A short introduction in plain English

So here’s the deal: we basically don’t use your data for any marketing purposes whatsoever. We’re too small, too busy and probably a little bit too lazy too. We don’t run any retargeting ads and we don’t have any automatic processes in place where you’ll get some sort of marketing e-mail if you take a look at a certain page on our website or anything of that sort. I know this makes us lousy at marketing according to most modern standards but we’re doing just fine without all of this.

We do however collect some personal data which you are entitled to know about and ask that we delete which is explained in some detail below.

Before we get to all that – we’d like to inform you of the following

Our booking system

We use a third-party booking system called Bókun that provides us with booking widgets that we display on our website. What that means is that all the personal data you give us in the booking process is actually not stored on our web server but with this third-party booking engine provider that has dedicated specialists making sure they take good care of your personal data. If you want to learn more about them, we recommend you check out their Terms (specifically the Data Processing Agreement at the bottom of the page).

We try to limit the personal information we ask for in the booking process to information that relates to your booking: Who you are, where you are staying and how we can reach you in the case of emergency. Some of our partners ask for more information such as clothing size if you need to rent clothing.

We may use some of this information to make your visit with us more pleasant like by sending you an e-mail the day before our walking tour where we remind you to dress warmly. We never, however, sell or transfer this information to anyone.

Furthermore, when you book using our booking system you will be transferred to a secure third-party payment page where you will put in all your details including your credit card number. This payment page is provided by our partner Borgun – one of Iceland’s leading payment solution companies which is certified with the ISO/IEC 27001. We never have access to your personal data there nor your credit card number. Only authorized staff members have access to the limited information we do have access to.

Finally, we have user-specific roles in the booking system so our staff members only have access to information they absolutely need in order to do their jobs properly.

On to the more formal stuff: what personal data we collect and why we collect it

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Contact forms

We do not store any data that you give us through our contact forms. The information will be sent to us via e-mail where your info will only be used to answer your inquires. Our e-mail client and e-mail server are both GDPR compliant.

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction with the embedded content if you have an account and are logged in to that website.

Analytics

The services contained in this section enable the Owner to monitor and analyze web traffic and can be used to keep track of User behavior.

Google Analytics (Google Inc.)

Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google utilizes the Data collected to track and examine the use of this Application, to prepare reports on its activities and share them with other Google services.
Google may use the Data collected to contextualize and personalize the ads of its own advertising network.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy Policy – Opt Out. Privacy Shield participant.

Backup saving and management

This type of service allows the Owner to save and manage backups of this Application on external servers managed by the service provider itself. The backups may include the source code and content as well as the data that the User provides to this Application.

Backup on Dropbox (Dropbox, Inc.)

Dropbox is a service to save and manage backups provided by Dropbox Inc.

Personal Data collected: various types of Data as specified in the privacy policy of the service.

Place of processing: United States – Privacy Policy. Privacy Shield participant.

Commercial affiliation

This type of service allows this Application to display advertisements for third-party products or services. Ads can be displayed either as advertising links or as banners using various kinds of graphics.
Clicks on the icon or banner posted on the Application are tracked by the third-party services listed below, and are shared with this Application.
For details of which data are collected, please refer to the privacy policy of each service.

Amazon Affiliation (Amazon)

Amazon Affiliation is a commercial affiliation service provided by Amazon.com Inc.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy Policy.

Booking.com Affiliate Partner Programme (Booking.com B.V.)

Booking.com Affiliate Partner Programme is a commercial affiliation service provided by Booking.com B.V., part of the Priceline.com group.

Personal Data collected: Cookies and Usage Data.

Place of processing: Netherlands – Privacy Policy.

Contacting the User

Contact form (this Application)

By filling in the contact form with their Data, the User authorizes this Application to use these details to reply to requests for information, quotes or any other kind of request as indicated by the form’s header.

Personal Data collected: email address, first name, last name and website.

Displaying content from external platforms

This type of service allows you to view content hosted on external platforms directly from the pages of this Application and interact with them.
This type of service might still collect web traffic data for the pages where the service is installed, even when Users do not use it.

Google Maps widget (Google Inc.)

Google Maps is a maps visualization service provided by Google Inc. that allows this Application to incorporate content of this kind on its pages.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy Policy. Privacy Shield participant.

Gravatar (Automattic Inc.)

Gravatar is an image visualization service provided by Automattic Inc. that allows this Application to incorporate content of this kind on its pages.
Please note that if Gravatar images are used for comment forms, the commenter’s email address or parts of it may be sent to Gravatar – even if the commenter has not signed up for that service.

Personal Data collected: email address and Usage Data.

Place of processing: United States – Privacy Policy.

Instagram widget (Instagram, Inc.)

Instagram is an image visualization service provided by Instagram, Inc. that allows this Application to incorporate content of this kind on its pages.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy Policy.

SoundCloud widget (SoundCloud Limited)

Soundcloud is an audio content delivery service provided by SoundCloud Limited that allows this Application to incorporate content of this kind on its pages.

Personal Data collected: Usage Data.

Place of processing: Germany – Privacy Policy.

Spotify widget (Spotify AB)

Spotify is an audio content delivery service provided by Spotify AB that allows this Application to incorporate content of this kind on its pages.

Personal Data collected: Cookies and Usage Data.

Place of processing: Sweden – Privacy Policy.

TripAdvisor widget (TripAdvisor LLC)

TripAdvisor widget is a content visualization service provided by TripAdvisor LLC that allows this Application to incorporate content from that external platform on its pages.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States – Privacy Policy.

Infrastructure monitoring

This type of service allows this Application to monitor the use and behavior of its components so its performance, operation, maintenance and troubleshooting can be improved.
Which Personal Data are processed depends on the characteristics and mode of implementation of these services, whose function is to filter the activities of this Application.

Pingdom (Pingdom AB)

Pingdom is a monitoring service provided by Pingdom AB.

Personal Data collected: Cookies and Usage Data.

Place of processing: Sweden – Privacy Policy.

Interaction with data collection platforms and other third parties

This type of service allows Users to interact with data collection platforms or other services directly from the pages of this Application for the purpose of saving and reusing data.
If one of these services is installed, it may collect browsing and Usage Data in the pages where it is installed, even if the Users do not actively use the service.

MailChimp widget (The Rocket Science Group, LLC.)

The MailChimp widget is a service for interacting with the MailChimp email address management and message sending service provided by The Rocket Science Group LLC.

Personal Data collected: email address, first name, last name and Usage Data.

Place of processing: United States – Privacy Policy. Privacy Shield participant.

Interaction with external social networks and platforms

This type of service allows interaction with social networks or other external platforms directly from the pages of this Application.
The interaction and information obtained through this Application are always subject to the User’s privacy settings for each social network.
This type of service might still collect traffic data for the pages where the service is installed, even when Users do not use it.

PayPal button and widgets (PayPal Inc.)

The PayPal button and widgets are services allowing interaction with the PayPal platform provided by PayPal Inc.

Personal Data collected: Cookies and Usage Data.

Place of processing: See the PayPal privacy policy – Privacy Policy.

Managing contacts and sending messages

This type of service makes it possible to manage a database of email contacts, phone contacts or any other contact information to communicate with the User.
These services may also collect data concerning the date and time when the message was viewed by the User, as well as when the User interacted with it, such as by clicking on links included in the message.

MailChimp (The Rocket Science Group, LLC.)

MailChimp is an email address management and message sending service provided by The Rocket Science Group, LLC.

Personal Data collected: email address and first name.

Place of processing: United States – Privacy Policy. Privacy Shield participant.

SPAM protection

This type of service analyzes the traffic of this Application, potentially containing Users’ Personal Data, with the purpose of filtering it from parts of traffic, messages and content that are recognized as SPAM.

Akismet (Automattic Inc.)

Akismet is a SPAM protection service provided by Automattic Inc.

Personal Data collected: various types of Data as specified in the privacy policy of the service.

Place of processing: United States – Privacy Policy.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.