Privacy Policy
1. Data Controller
The party responsible for data processing on this website is:
Veffirma ehf.
Karfavogur 52
104 Reykjavík
Iceland
Represented by: Patrick Puelmanns
Email: privacy@veffirma.is\
2. General
The protection of your personal data is important to us. We process your data solely within the framework of applicable data protection law, in particular the General Data Protection Regulation (GDPR) and Icelandic data protection legislation (Act No. 90/2018). This website uses no cookies and employs no tracking technologies that store or read information on your device.
3. Server Log Files (Hosting)
This website is hosted by statichost.eu. When you visit the site, the hosting provider automatically collects and stores information in so-called server log files. This may include: IP address, date and time of access, page visited, volume of data transferred, browser type, and operating system.
This data is used solely for the technical provision, security, and stability of the website and is not merged with other data sources.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in providing a secure, functional website).
4. Analytics
To analyse website usage we use Simple Analytics, a privacy-friendly analytics service. Simple Analytics sets no cookies and stores no personal data. No IP addresses are stored and no data is linked across multiple websites. Individual visitors cannot be identified.
Only aggregated, anonymous statistics are collected (e.g. number of page views, approximate country-level origin, referring sites). As no personal data is processed, no consent is required.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in statistical evaluation of website operation).
5. Contacting Us
If you contact us by email [or via the contact form], the information you provide (e.g. name, email address, content of your message) will be stored in order to process your enquiry. We do not pass on this data without your consent. Our email is operated via Mailbox.org (Mailbox.org AG, Germany).
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or (f) (legitimate interest in responding to enquiries).
Your enquiries are deleted once they are no longer required, at the latest upon expiry of any statutory retention periods.
6. Your Rights
You have the right to: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection to processing (Art. 21).
To exercise your rights, an informal message to privacy@veffirma.is is sufficient.
7. Right to Complain
You have the right to lodge a complaint with a data protection supervisory authority. The competent authority at the company’s place of business is:
Persónuvernd (Icelandic Data Protection Authority)
Rauðarárstígur 10, 105 Reykjavík, Island
postur@personuvernd.is
personuvernd.is
Visitors from Germany or other EU/EEA states may also contact the supervisory authority for their place of residence.
8. Changes
We reserve the right to amend this privacy policy to keep it in line with current legal requirements.
Last updated: June 2026