Privacy
Rennsli ehf. processes personal data in accordance with Act No. 90/2018 on Data Protection and the Processing of Personal Data and Regulation (EU) 2016/679, the General Data Protection Regulation.
Controller
Rennsli ehf., reg. no. 711291-2029, Akralind 1, 201 Kópavogur. Email: rennsli@rennsli.is .
Enquiries
When you send an enquiry through the website, we receive it by email: your name, email address and anything you add (company, phone, enquiry type, description). The form is protected against spam by Cloudflare Turnstile, which assesses technical signals from your browser but sets no cookies. If the form cannot be sent, an email opens in your own email app instead. We need your name and email address to be able to reply; everything else is optional.
We use the information to reply to and handle your enquiry and, where relevant, for a quotation or contract. The legal basis is our legitimate interest in responding to enquiries (point 6 of Article 9 of Act No. 90/2018, cf. Article 6(1)(f) of the Regulation). If you are yourself a prospective customer, the processing is based on your request to enter into a contract (point 2 of Article 9, cf. Article 6(1)(b)). We do not use the information for marketing and we do not sell it. We do not disclose it to others except to those who work for us, as the work requires or as the law provides.
Job applications
We use applications received by email to assess applicants and to get in touch if a position becomes available. The legal basis is your request prior to entering into a contract (point 2 of Article 9 of Act No. 90/2018, cf. Article 6(1)(b)) and our legitimate interests (Article 6(1)(f)). We keep applications for up to 12 months. If you would like an application deleted sooner, write to us.
Business contacts
We record the names, email addresses and phone numbers of contacts at clients, main contractors and suppliers in order to carry out the work and communicate about it. The legal basis is contract (Article 6(1)(b)) or our legitimate interests (Article 6(1)(f)). We keep the information for as long as the business relationship lasts and the correspondence may be relevant.
How long
We keep enquiries in our email for as long as they may be useful in our communication with you or your company. Data relating to invoices is kept for seven years from the end of the financial year concerned, as required by law (Article 20 of the Bookkeeping Act No. 145/1994; point 3 of Article 9 of Act No. 90/2018, cf. Article 6(1)(c)).
Who else is involved
The website is hosted by Cloudflare, which logs visitors' IP addresses for security purposes. An enquiry from the form passes through Cloudflare and Microsoft Power Automate, which sends it to our mailbox without storing the content. Our email is hosted by Microsoft. Both are US companies, and the transfer of data to the United States is based on the European Commission's adequacy decision (EU-US Data Privacy Framework). The website sets no cookies and uses no web analytics.
Security
Access to our mailboxes is restricted to staff and protected by two-factor authentication.
Your rights
You can request access to information about you, rectification, erasure or restriction of processing, receive the data and object to processing. Write to us at rennsli@rennsli.is . We reply within one month. A legal obligation may prevent erasure. You can also lodge a complaint with the Icelandic Data Protection Authority (personuvernd.is ).
We may update this statement. The latest version is always here on the website.