Privacy & Cookies
Personal data processing — Barny's Bílaverkstæði
Effective from: 15 June 2026
Data controller: Barny's Bílaverkstæði, Dalvegur 24, 201 Kópavogur, Iceland · Email: info@bilaverkstaedibarnys.is · Phone: +354 8888 338
1. Data Controller
The data controller is Barny's Bílaverkstæði (hereinafter "we").
For any inquiries about the processing of your personal data, contact us at info@bilaverkstaedibarnys.is or +354 8888 338.
2. Personal Data We Process
We only process personal data that you provide to us, or that arises from your visit to this website:
- Name
- Email address
- Phone number
- Selected service and the content of your message or inquiry
- Booking details when you book online (name, email, date and time)
- Technical data from your visit: IP address, browser type, pages visited and time — only with your consent to analytics cookies
3. Purposes and Legal Bases of Processing
We process your personal data for the following purposes and on the following legal bases:
- Responding to inquiries and booking services — legal basis: performance of a contract or pre-contractual measures at your request (Art. 6(1)(b) GDPR)
- Fulfilling legal obligations (invoicing, accounting) — legal basis: legal obligation (Art. 6(1)(c) GDPR)
- Traffic measurement and website improvement — legal basis: your consent via cookie settings (Art. 6(1)(a) GDPR)
4. Recipients of Personal Data
We never sell your personal data. We share it only with processors who help us operate:
- Vercel Inc. — website hosting
- Seznam.cz, a.s. — email service (Email Profi) for delivering contact form messages
- Cal.com, Inc. — online booking system for appointments
- Google Ireland Ltd. (Google Analytics) — website analytics, only with your consent
- Meta Platforms Ireland Ltd. (Meta Pixel) — measurement, only with your consent
- Public authorities, where required by law or a court order
All such parties are contractually bound to protect your personal data and process it solely according to our instructions.
5. Retention Period
We retain personal data only for as long as necessary to fulfill the purpose of processing:
- Inquiries and communication: for the duration of the exchange and up to 3 years afterwards
- Accounting and tax documents: 7 years from issuance (statutory period)
- Website analytics data: up to 26 months
6. Your Rights
Under Act No. 90/2018 and GDPR, you have the following rights. Submit a request to info@bilaverkstaedibarnys.is and we will respond within 30 days.
Right of access
You have the right to know whether we process your personal data and to obtain a copy.
Right to rectification
If your data is inaccurate or incomplete, you have the right to request correction.
Right to erasure
You have the right to request deletion of your data once the purpose of processing has ceased or consent has been withdrawn.
Right to restriction
You have the right to request restriction of processing in cases provided by law.
Right to data portability
Data processed on the basis of contract or consent will be provided to you in a machine-readable format.
Right to withdraw consent
You can withdraw consent to analytics cookies at any time by clearing cookies and local storage in your browser.
Right to lodge a complaint
If you believe processing violates the law, you may lodge a complaint with the Icelandic Data Protection Authority (Persónuvernd), Rauðarárstígur 10, 105 Reykjavík — personuvernd.is.
7. Cookies
Our website uses cookies. We distinguish two categories:
- Necessary cookies — enable basic website functionality (e.g. language preferences); they work without consent and cannot be refused
- Analytics cookies — we measure anonymized traffic via Google Analytics and Meta Pixel to improve the site; they load only after you grant consent in the cookie banner
You can change your choice at any time by clearing cookies and local storage in your browser. Refusing analytics cookies does not affect basic website functionality.
8. Security of Personal Data
We have implemented appropriate technical and organizational measures to protect your personal data: encrypted data transmission (HTTPS/TLS), access restrictions and regular monitoring.
While we take all reasonable security measures, data transmission over the internet cannot be considered absolutely secure.
9. Final Provisions
This policy takes effect on 15 June 2026. We reserve the right to update it; the current version is always published on this page.
This policy complies with Act No. 90/2018 on Data Protection and the Processing of Personal Data and Regulation (EU) 2016/679 (GDPR).