Privacy policy

Privacy Policy

Effective Date: 30 May2024
Last Updated: 8 June 2025

At Jötnar Mountaineering ("we", "our", or "us"), accessible from www.jotnarmountaineering.is, we are committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, and protect your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

1. Who We Are

Jötnar Mountaineering is an Iceland-based adventure tourism company offering mountaineering and guided outdoor experiences. If you have any questions regarding this policy, please contact:

Email: info@jotnarmountaineering.is
Phone: +3548576253
Address: Bustaðavegur 61, 108 Reykjavik

2. Information We Collect

We may collect and process the following types of personal data:

• Identity Data: name, nationality, date of birth
• Contact Data: email address, phone number, billing address
• Booking Information: tour details, preferences, emergency contacts
• Payment Information: via third-party payment processors (we do not store card data)
• Technical Data: IP address, browser type, operating system
• Usage Data: how you use our website
• Marketing Data: preferences for receiving marketing from us (only with consent)

3. How We Collect Data

We collect personal data through:

• Booking forms on our website
• Email and direct communication
• Cookies and similar technologies
• Third-party platforms (e.g. online booking providers or payment gateways)

4. How We Use Your Data

We process your personal data for the following purposes:

• To confirm and manage bookings
• To provide customer service
• To send essential information related to your tour
• To comply with legal obligations (e.g. safety regulations)
• With your consent, to send promotional emails or newsletters

We only process personal data where we have a lawful basis to do so.

5. Data Sharing and Third Parties

We do not sell your personal data. We may share it with trusted third parties, including:

• Payment processors (e.g. Stripe, Rapyd)
• Booking systems (e.g. Bókun)
• Guides and staff responsible for your activity
• Legal authorities, if required by law

All third parties are required to handle your data securely and only for specified purposes.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• 7 years for accounting records (legal requirement)
• Booking data for 2 years
• Newsletter data until you unsubscribe

7. Your Rights

You have the following rights under GDPR:

• Access your personal data
• Correct inaccurate or incomplete data
• Request deletion (right to be forgotten)
• Restrict or object to processing
• Data portability
• Withdraw consent at any time

To exercise these rights, contact us at [insert email address].

8. Cookies

Our website may use cookies to improve functionality and user experience. You can control cookie settings in your browser. A detailed Cookie Policy is available [insert link if applicable].

9. Data Security

We take data protection seriously and implement appropriate technical and organizational measures to prevent unauthorized access, loss, or misuse of your data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. All changes will be posted on this page, with an updated revision date.

11. Complaints

If you believe your data has been misused, you can lodge a complaint with the Icelandic Data Protection Authority (Persónuvernd) at www.personuvernd.is.

Thank you for trusting Jötnar Mountaineering.