Privacy Policy of Kerlingarfjöll Highland Resort (referred to as KHR)

This Privacy Policy describes how we collect and use the information, which may include personal data, you provide on our web site: www.kerlingarfjoll.is. It also describes the choices available to you regarding our use of your personal data and how you can access and update this data.

Data Collection

All prices are specified per room per night or per person per night in sleeping bag accommodation. All prices are inclusive of the Lodging tax charged on accommodation in Iceland, as well as value added tax.

The types of personal data that we collect include:

Your first name, last name, email address, phone number and home address;

Credit card details (type of card, credit card number, name on card, expiration date and security code);

Guest stay data, including date of arrival and departure, special requests made, observations about your service preferences (including room preferences, facilities or any other services used);

Data you provide regarding your marketing preferences or in the course of participating in surveys, contests or promotional offers;

You may always choose what personal data (if any) you wish to provide to us. If you choose not to provide certain details, however, some of your transactions with us may be impacted.

Data we collect automatically

When using our website, we also collect information automatically, some of which may be personal data. This includes data such as language settings, IP address, location, device settings, device OS, log information, time of usage, URL requested, status report, user agent (information about the browser version), operating system, result (viewer or booker), browsing history, user Booking ID, and type of data viewed. We may also collect data automatically through cookies.

Processing Purposes

We use your personal data for the following purposes:

A. Reservations: We use your personal data to complete and administer your online reservation.

B. Customer service: We use your personal data to provide customer service.

C. Guest reviews: We may use your contact data to invite you by email to write a guest review after your stay. This can help other travellers to choose the accommodation that suits them best. If you submit a guest review, your review may be published on our website.

D. Marketing activities: We also use your data for marketing activities, as permitted by law.

E. Other communications: There may be other times when we get in touch by email, by post, by phone or by texting you, depending on the contact data you share with us.

F. Analytics, improvements and research.

G. Security, fraud detection and prevention: We use the information, which may include personal data, in order to prevent fraud and other illegal or infringing activities.

H. Legal and compliance: In certain cases, we need to use the information provided, which may include personal data, to handle and resolve legal disputes or complaints, for regulatory investigations and compliance, or to enforce agreement(s) or to comply with lawful requests from law enforcement insofar as it is required by law.

Legal Bases

In view of purposes A and B we rely on the performance of a contract: The use of your data may be necessary to perform the contract that you have with us. For example, if you use our services to make an online reservation, we will use your data to carry out our obligation to complete and administer that reservation under the contract that we have with you.

In view of purposes C-H, we rely on its legitimate interests: We use your data for our legitimate interests, such as providing you with the best appropriate content for the website, emails and newsletters, to improve and promote our products and services and the content on our website, and for administrative, fraud detection and legal purposes.

In respect of purpose H, we also rely, where applicable, on our obligation to comply with applicable law.

Where needed under applicable law, we will obtain your consent prior to processing your personal data for direct marketing purposes.

If needed in accordance with applicable law, we will ask your consent. You can withdraw your consent anytime by contacting us at any of the addresses at the end of this Privacy Policy.

If you wish to object to the processing set out under C-F and no opt-out mechanism is available to you directly (for instance in your account settings), to the extent applicable, please contact info@kerlingarfjoll.is

International Data Transfers

The transmission of personal data as described in this Privacy Policy may include overseas transfers of personal data to countries whose data protection laws are not as comprehensive as those of the countries within the European Union. Where required by European law, we shall only transfer personal data to recipients offering an adequate level of data protection. In these situations, we make contractual arrangements to ensure that your personal data is still protected in line with European standards.

Security

We use appropriate business systems and procedures to protect and safeguard information including personal data. We also use security procedures and technical and physical restrictions for accessing and using the personal data on our servers. Only authorised personnel are permitted to access personal data in the course of their work.

Data Retention

We will retain your information, which may include personal data for as long as we deem it necessary to provide services to you, comply with applicable laws, resolve disputes with any parties and otherwise as necessary to allow us to conduct our business including to detect and prevent fraud or other illegal activities. All personal data we retain will be subject to this Privacy Policy. If you have a question about a specific retention period for certain types of personal data we process about you, please contact us via the contact details included below.

Your choices and rights

We want you to be in control of how your personal data is used by us. You can do this in the following ways:

You can ask us for a copy of the personal data we hold about you;

you can inform us of any changes to your personal data, or you can ask us to correct any of the personal data we hold about you;

in certain situations, you can ask us to erase or block or restrict the processing of the personal data we hold about you, or object to particular ways in which we are using your personal data; and

in certain situations, you can also ask us to send the personal data you have given us to a third party.

Where we are using your personal data on the basis of your consent, you are entitled to withdraw that consent at any time subject to applicable law. Moreover, where we process your personal data based on legitimate interest or the public interest, you have the right to object at any time to that use of your personal data subject to applicable law.

We rely on you to ensure that your personal data is complete, accurate and current. Please do inform us promptly of any changes to or inaccuracies of to your personal data by contacting info@kerlingarfjoll.is . We will handle your request in accordance with the applicable law.

Questions or Complaints

If you have questions or concerns about our processing of your personal data, or if you wish to exercise any of the rights you have under this notice, you are welcome to contact us via info@kerlingarfjoll.is.

Changes to the Notice

Just as our business changes constantly, this Privacy Policy may also change for time to time. If we make material changes or changes that will have an impact on you (e.g. when we start processing your personal data for other purposes than set out above), we will contact you prior to commencing that processing.