Glacier Mice Privacy Policy

1. Introduction

Glacier Mice is committed to protecting your privacy and handling personal data responsibly and in accordance with applicable data protection law, including the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Icelandic data protection law.

This Privacy Policy applies to personal information processed in connection with our website, tour bookings, customer enquiries and the operation of our services.

2. Data Controller

The data controller responsible for the processing described in this Privacy Policy is:

Niflheimar ehf.
Trading name: Glacier Mice
Breiðabólsstaður 2
781 Höfn
Iceland
Email: info@glaciermice.is

3. Personal Data We May Collect

The personal data we process depends on how you interact with Glacier Mice.

Information You Provide

When you make a booking, contact us or otherwise interact with our services, information may include:

• Name
• Email address
• Telephone number
• Billing information
• Booking and participant information
• Tour date and selected experience
• Communications and enquiries sent to us
• Other information you choose to provide in connection with a booking or enquiry

Payment Information

Payments may be processed by third-party payment or booking providers. Glacier Mice does not generally receive or store full payment card details when those details are processed directly by the relevant payment provider.

We may receive transaction-related information such as payment status, transaction amount, booking reference and other information required to administer a booking.

Information Collected When You Use Our Website

Depending on your browser settings, cookie choices and the services used on our website, technical information may include:

• IP address
• Browser and device information
• Operating system
• Pages visited and website interactions
• Referring website
• Date and time of access

4. Why We Process Personal Data

We may process personal data where necessary to:

• Process and administer tour bookings
• Provide booked tours and related services
• Send booking confirmations and important service information
• Respond to enquiries and provide customer support
• Manage changes, cancellations and refunds
• Maintain the security and operation of our website and systems
• Maintain appropriate business and accounting records
• Detect or prevent fraud, misuse or security incidents
• Comply with applicable legal and regulatory obligations
• Improve our website and services where appropriate

5. Legal Basis for Processing

Depending on the circumstances, we process personal data on one or more of the following legal bases:

Performance of a Contract

Where processing is necessary to manage a booking, provide a tour or service, communicate about that booking or take steps requested before entering into a contract.

Legal Obligations

Where processing is necessary to comply with applicable legal, accounting, tax or regulatory requirements.

Legitimate Interests

Where necessary for legitimate business purposes such as operating and securing our website, responding to enquiries, preventing fraud and improving our services, provided those interests are not overridden by your rights and interests.

Consent

Where consent is required, for example for certain non-essential cookies or marketing activities. Where processing is based on consent, you may withdraw that consent at any time.

6. Booking, Payment & Service Providers

Glacier Mice uses third-party services where necessary to operate our website, process bookings, handle payments, communicate with guests and provide our services.

Our online booking system is provided through Bókun. When you use the booking features on our website, personal information required to complete and administer the booking may be processed through Bókun and relevant payment providers.

Personal information may therefore be shared with appropriate service providers where necessary for the relevant purpose. Depending on the service, these may include providers of:

• Online booking systems
• Payment processing
• Website hosting and technical services
• Email and customer communications
• Website analytics and security services
• Professional services such as accounting or legal advice

We do not sell personal data.

7. Bookings Made Through Third Parties

Glacier Mice tours may also be booked through travel agents, tour operators, online travel agencies or other booking partners.

Where you book through a third party, that organisation may collect and process your personal data under its own privacy policy. It may provide Glacier Mice with information required to operate your tour, communicate relevant information and administer the booking.

We recommend reviewing the privacy information provided by the organisation through which you make your booking.

8. Sharing of Personal Data

In addition to service providers involved in our operations, we may disclose personal data where reasonably necessary to:

• Comply with a legal obligation or lawful request
• Respond to courts, regulators or competent authorities
• Establish, exercise or defend legal claims
• Protect the rights, safety or security of guests, staff or others
• Support a merger, restructuring, acquisition or transfer of business assets where applicable

We only disclose personal information where there is an appropriate reason and legal basis for doing so.

9. International Data Transfers

Some service providers may process personal data outside Iceland or the European Economic Area (EEA).

Where GDPR requires safeguards for an international transfer, we seek to rely on an appropriate lawful transfer mechanism, such as an adequacy decision, Standard Contractual Clauses or another mechanism recognised under applicable data protection law.

10. Data Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, accounting, tax, regulatory or dispute-resolution requirements.

Different categories of information may therefore be retained for different periods. When information is no longer required, it will be deleted, anonymised or otherwise handled in accordance with applicable requirements.

11. Cookies & Website Technologies

Our website may use cookies and similar technologies that are necessary for website functionality, security and booking features. Other technologies may be used for analytics or similar purposes where permitted.

Where consent is legally required for non-essential cookies or similar technologies, they should only be used in accordance with the visitor’s applicable consent choices.

Browser settings may also allow you to restrict or delete cookies, although doing so can affect the functionality of some website features.

12. Data Security

Glacier Mice takes reasonable technical and organisational measures designed to protect personal information against unauthorised access, accidental loss, misuse, alteration, disclosure or destruction.

No internet transmission or electronic storage system can be guaranteed to be completely secure.

13. Your Data Protection Rights

Subject to applicable law and the circumstances of the processing, you may have rights including the right to:

• Request access to personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of personal data in certain circumstances
• Request restriction of processing in certain circumstances
• Object to certain processing
• Request data portability where applicable
• Withdraw consent where processing is based on consent
• Lodge a complaint with a competent data protection authority

These rights are subject to the conditions and limitations set out in applicable data protection law.

To make a request relating to your personal data, please contact us at info@glaciermice.is.

14. Children & Tour Bookings

Some Glacier Mice tours are suitable for children, subject to the minimum age and participation requirements of the individual tour. Bookings involving minors should be made by, or with the involvement of, a parent, guardian or other responsible adult.

We aim to collect only the information reasonably necessary to administer the booking and provide the relevant service.

If you believe that personal information relating to a child has been provided to us inappropriately, please contact us.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, website, service providers or applicable requirements.

The current version will be published on this page together with the date of the latest update.

16. Contact Us

If you have questions about this Privacy Policy or how Glacier Mice processes personal information, or if you wish to exercise a data protection right, please contact:

Niflheimar ehf.
Trading name: Glacier Mice
Breiðabólsstaður 2
781 Höfn
Iceland
Email: info@glaciermice.is

You also have the right, where applicable, to lodge a complaint with the Icelandic Data Protection Authority (Persónuvernd) or another competent data protection supervisory authority.