Tilboð.is

1. General Information

This Privacy Policy applies to the website www.tilbod.is and is issued by Salt Strategy ehf., ID no. 481117-0890, Galtalind 26, 201 Kópavogur, Iceland (hereinafter "Tilbod.is").

This policy explains how Tilbod.is collects, processes, stores, and protects personal data in accordance with the EU General Data Protection Regulation (GDPR), as implemented in Icelandic law by Act No. 90/2018 on Data Protection and the Processing of Personal Data.

By registering on Tilbod.is, users confirm that they are 13 years of age or older, in accordance with Icelandic law. Tilbod.is does not knowingly collect personal data from children under the age of 13.

Users may update their personal data via "My Pages" or by contacting us at tilbod@tilbod.is.

2. Personal Data We Process and Its Purpose

Personal data refers to any information relating to an identified or identifiable individual. Tilbod.is processes only personal data that is necessary for operating the website and providing its services.

2.1 Categories of Personal Data

Contact and Transaction Data
Name
Email address
Postal address
Phone number

This data is processed to:

complete purchases and deliver gift vouchers
provide customer service and respond to inquiries
fulfill contractual obligations
comply with legal obligations, including accounting requirements
protect the legitimate interests of the company in case of disputes

Communication Data

Email correspondence
Communications via social media or customer service channels

Processed for customer support, record-keeping, and service quality purposes.

Technical Data

IP address
Browser type and operating system
Visit duration, pages viewed, and timestamps
Cookie identifiers and similar technologies

Processed to:

ensure website security and functionality
prevent fraud and cyberattacks
analyze usage and improve services

Personally identifiable technical data is stored for a maximum of 6 months, unless longer retention is required by law.

Marketing and Analytics Data

Purchase behavior
Interaction with marketing emails
Website usage for analytics and advertising purposes

Used to:

personalize offers and content
send newsletters and promotional materials (with consent)
measure and improve marketing effectiveness

Tilbod.is never sells personal data to third parties.

3. Legal Basis for Processing

Tilbod.is processes personal data based on one or more of the following legal grounds:

Contractual necessity – to process purchases and deliver services
Legal obligation – e.g. accounting and regulatory requirements
Consent – for marketing communications and non-essential cookies
Legitimate interests – website security, fraud prevention, service development, and business operations

Users may withdraw consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

4. Sensitive Personal Data

Tilbod.is does not process special categories of personal data, including data related to:

health
religion
political opinions
sexual orientation
genetic or biometric data

5. Data Storage and Security

Tilbod.is applies appropriate technical and organizational security measures to protect personal data against unauthorized access, loss, alteration, or misuse.

Access to personal data is restricted to authorized personnel and service providers who require access for legitimate business purposes.

6. Disclosure to Third Parties

Tilbod.is may share personal data with:

Merchants, where necessary to fulfill orders
Service providers supplying technical infrastructure (e.g. payment gateways, hosting providers)

All third parties are required to process personal data in compliance with GDPR and solely for agreed purposes.

In the event of a merger or sale of the business, personal data may be transferred to a new operator.

7. Transfers Outside the EEA

Where personal data is transferred outside the European Economic Area (EEA), Tilbod.is ensures appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.

8. Data Retention

Transaction and customer data: retained for the duration of the customer relationship and as required by law

Accounting records: retained for 7 years

Marketing data: retained until consent is withdrawn

In some cases, data may be anonymized and used for statistical or analytical purposes.

9. Your Rights

Under GDPR, you have the right to:

access your personal data
request correction of inaccurate data
request deletion of data where applicable
restrict or object to processing
request data portability
lodge a complaint with a supervisory authority

Icelandic Data Protection Authority (Persónuvernd): www.personuvernd.is

Tilbod.is encourages users to contact us first so we can address concerns directly.

10. External Links

The Tilbod.is website may contain links to third-party websites. This Privacy Policy does not apply to those sites, and users are encouraged to review the privacy policies of any third-party websites they visit.

11. Cookies

Tilbod.is uses cookies to:

ensure proper website functionality
analyze usage
improve user experience
manage and measure advertising

Users may choose whether to accept non-essential cookies. Essential cookies are always active.

12. Contact Information

If you have any questions or requests regarding this Privacy Policy or the processing of your personal data, please contact:

Tilbod.is

Email: tilbod@tilbod.is

Website: www.tilbod.is

Privacy Policy of Tilbod.is