1. Who we are
Gatula Labs is responsible for the personal data we process in connection with our website, contact forms, enquiries, projects and digital services.
- Brand: Gatula Labs
- Office address: Bíldshöfði 16, 110 Reykjavík, Iceland
- Email: [email protected]
- Phone: +354 767 7158
- Website: gatula.is
This Policy is designed to reflect the General Data Protection Regulation (EU) 2016/679 as incorporated into Icelandic law and the Icelandic Act No. 90/2018 on Data Protection and the Processing of Personal Data.
2. Personal data we may collect
Depending on how you interact with us, we may collect:
- name and surname;
- company name, role and business information;
- email address and phone number;
- website, domain, project details and technical requirements;
- messages, enquiry content and communication history;
- invoice, payment and accounting-related information;
- IP address, browser information, device information and technical logs;
- cookie preferences, analytics data and form submission timestamps;
- information needed to provide support, maintenance, security checks or troubleshooting.
We do not intentionally collect special categories of personal data through our website. Please do not submit sensitive personal information unless it is necessary for your request.
3. How we collect personal data
We collect personal data when you:
- submit a contact form or enquiry;
- send us an email or message;
- request a quote, consultation, support or project work;
- enter into an agreement with us;
- use our website or interact with cookies and analytics tools;
- provide access to systems, hosting, domains, email, APIs or other technical services for support purposes.
4. Why we use personal data
We process personal data for the following purposes:
- to respond to enquiries and provide quotes;
- to provide websites, software, automation, IT support and related services;
- to communicate with Clients and potential Clients;
- to manage contracts, invoices, payments and accounting obligations;
- to maintain, secure, debug and improve our website and systems;
- to prevent abuse, spam, fraud, unauthorised access and security incidents;
- to comply with legal obligations;
- to measure website performance and improve user experience;
- to send optional marketing communication only where permitted by law or consent has been obtained.
5. Legal basis for processing
We process personal data based on one or more of the following legal bases:
- Contract: when processing is necessary to provide services, prepare quotes, manage projects or perform an agreement.
- Legitimate interests: when processing is necessary to respond to enquiries, protect our website, prevent abuse, improve services and operate our business, provided those interests are not overridden by your rights.
- Legal obligation: when processing is necessary for accounting, tax, regulatory or legal compliance.
- Consent: where required, for example for optional marketing or non-essential cookies.
6. Contact forms and email communication
When you contact us through a form or by email, we use the information you provide to respond, prepare a quote, discuss your project, provide support and keep a record of the communication.
Contact enquiries may also be saved locally in secure lead logs as a fallback in case email delivery fails. These records are used only for business communication, support, security and audit purposes.
9. International transfers
Some service providers may process data outside Iceland or the European Economic Area. Where this happens, we rely on appropriate safeguards such as adequacy decisions, standard contractual clauses or other legally recognised transfer mechanisms.
10. Data retention
We keep personal data only for as long as necessary for the purposes described in this Policy, unless a longer period is required or permitted by law.
- Contact form enquiries may be retained for up to 24 months after the last communication, unless a longer period is needed for legal, accounting, dispute or security reasons.
- Client project records may be retained for the duration of the project and a reasonable period afterwards for support, documentation, warranty, dispute and business continuity purposes.
- Accounting and invoice-related data may be retained for the period required by applicable Icelandic law.
- Technical logs are normally retained for a limited period necessary for security, debugging and abuse prevention.
11. Data security
We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. These measures may include access control, encryption where appropriate, secure credentials, server hardening, backups, monitoring and restricted access to project data.
No online service can be guaranteed to be completely secure. If you believe there is a security issue involving Gatula Labs or a project we maintain, contact us immediately at [email protected].
12. Your data protection rights
Subject to applicable law, you may have the right to:
- request access to your personal data;
- request correction of inaccurate or incomplete data;
- request deletion of your personal data;
- request restriction of processing;
- object to processing based on legitimate interests;
- request data portability;
- withdraw consent where processing is based on consent;
- lodge a complaint with the Icelandic Data Protection Authority.
To exercise your rights, contact us at [email protected]. We may need to verify your identity before responding.
13. Complaints
If you believe your personal data has been processed unlawfully, you can contact us first so we can try to resolve the issue. You may also contact the Icelandic Data Protection Authority, Persónuvernd.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The updated version will be published on this page with a new effective date where appropriate.
15. Contact
For privacy questions or data requests, contact Gatula Labs:
- Email: [email protected]
- Phone: +354 767 7158
- Office: Bíldshöfði 16, 110 Reykjavík, Iceland