in their boards being able to organise the club’s work.
Meeting agendas
Club boards can save draft meeting agendas in the portal to prepare their agendas in 41er*world. The drafts may contain names, for example of speakers. The club’s board and the national board see the drafts, and they are deleted a year after their last change. The basis for this processing is the clubs’ legitimate interest in their boards being able to organise the club’s work.
Event registration
When you register for an event, the portal keeps your name, email address and club, or your organisation and club number for joint events of the Round Table family. It also keeps which programme items you choose, their prices and the status of your registration, for example whether it is on the waiting list.
The data is used to organise the event and to send you a confirmation and a link you can use to change or cancel your registration. The host club’s board and the national board see the registrations and can download a list of them. Emails are sent with Microsoft’s Azure Communication Services, and the portal keeps no copy of them once sent.
The basis for this processing is that it is necessary to carry out your registration.
Three months after the event ends, your name and email address are deleted, together with your link. What remains is the club, the programme items and the amount, without name or email address, so that the event’s numbers and accounts stay correct.
Hosting and service providers
The portal and its database are hosted on Microsoft Azure in Sweden, and the email service stores its data in Europe. Microsoft processes the data on the association’s behalf under a data processing agreement. Database backups are kept for seven days, so deleted data can remain in them for up to seven days longer.
41er*world is run by Round Table International in Luxembourg, which is responsible for its own processing.
Security
All traffic to the website and the portal is encrypted (HTTPS). Names and email addresses are encrypted in the database, and their keys are kept in Azure Key Vault. Access to the portal follows access rights, and only the association’s webmaster has technical access to the database. The webmaster also works with a copy of the member lists and agenda drafts on their own computer while developing the portal; the names are encrypted there too.
Your rights
You have the right to know what data the association holds about you, to get a copy of it and to have incorrect data corrected. You can also ask for data to be deleted or its processing restricted, object to processing based on legitimate interests, and withdraw your consent. In some cases you have the right to receive the data in a machine-readable format.
Members’ names, statuses and offices come from 41er*world, and are best corrected there; the correction reaches the portal at the next update. Send any other request to the association’s email address above. If you believe the association is not handling your data correctly, you can complain to the Icelandic Data Protection Authority, Persónuvernd.
The association updates this page when its processing changes. Last updated 12 October 2026.