Privacy policy Trostan ehf (Hrímnir)

Thank you for visiting our website https://www.hrimnir.shop/ and your interest in our company and our offers. Despite careful content control, we do not assume any liability for external links to external content, as we did not initiate the transmission of this information, did not select or change the addressee of the transmitted information and did not change the transmitted information itself.

The protection of your personal data during the collection, processing and use on the occasion of your visit to our Internet pages is an important concern for us and is carried out within the framework of the legal regulations, about which you can find out more information e.g. at www.bfdi.bund.de.

In the following, we explain to you which information we collect during your visit to our website and how this information is used:

1. Collection and storage of personal data and the nature and purpose of their use

   1. When visiting the website

      Every time a customer (or other visitor) accesses our website, information is automatically sent to the server of our website by the Internet browser used on your end device (computer, laptop, tablet, smartphone, etc.). This information is temporarily stored in a so-called log file.

      The following data is recorded without your intervention and stored and will be automatically deleted after 30 days:

      • (pseudonymised) IP address of the requesting computer, as well as device ID or individual device identification and device type,
      • Name of the retrieved file and transferred data volume, as well as date and time of the retrieval,
      • Message about successful retrieval,
      • requesting domain,
      • Description of the type of Internet browser used and, if applicable, the operating system of your terminal device and the name of your access provider,
      • Your browser history and your standard weblog information

      We ourselves do not collect location data. Please note, however, that a rough location can always be determined from the IP address - but we do not use a third-party provider to do this.

      Our legitimate interest in accordance with Art. 6 para. 1 cl. 1 lit. f GDPR to collect the data is based on the following purposes:

      • To ensure a smooth connection and comfortable use of the website,
      • Evaluation of system security and stability and
      • for other administrative purposes.

      Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person.

   2. When using our contact form/ Saddle Expert/ Back in stock subscription

      For questions of any kind, we offer you the possibility to contact us via a form provided on the website. At least a valid e-mail address and your name are required so that we know who the request comes from and can answer it. Further information can be provided voluntarily.

      Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 cl. 1 lit. f GDPR on the basis our legitimate interest.

      The personal data collected by us for the use of the contact form will be automatically deleted after completion of your request.

      For the protection of your inquiries by Internet form we use the service reCAPTCHA offered by Google Inc. The inquiry serves the differentiation whether the input takes place by humans or abusively by automated, mechanical processing. The query includes the transmission of the IP address and any other data required by Google for the service reCAPTCHA to Google. For this purpose your input will be transmitted to Google and used there. However, your IP address will be shortened by Google in advance within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases and with your consent pursuant to Art. 6 para. 1 cl. 1 lit. a GDPR the full IP address will be transmitted to a Google server in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser as part of reCAPTCHA is not merged with other data from Google. These data are subject to the differing data protection regulations of Google. For more information about Google’s privacy policy, please visit: https://policies.google.com/privacy?hl=en. You can find an opt-out option at the following link: https://adssettings.google.com/authenticated.

      The recipient of the collected data is Google. If your data is transferred to the USA, this is done on the basis of your consent in accordance with Art. 49 para. 1 cl. 1 lit. a GDPR. In addition, Google is obligated to us by way of a standard contractual clause that a level of data protection equivalent to that of the EU is guaranteed in third countries outside the EU to which the collected data is exported.

   3. Upon registering for an user account

      When you register as a user, you provide the following data:

      • Data that personally identifies you, such as name and e-mail address, address, telephone number
      • Additionally, for commercial customers: Tax/ VAT No.

      The data processing for the purpose of registering with us is carried out in accordance with Art. 6 para 1 cl. 1 lit. a GDPR on the basis of your voluntarily given consent. The data will be deleted when you cancel your user account, unless we are obliged to store the data for a longer period of time in accordance with Art. 6 para. 1 cl. 1 lit. c GDPR on the basis of tax and commercial law storage and documentation obligations (from HGB, StGB or AO) or you have consented to storage beyond this period in accordance with Art. 6 para. 1 cl. 1 lit. a GDPR.

      You can register with us using your social media account by way of the single sign-on procedure instead of entering your registration- or order data manually.

      We have integrated the Facebook plugin for registration:

      If you register via "Facebook" of Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, we receive the general and publicly accessible information stored in your profile, depending on the privacy settings you have made on Facebook. This information includes your user ID, name, profile picture, age and gender.

      Depending on the privacy settings you have made, your profile pictures, the user IDs of your friends and the friends list may be transmitted. This is the case if the privacy settings are set to “public”.

      The processing of this data is based on consent granted in accordance with Art. 6 para. 1 cl. 1 lit. a GDPR.

      The recipient of the collected data is Facebook. Insofar as a transfer of your data to the USA takes place, this is done on the basis of your consent in accordance with to Art. 49 para. 1 cl. 1 lit. a GDPR. In addition, Facebook has committed to us under a standard contractual clause that in third countries outside the EU to which data is exported, a level of data protection equivalent to that in the EU is guaranteed.

      The data protection declaration: find from Facebook is available here: https://www.facebook.com/about/privacy. Here you can withdraw your consent to the processing of your data: Opt-Out: https://www.facebook.com/settings?tab=ads and https://www.youronlinechoices.com.

   4. Upon conclusion of a contractual relationship

      When concluding a contractual relationship on our website (e.g. purchase in our online shop, registration as a customer) we ask you to provide the following personal data:

      • Data that identifies you personally such as name and e-mail address, address, billing and delivery address
      • the information about your means of payment,
      • other personal data which we are legally obliged or entitled to collect and process and which we need for your authentication, identification or to check the data we have collected.

      The above-mentioned data is processed for the purpose of handling the contractual relationship and - if necessary - passed on to the transport company commissioned with the delivery. The processing of the data takes place on the basis of Art. 6 para. 1 cl. 1 lit. b GDPR. The storage period is limited to the purpose of the contract and, if applicable, legal and contractual storage obligations.

      The personal data collected by us for the order will be blocked for further use after complete processing of the contract. Your data will be stored until the expiry of the statutory warranty period and deleted thereafter, unless we are obliged to store the data for a longer period of time in accordance with Art. 6 para. 1 cl. 1 lit. c GDPR on the basis of tax and commercial law storage and documentation obligations (from HGB, StGB or AO) or you have consented to storage beyond this period in accordance with Art. 6 para. 1 cl. 1 lit. a GDPR.

   5. Use of payment service providers

      To process your order we also work together with the payment service provider listed below. Within the scope of payment processing, we will pass on your order data to the payment service provider selected by you - earmarked for the payment - if this is necessary for payment processing. The legal basis for the transfer of data is in each case Art. 6 para. 1 cl. 1 lit. b GDPR.

      PayPal
      If you choose to pay via “PayPal”, after confirmation of the conclusion of the contract, you will be transferred directly via an interface to the payment service provider PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg “PayPal”), where you can enter your payment details and select the payment method you wish to use with PayPal and then process the payment. Please note that PayPal’s privacy policy applies to this. For information on the processing of your personal data by PayPal and your rights, please refer to the PayPal Privacy Policy (https://www.paypal.com/de/webapps/mpp/ua/privacy-full).

      As a precautionary measure, we would like to point out that PayPal reserves the right to carry out a credit check if PayPal is to make an advance payment due to its legitimate interest in determining your solvency (Art. 6 para. 1 cl. 1 lit. b GDPR). For this purpose PayPal may pass on your payment data to credit agencies. The result of the credit assessment with regard to the statistical probability of non-payment may contain probability values (so-called score values), which are calculated on the basis of scientifically recognised mathematical-statistical methods and in whose calculation address data, among other things, are included. According to PayPal, your interests worthy of protection are taken into account in accordance with the statutory provisions. For further information, especially regarding your rights, please refer to the PayPal privacy policy (https://www.paypal.com/de/webapps/mpp/ua/privacy-full).

      TeleCash
      Your payment data will be processed by our partner TeleCash GmbH & Co. KG, “TeleCash”, Marienbader Platz 1, 61348 Bad Homburg, Germany, and stored securely. TeleCash is a software manufacturer for banks and service provider for secure payment transactions. TeleCash follows the specifications of the “Payment Card Industry (PCI) Data Security Standards” and undergoes regular security certification so that you can pay online safely.

      We do not store your payment data ourselves and adhere to the highest security and data protection standards when working with TeleCash.

      The legal basis for data processing is Art. 6 para. 1 cl. 1 lit. b DSGVO, as the processing of data is necessary for payment by credit card or direct debit and thus for the performance of the contract.

      When paying by credit card, you consent to your personal data being transmitted to TeleCash and card type, cardholder name, card number, card verification number and validity of the credit card are recorded and transmitted to TeleCash. The purpose of providing this data for credit card payments to our service provider TeleCash is to protect your personal data and payment information according to the highest security standards.

      The data will be automatically deleted from TeleCash after a period of 24 months.

      You can revoke your consent to the processing of your data when purchasing by credit card and the related transfer of your payment information to TeleCash at any time by sending us the revocation by email to [email protected]. Please note that in this case we will no longer be able to provide you with the credit card payment method.

   6. When subscribing to our newsletter (Hrímnir Premium Club)

      If you have expressly consented in accordance with Art. 6 para. 1 cl. 1 lit. a GDPR, we will use your e-mail address to send you our newsletter on a regular basis.

      You can unsubscribe at any time, for example via a link at the end of a newsletter. Alternatively, you can also send your unsubscribe request at any time to [email protected] by e-mail (preferably with the subject: “Unsubscribe Newsletter”).

      For sending the newsletter, we cooperate with the provider “HubSpot” (25 First Street, 2nd Floor, Cambridge, MA 02141, United States; resp. 1 Sir John Rogerson's Quay, Dublin 2, Ireland).

      The newsletter contains a so-called “web beacon”, i.e. a pixel-sized file that is retrieved from HubSpot’s server when the newsletter is opened. Within the scope of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and the time of the retrieval are initially collected. This information is used for the technical improvement of the services based on the technical data or the target groups and their reading behaviour based on their retrieval locations (which can be determined with the help of the IP address) or the access times. The statistical surveys also include the determination of whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our intention nor that of HubSpot to observe individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

      If you do not want to receive any analysis by HubSpot, you must unsubscribe from the newsletter. For this purpose we provide a link in every newsletter message.

      The data processing is based on your consent (Art. 6 para. 1 cl. 1 lit. a GDPR), which you can revoke at any time. The legality of the data processing operations already carried out remains unaffected by the revocation.

      The data you have provided us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from the servers of HubSpot after the newsletter has been cancelled. Data, which were stored for other purposes (e.g. e-mail addresses for the member area) remain unaffected. You can find more details in the privacy policy of HubSpot at: https://www.hubspot.com/data-privacy/privacy-shield.

      We have a so-called “Data-Processing-Agreement” with HubSpot, in which we commit HubSpot to protect the data of our customers and not to pass them on to third parties.

      The recipient of the collected data is HubSpot. If your data is transferred to the USA, this is done on the basis of your consent in accordance with Art. 49 para. 1 cl. 1 lit. a GDPR. In addition, HubSpot has committed to us under a standard contractual clause that in third countries outside the EU to which data is exported, a level of data protection equivalent to that in the EU is guaranteed.

   7. Posting comments on our website

      If you leave comments on the blog or other contributions, the IP address of your access device will be stored. In addition, we require a valid e-mail address in order to be able to contact the user in the event of serious violations of these rules and in particular in the event of the violation of third-party legal rights. Since we are jointly responsible for the comments section, there may be a legitimate interest in finding out the identity of the author. This plays a role in particular if illegal statements are made. The legal basis is Art. 6 para. 1 cl. 1 lit. f GDPR.

   8. Chat, Customer Data Processing (HubSpot)

      We use the chat function of HubSpot (25 First Street, 2nd Floor, Cambridge, MA 02141, United States; resp. 1 Sir John Rogerson's Quay, Dublin 2, Ireland). HubSpot also processes data in the USA.

      If your data is transferred to the USA, this is done on the basis of your consent in accordance with Art. 49 para. 1 cl. 1 lit. a GDPR. In addition, the service providers concerned have committed to us under a standard contractual clause that a level of data protection equivalent to that in the EU is guaranteed in third countries outside the EU to which data is exported.

      We have a so-called “Data-Processing-Agreement” with HubSpot, in which we commit HubSpot to protect the data of our customers and not to pass them on to third parties.

      You can find more details in the privacy policy of HubSpot at: https://www.hubspot.com/data-privacy/privacy-shield..

2. Disclosure of personal data

   Your data will not be transferred to third parties for purposes other than those listed below.

   We only pass on your data to third parties if:

   • you have given your express consent to do so in accordance with (Art. 6 para. 1 cl. 1 lit. a GDPR),
   • this is necessary for the processing of contractual relationships with you (Art. 6 para. 1 cl. 1 lit. b GDPR),
   • there is a legal obligation to disclose (Art. 6 para. 1 cl. 1 lit. c GDPR)
   • the disclosure is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data (Art. 6 para. 1 cl. 1 lit. f GDPR)

   In these cases, however, the scope of the transmitted data is limited to the necessary minimum.

   Our data protection regulations are in accordance with the applicable data protection regulations and the data is only processed in the Federal Republic of Germany. However, we also work together with third parties who can process the data outside the EU. All third-party providers with whom we work are listed in our data protection declaration.

3. Rights of data subjects

   On request, we will be pleased to inform you whether and which personal data relating to your person are stored (Art. 15 GDPR), in particular about the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right of rectification, deletion, restriction of processing or opposition, the existence of a right of appeal, the origin of your data if they have not been collected by us, and the existence of automated decision making including profiling.

   You also have the right to have any incorrectly collected personal data corrected or incompletely collected data completed (Art. 16 GDPR).

   Furthermore, you have the right to demand that we restrict the processing of your data, provided that the legal requirements for this are met (Art. 18 GDPR).

   You have the right to receive the personal data concerning you in a structured, common and machine-readable format or to request that it be transferred to another responsible party (Art. 20 GDPR).

   In addition, you have the so-called “right to be forgotten”, i.e. you can demand that we delete your personal data, provided that the legal requirements are met (Art. 17 GDPR).

   Irrespective of this, your personal data will be automatically deleted by us if the purpose for which the data was collected ceases to apply or if the data processing is unlawful.

   According to Art. 7 para. 3 GDPR, you have the right to revoke your consent to us at any time. As a result, we may no longer continue the data processing based on this consent in the future.

   You also have the right to object to the processing of your personal data at any time, provided that a right of objection is provided for by law. In the event of an effective revocation, your personal data will also be automatically deleted by us (Art. 21 GDPR).

   If you wish to exercise your right of revocation or objection, simply send an e-mail to [email protected].

   In the event of infringements of the data protection regulations, you have the opportunity to lodge a complaint with the responsible supervisory authority in accordance with Art. 77 GDPR.

4. Duration of data storage

   The data collected will be stored by us for as long as is necessary to execute the contracts entered into with us or if you have not exercised your right to deletion or your right to transfer data to another company.

5. Cookies

   We use cookies on our website. These are small text files that are automatically created by your browser and stored on your device when you visit our website. The cookie contains information that is related to the specific device used. This does not mean, however, that we immediately obtain knowledge of your identity.

   These cookies are set as so-called first-party cookies ("own cookies") or third-party cookies (“third-party cookies”). First-party cookies are set by the website you are currently visiting and are not made available by browsers across domains. A third party cookie, on the other hand, is set by a third party, i.e. not by the actual website you are currently on.

   Furthermore, cookies are divided into technically necessary and technically unnecessary cookies. On our website, both technically necessary cookies and technically unnecessary cookies are set in accordance with the following paragraphs.

   1. Technically necessary cookies

      Technically necessary cookies are absolutely necessary for the operation of our website and lead, for example, to certain functions being made possible for you in the first place. These technically necessary cookies, which are only required and set for the individual necessary online session, are automatically deleted after leaving our website.

      The legal basis for the use of these technically necessary cookies is Art. 6 para. 1 cl. 1 lit. f GDPR.

   2. Technically not necessary cookies

      If you have given your consent, we use so-called technically not necessary cookies on our website. The technically not necessary cookies are mainly used to evaluate the use of the website as well as user behaviour, to compile reports on the activities of visitors to the website and to provide further services associated with the use of the website.

      The cookies we use, which are not technically necessary, are explained in our cookie banner with regard to their function, duration and possible third-party recipients of the data. If certain third party providers we use set cookies as part of the service provided for us, this will also be indicated separately in our privacy policy.

      The legal basis for the use of cookies that are not technically necessary is Art. 6 para. 1 cl. 1 lit. a GDPR, provided you have given your consent.

      You can revoke your consent at any time. Furthermore, you have the possibility to configure the setting of cookies at any time. For example, you can set your browser to inform you in advance about the setting of cookies or to refuse cookies completely.

      Java applets and Java script are used in the provision of our Internet offer. If, for security reasons, you do not wish to use these auxiliary programs or active contents, you should deactivate the corresponding setting in your browser.

6. Online marketing/analysis measures

   By statistical recording through online marketing measures, we want to design our website to meet the needs of you, our user, and continually adapt and optimize its use.

   The use of the online marketing and tracking measures we use is based on your consent in accordance with Art. 6 para. 1 cl. 1 lit. a GDPR.

   If your data is transferred to the USA, this is done on the basis of your consent in accordance with Art. 49 para. 1 cl. 1 lit. a GDPR. In addition, the service providers concerned have committed to us under a standard contractual clause that a level of data protection equivalent to that in the EU is guaranteed in third countries outside the EU to which data is exported.

   1. Google Analytics

      If you have given your consent, this website uses Google Analytics, a web analysis service provided by Google Ireland Limited “Google”. The use includes the operating mode “Universal Analytics”; this makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and thus to analyse the activities of a user across devices.

      Google Analytics uses so-called “cookies”; text files which are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, in the event that IP anonymisation is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. We would like to point out that Google Analytics has been extended to include IP anonymisation on this website in order to ensure anonymous recording of IP addresses (so-called IP masking). The IP address transmitted by your browser within the scope of Google Analytics is not merged with other Google data. Further information on terms of use and data protection can be found at (https://www.google.com/analytics/terms/de.html or https://policies.google.com/?hl=de).

      On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities and to provide further services to the website operator in connection with website and internet use.

      The data sent by us and linked to cookies, user IDs (e.g. user ID) or advertising IDs are automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month.

      You can revoke your consent at any time with effect for the future by preventing the storage of cookies through a corresponding setting in your browser software; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

      You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the Browser-Add-on. Opt-out cookies prevent future collection of your information when you visit this website. To prevent Universal Analytics from collecting data across multiple devices, you must opt-out on all systems in use. Click here (https://tools.google.com/dlpage/gaoptout?hl=de) to set the opt-out cookie to disable Google Analytics.

   2. Google Adwords / Conversion Tracking

      We also use the online advertising program “Google AdWords - Conversion Tracking”. Conversion tracking is an analysis service provided by Google. When you click on an ad placed by Google, a conversion tracking cookie is placed on your device. These cookies expire after 30 days, do not contain any personal information and are therefore not personally identifiable. If you visit certain pages on our site and the cookie has not expired, Google and we may recognize that you clicked on the ad and were directed to that page. Each Google AdWords customer receives a different cookie. As a result, there is no way that cookies can be tracked through websites of AdWords customers.

      The information collected using the conversion cookie is used to compile conversion statistics for AdWords customers who have opted in to conversion tracking. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking, which tells them the total number of users who have clicked on their ad and been redirected to a page with a conversion tracking tag. However, they will not receive any information that can be used to identify users personally.

      If you do not wish to participate in tracking, you can object to this use by preventing the installation of cookies from the domain "googleadservices.com" by means of a corresponding setting in your browser software (deactivation option). You will then not be included in the conversion tracking statistics. You can find further information and the Google data protection declaration at: https://policies.google.com/technologies/ads, https://policies.google.com/privacy?gl=de.

   3. Google Tag Manager

      On this website the Google Tag Manager is used. With the Google Tag Manager it is possible to manage website tags via an interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not collect any personal information. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If disabled at the domain or cookie level, it will persist for all tracking tags implemented by Google Tag Manager. For more information about Google Tag Manager, please visit: https://www.google.com/intl/de/tagmanager/use-policy.html

   4. Facebook Connect/ Facebook Pixel

      With your consent, our website uses the so-called “Facebook pixel”, which is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”). We use this pixel to track the behaviour of page visitors after they have been redirected to the provider's website by clicking on a Facebook advertisement. This enables us to evaluate the effectiveness of Facebook advertisements for statistical and market research purposes and to optimize future advertising measures. The collected data is anonymous for us as the operator of this website, we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance with the Facebook Data Usage Policy. This allows Facebook to enable the placement of advertisements on pages of Facebook and outside of Facebook. This use of the data cannot be influenced by us as a site operator. A cookie may also be stored on your computer for these purposes. In the Facebook privacy policy you will find further information on the protection of your privacy: https://www.facebook.com/about/privacy.

      You can also deactivate the remarketing function “Custom Audiences” in the settings for advertisements section at: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You must be logged in to Facebook to do this. If you do not have a Facebook account, you can disable usage-based advertising from Facebook on the European Interactive Digital Advertising Alliance website.

   5. Hotjar

      We use Hotjar, an essentially tracking code based web analytics tool from Hotjar Ltd, (Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta). Hotjar is used to anonymously record interactions of randomly selected, individual visitors to our website. This creates a log of e.g. mouse movements and clicks with the aim of identifying areas for improvement of our services. In addition, information on the operating system, browser, incoming and outgoing references (links), geographical origin, as well as resolution and type of the end device calling up our website are evaluated for statistical purposes using Hotjar. In addition, we offer the possibility of anonymous user feedback via Hotjar using so-called “feedback pools”. The information collected is not personal, is stored by Hotjar Ltd. and is not passed on to other third parties. Additional information on functions and data use via Hotjar can be found at: https://www.hotjar.com/privacy. If you do not want your website to be analysed by Hotjar, you can deactivate it on all Internet pages that use Hotjar by setting a DoNotTrack header in your browser

   6. Cloudflare

      To protect our website, we use the Cloudflare service provided by Cloudflare, Inc, 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare operates a content delivery network (CDN) and provides protection functions for the website (web application firewall). For this purpose, the data transfer between the requesting browser and our server is decrypted by Cloudflare in order to prevent attacks such as so-called distributed denial of service (DDoS) attacks on our software.

      The legal basis is the protection of legitimate interests, namely the prevention of attacks on our website pursuant to Art. 6 para. 1 cl. 1 lit. f. GDPR.

      Further information on Cloudflare’s privacy policy can be found here: https://www.cloudflare.com/privacypolicy.

   7. Bing Ads Universal Event Tracking

      We use Bing Ads Universal Event Tracking on our website. This collects and stores data from which usage profiles are created using pseudonyms. This is a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. This service enables us to track the activities of users on our website if they have reached our website via ads from Bing Ads. If you arrive at our website via such an ad, a cookie is set on your computer. A Bing UET tag is integrated on our website. This is a code that, in conjunction with the cookie, stores some non-personal information about your use of the website. Information about your identity is not collected.

      If your data is transferred to the USA, this is done on the basis of your consent pursuant to Art. 49 para. 1 cl. 1 lit. a GDPR. In addition, the service provider in question has committed to us under a standard contractual clause that in third countries outside the EU to which data is exported, a level of data protection equivalent to that in the EU is guaranteed.

      You can prevent the collection of data generated by the cookie and related to your use of the website, as well as the processing of this data, by deactivating the setting of cookies. This may limit the functionality of the website under certain circumstances.

      You can find more information at https://help.bingads.microsoft.com/#apex/3/de/53056/2.

7. Use of YouTube

   On our website we integrated Videos through YouTube LLC , 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The videos are stored at www.youtube.com and can be played directly from our website. Our website thus enables you to connect to YouTube. Normally, when you visit a website with embedded videos, your IP address is sent to YouTube and cookies are installed on your computer. However, we have integrated the YouTube videos on our website with the "extended data protection mode". YouTube itself provides this extended data protection mode and ensures that no cookies are initially stored on your end device. However, when you visit the website in question, a connection to the "DoubleClick" network of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, is also established in “extended data protection mode” and your IP address is transmitted. In particular, this will indicate that you have visited our website. However, this data cannot be assigned to you specifically, unless you have registered or are still registered with YouTube or another Google service before visiting the website.

   As soon as you start playing an embedded video by clicking on it, YouTube will only save cookies on your end device due to the advanced privacy mode, which does not contain any personally identifiable data, unless you are currently logged in to a Google service. These cookies can be prevented by appropriate browser settings and extensions.

   We have neither knowledge nor influence on the possible collection and use of your data by YouTube. For more information, please see the YouTube privacy policy at https://policies.google.com/privacy?hl=de&gl=de.

   The recipient of the collected data is YouTube. Insofar as a transfer of your data to the USA takes place, this is done on the basis of your consent in accordance with Art. 49 para. 1 cl. 1 lit. a GDPR. In addition, the parent company of YouTube LLC, Google LLC, has committed to us under a standard contractual clause that a level of data protection equivalent to that in the EU is guaranteed in third countries outside the EU to which data is exported.

8. Use of Wistia

   On our website are videos via Wistia, Inc., 120 Brookline Street, Cambridge, Massachusetts, 02139 USA (“Wistia”). The legal basis for the use is your consent pursuant to Art. 6 para. 1 cl. 1 lit. a and Art. 49 para. 1 cl. 1 lit. a GDPR.

   The videos are integrated in such a way that data about you as a user is only transmitted when you play the videos.

   By playing a video, Wistia receives information such as IP address, geographic location, browser information, device information and information related to the use of the websites, media and services include (e.g. how many and which media were viewed by a particular user, from where certain media were viewed, listened to or accessed by a particular user and how often certain media were viewed, listened to or accessed by a particular user).

   Insofar as a transfer of your data to the USA takes place, this is done on the basis of your consent pursuant to Art. 49 para. 1 cl. 1 lit. a GDPR. In addition, Wistia has committed to us under a standard contractual clause that in third countries outside the EU to which data is exported, a level of data protection equivalent to that in the EU is guaranteed.

   For more information about the purpose and scope of data collection and its processing by Wistia, please see the Wistia Privacy Information. You can find the Wistia data protection information at https://wistia.com/privacy.

9. Social media

   We do not use social media plugins of social networks on our website, because these social media plugins normally lead to the fact that every visitor of the website is immediately recorded by these services with his IP address. This means that all further activities on the internet are logged; even if you do not click on one of the buttons at all.

   We have therefore only used links to our presence on the social networks mentioned below.

   We would like to point out that data of our website visitors may be processed outside the European Union. This may result in risks for users because, for example, it could make it more difficult to enforce users' rights.

   Furthermore, it is possible that user data may be processed for market research and advertising purposes by the third-party providers. For example, usage profiles can be created from the usage behaviour and resulting interests of the users. The usage profiles can in turn be used, for example, to place advertisements within and outside the social networks that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users' computers, in which the usage behaviour and the interests of the users are stored. Furthermore, data may also be stored in the usage profiles regardless of the devices used by the users (especially if the users are members of the respective social network and are logged in to them).

   For a detailed presentation of the respective processing, we refer to the information of the respective providers linked below. In the event of requests for information or the assertion of your rights as a data subject, we would also like to point out that these can be asserted most effectively with the social networks. Only they have access to the data of their users and can directly take appropriate measures and provide information. If you still need help, you can contact us.

   We use links to the social networks listed below on our website:

   • Facebook (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland), Datenschutzerklärung: https://www.facebook.com/about/privacy, Opt-Out: https://www.facebook.com/settings?tab=ads und https://www.youronlinechoices.com,
   • Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) Data Policy/ Opt-Out: https://privacycenter.instagram.com/policy.

10. Data security

    We make every effort to take all necessary technical and organizational security measures to store your personal data in such a way that they are not accessible to third parties or the public. Should you wish to contact us by e-mail, we would like to point out that the confidentiality of the information transmitted cannot be completely guaranteed with this method of communication. We therefore recommend sending us confidential information exclusively by post.

11. Name and contact details of the data controller

    This privacy information applies to data processing by:

    Responsible:
    Trostan ehf (Hrímnir)
    Vatnsleysa 3,
    IS-551 Sauðárkrókur 

Renew or change your cookie consent