Privacy Policy

1. Introduction

Welcome to Envalys! This Privacy Policy explains how ENVRALYS ehf collects, uses, and protects your personal data when you visit our website and use our services. ENVRALYS ehf is committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR).

2. Data Controller

The data controller responsible for your personal data is:

ENVRALYS ehf | kt. 560615-0510
Safamýri 91, 108 Reykjavik
Email: envalys@envalys.is
Phone: +354 699-5920

3. Personal Data We Collect

We may collect the following types of personal data:

Contact Information: Such as your name, email address, phone number, and postal address when you contact us through our website or directly.
Usage Data: Information about how you use our website, including your IP address, browser type, operating system, referring URLs, pages visited, and the dates/times of your visits.
Cookies and Similar Technologies: We use cookies and similar technologies to collect data about your browsing activity.
Any other information: You voluntarily provide to us

4. How We Use Your Personal Data

We use your personal data for the following purposes:

To Provide and Maintain Our Services: To ensure our website functions correctly and to provide you with the information and services you request.
To Communicate With You: To respond to your inquiries, provide customer support, and send you updates and information about our services.
To Improve Our Website: To analyze usage data and feedback to improve our website’s functionality and user experience.
To Comply with Legal Obligations: To comply with applicable laws, regulations, and legal processes.

5. Legal Basis for Processing

Our legal basis for processing your personal data depends on the specific context in which we collect it. Generally, we process your data on the following grounds:

Your Consent: When you have given us explicit consent to process your data for a specific purpose.
Performance of a Contract: When processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
Legitimate Interests: When processing is necessary for our legitimate interests or the legitimate interests of a third party, provided that your interests and fundamental rights do not override those interests.
Compliance with a Legal Obligation: When processing is necessary for compliance with a legal obligation to which we are subject.

6. Sharing Your Personal Data

We may share your personal data with the following categories of recipients:

Service Providers: Third-party companies and individuals who provide services on our behalf, such as website hosting, data analytics, email delivery, and customer support.
Legal Authorities: When required by law or legal process, we may disclose your personal data to law enforcement agencies, government authorities, or other third parties.
Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred to the acquiring entity.

7. International Data Transfers

Your personal data may be transferred to and processed in countries outside of the European Economic Area (EEA). In such cases, we will ensure that appropriate safeguards are in place to protect your data in accordance with the GDPR, such as using Standard Contractual Clauses approved by the European Commission.

8. Data Security

We take reasonable measures to protect your personal data from unauthorized access, use, or disclosure. These measures include:

Encryption: Using encryption to protect sensitive data during transmission and storage.
Access Controls: Limiting access to personal data to authorized personnel only.
Security Monitoring: Regularly monitoring our systems for potential security vulnerabilities and attacks.

9. Data Retention

We will retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data, and whether we can achieve those purposes through other means, and the applicable legal requirements.

10. Your Rights Under the GDPR

Under the GDPR, you have the following rights regarding your personal data:

Right to Access: You have the right to request access to the personal data we hold about you.
Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
Right to Erasure: You have the right to request that we delete your personal data under certain circumstances.
Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data under certain circumstances.
Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
Right to Object: You have the right to object to the processing of your personal data under certain circumstances, including for direct marketing purposes.
Right to Withdraw Consent: If we are processing your personal data based on your consent, you have the right to withdraw your consent at any time.

To exercise any of these rights, please contact us using the contact information provided above.

11. Cookies and Similar Technologies

We use cookies and similar technologies to collect data about your browsing activity on our website. You can manage your cookie preferences by pressing the fingerprint button on the bottom left of the page.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post any changes on our website and update the effective date accordingly.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

ENVRALYS ehf
Safamýri 91, 108 Reykjavik
Email: envalys@envalys.is
Phone: +354 699-5920