Privacy Policy

2. Information We Collect

We may collect and process the following types of personal data:

2.1 Information You Provide

• Contact information (name, email address, phone number)
• Business information (company name, position)
• Communication preferences
• Any other information you voluntarily provide through forms or correspondence

2.2 Information Automatically Collected

• IP address and device information
• Browser type and version
• Pages visited, time and date of visits
• Referring website addresses
• Cookie data (see our Cookie Policy section below)

3. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR:

• Consent: When you have given explicit consent for specific processing activities
• Legitimate Interests: For analytics, improving our services, and marketing our products
• Contractual Necessity: To fulfill obligations related to business partnerships or inquiries
• Legal Obligation: To comply with applicable laws and regulations

4. How We Use Your Information

We use your personal data for the following purposes:

• To respond to inquiries and provide customer support
• To send marketing communications about Icelandic Lamb (with your consent)
• To improve our website functionality and user experience
• To analyze website traffic and user behavior
• To maintain business relationships with partners, exporters, and restaurants
• To comply with legal obligations

5. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyze website performance. Cookies are small text files stored on your device.

Types of Cookies We Use:

• Essential Cookies: Necessary for website functionality
• Analytics Cookies: Help us understand how visitors interact with our website
• Marketing Cookies: Used to deliver relevant advertisements
• Preference Cookies: Remember your settings and preferences

Managing Your Cookie Preferences: You can manage and change your cookie settings at any time by clicking the fingerprint button located at the bottom left of the page. You can also control cookies through your browser settings.

6. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

• Service Providers: Third-party companies that help us operate our website and provide services (hosting, analytics, email services)
• Business Partners: Farmers, producers, restaurants, and exporters within our cooperative network, when necessary for business purposes
• Legal Authorities: When required by law or to protect our rights

All third parties are required to handle your data securely and in compliance with GDPR.

7. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or ensuring the recipient is in a country with adequate data protection laws.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law. Retention periods vary depending on the type of data and purpose of processing:

• Contact inquiries: Up to 3 years after last contact
• Marketing communications: Until you withdraw consent
• Analytics data: Typically 26 months
• Business partner information: Duration of relationship plus applicable legal requirements

9. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (“right to be forgotten”)
• Right to Restriction: Request limitation of processing in certain circumstances
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
• Right to Lodge a Complaint: File a complaint with the Icelandic Data Protection Authority (Persónuvernd)

To exercise any of these rights, please contact us at info@icelandiclamb.is. We will respond to your request within one month.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Secure server infrastructure and encryption
• Regular security assessments
• Access controls and authentication
• Employee training on data protection

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

11. Children’s Privacy

Our website is not directed to children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.