Privacy Policy
Privacy Notice
Our collection and use of your personal data are essential for delivering our diverse range of services effectively. The personal data is primarily gathered based on our legitimate interests, in compliance with Article 6(1)(f) of the General Data Protection Regulation (EU) 2016/679.
Whenever necessary, we will explicitly request your separate consent before collecting your personal data.
This is our promise to you:
- We promise to keep you informed about how we use your information and who we give it to.
- We promise to collect, use and store your personal data in a safe and secure way.
- We promise to only collect the data we need in order to provide you with our services.
- We promise to only use your personal data for the specific purposes stated.
What do we need
Why do we need your data?
What do we do with
your data?
All the personal data we process is processed by our staff here in Iceland. The data is hosted on servers here in Iceland.
Part of our services is providing tours in co-operation with other, third party tour operators as well as selling tours solely operated by third party tour operators. In those cases we will provide them with your basic personal data so that they may be able to provide you with the services you have purchased.
Your credit card information is processed by Verifone and Rapyd (https://www.verifone.com/en/us). All credit card transaction processes have been verified by Verifone and Rapyd and are safeguarded at all times.
We have a data protection regime in place to oversee the effective and secure processing of your personal data.
How long do we keep
your data?
We will keep your data as long as there is a statutory or legal requirement to do so or as long as we need in order to provide our services to you, after which time it will be destroyed. For accounting and auditing purposes we may retain your personal data for a period of time after our services have been rendered.
Your information that we use for direct marketing purposes will be kept with us until such time you notify us that you no longer wish to receive marketing information from us.
Is there anything else we
would like to do with
your data?
How secure is your data?
What are your rights?
You have a right to request access to your personal data at any point. If at any point you believe the information we process on you is incorrect you can request to see this information and even have it corrected or deleted. If the processing of your personal data is based on your consent you have the right to withdraw that consent at any time.
If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law you can send a complaint to the Icelandic Data Protection Agency https://www.personuvernd.is/.