April 21, 2026
Privacy Policy
Data controller
Vitvélar ehf., Hjálmholt 2, 105 Reykjavík, Iceland, kt. 591206-1090, is the data controller for this website and related lead capture.
For privacy requests, contact vitvelar@vitvelar.is.
What we collect and why
We collect names, email addresses, company names, phone numbers, and workflow descriptions when you contact us or request a consultation. This is processed to respond to your inquiry and pursue a legitimate business conversation.
If you subscribe to the newsletter, we process your email and engagement data on the basis of consent.
If you use the chatbot, we process the conversation you choose to send for service delivery and service improvement. Where required, we rely on your consent when you initiate the conversation.
For the client portal, we process account and service usage data to perform our contract with paying clients.
Cookies and similar technologies
Necessary cookies keep the preview gate, locale preference, and session state working.
Analytics cookies are used only if you opt in to analytics. Marketing cookies are used only if you opt in to marketing.
| vitvelar-preview | Keeps the site unlocked during the session | Session | Necessary |
| vitvelar-consent | Stores cookie preferences | 12 months | Necessary |
| Umami script state | Website analytics | Varies | Analytics |
| Google Tag / Meta Pixel | Campaign measurement and conversions | Varies | Marketing |
Processors and transfers
Processors may include Anthropic, Supabase, Klaviyo, Google, Meta, Umami, and Cal.com depending on the feature you use.
Where data is transferred outside the EEA, we rely on adequacy decisions, Standard Contractual Clauses, or equivalent safeguards offered by the processor.
Retention
Lead and contact form data is normally retained for up to 24 months.
Analytics data is retained for up to 26 months depending on the configured provider.
Chatbot logs are retained for up to 12 months unless a shorter period is configured.
Client portal data is retained for the life of the service relationship and thereafter according to contractual and legal obligations.
Your rights
You may request access, rectification, erasure, restriction, portability, or object to processing where applicable.
You may withdraw consent at any time for consent-based processing, including newsletter marketing and optional cookies.
You may also lodge a complaint with Persónuvernd, the Icelandic Data Protection Authority.