Privacy Policy
How we collect, use and protect your personal data when you visit our website or book a service.
COMPLIANCE
Gæðasprautun ehf. is committed to handling personal data responsibly and in accordance with applicable data protection laws, including Icelandic Act No. 90/2018 on Data Protection and the Processing of Personal Data.
This privacy policy explains how personal data may be processed when you visit our website, contact us or request an assessment of vehicle damage or repairs.
2. Data Controller
The data controller is:
Gæðasprautun ehf.
Company registration number: 530202-2080
Address: Súðarvogur 38, 104 Reykjavík, Iceland
Email: gspr@gspr.is
Phone: +354 557 1515
Website: gaedasprautun.is
3. What information may we collect?
When you contact us or request a service, we may process:
Your name and contact details, including your email address and phone number.
Vehicle information, including the registration number where relevant.
Photos of vehicle damage that you provide.
Messages and other information you choose to share with us.
Information necessary to assess damage, prepare a quote or arrange a repair.
Technical information may also be generated when you use our website, depending on the services and technologies enabled.
4. Purpose and legal basis for processing
We process personal data where necessary to:
Respond to enquiries and communicate with customers.
Assess vehicle damage and provide information about possible repairs.
Prepare quotes and take steps before entering into or performing a service contract.
Arrange and carry out repairs.
Meet legal obligations, including accounting and invoicing requirements.
Maintain the security and proper operation of our website.
Depending on the circumstances, the legal basis may be the performance of a contract, steps taken at your request before entering into a contract, compliance with a legal obligation or our legitimate interests.
Where processing is based on consent, such as certain optional cookies, you may withdraw that consent.
5. Vehicle images and information
If you send us photos of vehicle damage or information about a vehicle, we use them to review your enquiry and assess possible repairs.
Please avoid including personal information that is not necessary for your enquiry.
6. Sharing personal data
Personal data may be shared with service providers assisting us with website operation, communications, information technology or other necessary business activities.
Where relevant, information may also need to be shared with insurance companies or disclosed to meet legal obligations.
Any sharing should be limited to what is necessary and supported by an appropriate legal basis.
Where personal data is transferred outside the European Economic Area, appropriate safeguards must be in place under applicable law.
7. Data retention
We retain personal data only for as long as necessary to respond to enquiries, provide services and comply with legal obligations.
Retention periods depend on the nature of the information, the purpose of processing and applicable legal requirements, including accounting and invoicing obligations.
When personal data is no longer needed, it is deleted or anonymised.
8. Cookies and analytics
Our website is built with Framer and uses Google Analytics to collect statistical information about website visits and usage.
Google Analytics may collect information about pages visited, website interactions, device and browser types, and approximate user location.
Analytics cookies are used only with your consent. You can reject them or change your consent through the website's cookie settings.
9. Your Rights
Under applicable data protection laws, you may have the right to:
Receive information about how your personal data is processed.
Request access to your personal data.
Request correction of inaccurate information.
Request erasure or restriction of processing.
Object to certain processing activities.
Request data portability where applicable.
Withdraw consent where processing is based on consent.
You can contact us at gspr@gspr.is regarding privacy-related requests.
You also have the right to lodge a complaint with the Icelandic Data Protection Authority (Persónuvernd).
10. Changes to the policy
We may update this privacy policy to reflect changes in our operations, data processing activities or applicable legal requirements.
The latest version will be published on this page.