Glacier Adventure ehf. – Privacy Policy

Glacier Adventure ehf., ID no. 620415-1620, (hereinafter: „Glacier Adventure“ or „We“) places great emphasis on the protection of personal data and respect for the privacy of our customers. This Privacy Policy describes how We collect, use, share, and protect personal data in accordance with Act No. 90/2018 on Data Protection and the Processing of Personal Data and the General Data Protection Regulation (EU) 2016/679.

1. What is personal data and how do we collect it?

Personal data means any information relating to an identified or identifiable natural person, i.e., if it is possible to identify them directly or indirectly, such as by reference to an identifier like a name, national identification number, location data, or an online identifier, or to one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity, cf. Article 3(1)(2) of Act No. 90/2018.

We collect personal data when you book a tour with us through our website, communicate with us via email or phone, or otherwise when you use our services. This may include:

  • Basic information: Name, email address, phone number, nationality.
  • Booking information: Type of tour, date, number of participants, payment information.
  • Health information: Certain tours may require information about physical fitness or health (e.g., medical conditions, previous injuries, or medication) to ensure the safety of participants, cf. Glacier Adventure’s published terms and conditions. Such information is considered sensitive personal data and is collected with your explicit consent, cf. Article 11(1)(1) of Act No. 90/2018.
  • Tracking data (cookies): Our website uses cookies to collect data about website usage, such as user journey, bounce rate, unique clicks, and where the user comes from, for the purpose of improving user experience and customizing the site, cf. Glacier Adventure’s published terms and conditions. We primarily share tracking data with CookieHub, Cloudflare, Google Analytics, Google Ads, Matomo, Meta Pixel, Pinterest, TikTok Marketing, and YouTube. This information is generally not linked to identifiable individuals unless you provide specific consent for its transfer for marketing purposes, cf. sections 2 and 3 of this Privacy Policy. Further information on the use of cookies can be found in section 6 of this Privacy Policy.

2. Purpose of processing personal data

Glacier Adventure processes personal data for the following purposes, which are in line with the principle of purpose limitation, cf. Article 8(1)(2) of Act No. 90/2018:

  • To provide services and process bookings: The primary purpose is to process your tour bookings, confirm services, and send you necessary information for your tour.
  • To ensure safety: Information about health or physical condition is used to ensure your safety and that of other participants in our tours, cf. Glacier Adventure’s published Safety Policy, and is processed based on your explicit consent or to protect your vital interests, cf. Article 11(1) of Act No. 90/2018.
  • To improve our services: We use tracking data to analyze our website usage and improve our services and customer experience.
  • For marketing purposes on social media (with consent): With your clear and explicit consent, we will share cookies and tracking data with Skyrhúsið ehf., ID no. 480507-0960, so that they, in collaboration with the marketing agency, can display personalized advertisements and accommodation offers on social media platforms such as Facebook and Instagram. This processing is based on Article 9(1)(1) of Act No. 90/2018 and is subject to your specific consent for the use of marketing cookies on our website. You are free to give or refuse this consent, and it is not a condition for booking a tour, cf. Article 10(4) of Act No. 90/2018.

3. Disclosure of personal data to third parties

We disclose personal data to third parties in the following cases:

  • Skyrhúsið ehf.: As stated above, we share your name and email address with Skyrhúsið ehf. for marketing purposes if you have given us your explicit consent. Also, if you have given specific consent, we share cookies and tracking data with Skyrhúsið ehf. for the purpose of displaying personalized advertisements on social media. In such cases, Skyrhúsið ehf. acts as an independent data controller.
  • Service providers: We use service providers who process personal data on our behalf (e.g., booking systems, payment processors, web analytics tools like Google Analytics). In such cases, we enter into written agreements with them, which stipulate their obligations regarding data protection and information security, cf. Article 25 of Act No. 90/2018. For social media marketing, the marketing agency is a potential data processor on our behalf, and we will enter into appropriate agreements with them.
  • Laws and regulations: We may disclose personal data if we are legally obligated to do so, e.g., due to requests from authorities or courts.

4. Security of personal data

Glacier Adventure implements appropriate technical and organizational measures to ensure the security of personal data, cf. Article 8(1)(6) of Act No. 90/2018. This includes protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage. We ensure that only employees who need access to personal data for their work receive such access and that they are bound by confidentiality.

5. Your rights

You have the following rights regarding your personal data, cf. Chapter 3 of Act No. 90/2018:

  • Right to information: The right to receive information about the collection and processing of personal data.
  • Right of access: The right to obtain confirmation as to whether personal data concerning you are being processed and, if so, to access the data, cf. Article 17 of Act No. 90/2018.
  • Right to rectification: The right to have inaccurate or incomplete personal data rectified without undue delay.
  • Right to erasure (“right to be forgotten”): The right to have personal data concerning you erased without undue delay, e.g., if the data is no longer necessary for the purpose for which it was collected.
  • Right to restriction of processing: The right to restrict the processing of personal data to certain actions.
  • Right to object to processing: The right to object to the processing of personal data, especially if the processing is for marketing purposes, cf. Article 21 of Act No. 90/2018.
  • Right to withdraw consent: If processing is based on your consent, you have the right to withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn, cf. Article 10(3) of Act No. 90/2018.
  • Right to lodge a complaint: You have the right to lodge a complaint with the Icelandic Data Protection Authority (Persónuvernd) if you believe that Glacier Adventure has violated data protection legislation.

6. Browser Cookies

Glacier Adventure’s website uses cookies to improve user experience. Cookies are small text files that are stored on your computer or other devices when you visit the website. They allow us to collect data about the user’s journey, bounce rate, unique clicks on the site, and where the user comes from. This information is used to better adapt the website to the user and improve our services. We primarily share tracking data with CookieHub, Cloudflare, Google Analytics, Google Ads, Matomo, Meta Pixel, Pinterest, TikTok Marketing, and YouTube.

If you have provided specific consent for the use of marketing cookies, we will also share cookies and tracking data with Skyrhúsið ehf. for the purpose of displaying personalized advertisements and accommodation offers on social media.

We understand the importance of keeping this information secure, and no attempt will be made to link it to individuals. You can disable cookies at any time in your browser settings, but please note that this may affect the functionality of the website. For cookies that are not essential for the website’s functionality, we ask for your consent when you visit our website.

7. Data retention period

Personal data is not retained longer than necessary for the purpose of processing, cf. Article 8(1)(5) of Act No. 90/2018. We delete or anonymize personal data when the purpose of processing has been achieved, unless a legal obligation requires otherwise (e.g., accounting laws).

8. Contact information

If you have any questions about this privacy policy or Glacier Adventure’s processing of personal data, please contact us at: ⁠​

Glacier Adventure ehf.

Hali 2, 781 Höfn, Iceland

[email protected]

TEL: 571-4577

 

Last updated on: 28.4.2026