Controller
The controller is: HBHF ehf. (company ID: [fill in]). Address: [fill in]. Email: [fill in].
What personal data we process
We may process information you provide (e.g. name and email), usage/technical information (e.g. IP address), and transaction-related information (e.g. orders and delivery details) where applicable.
Purposes
We process personal data to operate the website, respond to inquiries, provide services, perform contracts, maintain security, and comply with legal obligations.
Legal basis
Depending on the context, processing is based on consent, contract, legal obligation, or legitimate interests. We assess legitimate interests where we rely on them.
Sharing with third parties
We do not share personal data unless necessary to provide the service (e.g. hosting providers, email services, payment or shipping providers) or required by law. We enter into processor agreements where applicable.
Retention
We keep personal data only as long as necessary for the stated purposes and legal requirements. When data is no longer needed it is deleted or anonymized.
Your rights
You may have rights of access, rectification, erasure, restriction, objection and data portability. You can withdraw consent at any time where processing is based on consent.
Complaint
If you believe processing does not comply with applicable rules, you can contact the Icelandic DPA (Persónuvernd). More information is available on their website.
Changes
We may update this policy. The latest version is always published on this page.