Privacy Policy

What information do we collect?

The personal data we collect depends on which service a customer has requested and the purpose for which they have contacted us. Information we may collect includes:

• Name, national ID number, email address, phone number, home address and other contact details.
• Credit/debit card numbers, account information and other banking details.
• Order history, invoice information and other details we need to process and deliver orders.
• Payment information and payment dates.
• Communications with us: emails, messages, phone calls, letters and other correspondence.
• Data on website usage (IP address, browser, visits, etc.).
• Data customers provide to us, for example for printing.

Except as specifically stated in this policy, the company collects personal data directly from customers. Information may, however, also come from a third party, e.g. from the National Registry (Þjóðskrá).

How do we use personal information?

• To provide the services/products requested and process orders.
• To process and respond to requests and enquiries.
• To inform you about services, changes or special offers.
• To issue invoices for purchases made with us.
• To assess customer creditworthiness.
• To comply with legal obligations that apply to our business.

Sharing of personal information

Svansprent ehf. may share personal data with third parties that provide services related to the company's operations, such as accountants, lawyers and consultants. Such sharing is based on the legitimate interest of outsourcing tasks.

Personal data may also be shared with supervisory authorities where required by law, administrative order or court ruling, for example with the Financial Supervisory Authority, the Directorate of Internal Revenue, or the police.

Third parties

This policy does not cover the collection or processing of data by third parties over which we have no control. We encourage you to review the privacy policies of such parties, e.g. Facebook, Apple, Google, Microsoft and any payment services you choose to use.

How do we protect personal information?

We take appropriate technical and organisational security measures to protect data against unauthorised access, alteration, disclosure or destruction. Access is restricted to those employees who need it for their work.

Data is stored in access-controlled computer systems with regular updates and monitoring. We will notify you without undue delay if a security breach occurs that poses a significant risk.

How long do we retain the information?

We do not retain personal data for longer than is necessary or required by law.

Your rights as an individual

Among others, you have the following rights:

• The right of access to your data (a copy).
• The right to have inaccurate information corrected.
• The right to erasure where processing is no longer necessary or is unlawful.
• The right to object to processing based on law or contract.

If you wish to exercise your rights or have questions about the processing of personal data, please contact us at adstod@svansprent.is.

Changes to this privacy policy

We reserve the right to amend this privacy policy. Any changes will be published on our website and take effect once published. We encourage you to review this page periodically for updates.