Privacy policy
Last updated: 10 October 2026
Heimaglans takes the protection of personal data seriously. This policy explains what we collect, why, how long we keep it and what rights you have. It is based on the Icelandic Act No. 90/2018 on Data Protection and the Processing of Personal Data and the General Data Protection Regulation (EU) 2016/679.
Controller
Company name ehf., reg. no. [000000-0000], address, is responsible for the processing of personal data on heimaglans.is and in connection with Heimaglans services.
Email: hallo@heimaglans.is · Phone: 800 1234
What we collect
- Enquiries: name, phone number and, if you choose, email, address, estimated roof edge length, message and the calculator result.
- Photos: photos of your house or garden that you send so we can assess the job. Please avoid photos where people or number plates are clearly visible.
- Customers: what we need to deliver the service and invoice you, e.g. name, Icelandic ID number (kennitala), address and payment details.
- Communication: emails and phone calls between us.
- Website use: only if you accept cookies, see Cookies.
Purposes and legal basis
- Answering your enquiry and preparing a quote – steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
- Delivering the service and invoicing – contract and legal obligation, including the Icelandic Bookkeeping Act No. 145/1994.
- Website analytics and advertising – only with your consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time.
- Website security – our legitimate interest in protecting the site against abuse and spam (Art. 6(1)(f) GDPR).
How long we keep data
- Enquiries and photos that do not lead to an order are deleted within 12 months.
- Customer photos and job details are deleted 12 months after the last service, unless you ask us to keep them for next season.
- Accounting records are kept for 7 years as required by law.
- Google Analytics data is kept for 14 months.
Who has access
We never sell personal data. Only Heimaglans staff who need the information have access to it. We use the following processors, who act only on our instructions:
- Website hosting: hosting provider.
- Email service that sends enquiry notifications: email provider.
- Google Ireland Ltd. (Google Analytics) and Meta Platforms Ireland Ltd. (Meta Pixel) – only if you accept cookies.
Google and Meta may transfer data to the United States. Such transfers rely on the EU-U.S. Data Privacy Framework and standard contractual clauses.
Your rights
You have the right to:
- access the data we hold about you,
- have inaccurate data corrected,
- have your data erased,
- object to or restrict processing,
- receive your data in a machine-readable format (data portability),
- withdraw consent at any time.
Send your request to hallo@heimaglans.is and we will reply within one month. If you believe the processing breaks the law, you can complain to the Icelandic Data Protection Authority (Persónuvernd), www.personuvernd.is.
Security
The website uses an encrypted connection (HTTPS). Enquiries and photos are stored in a restricted area that only Heimaglans staff can access.
Cookies
Information about cookies and how to change your choice is on the Cookies page.
Changes
We may update this policy, for example if our services change. The latest version is always published on this page.