Privacy Policy

Privacy Policy of Daggir Solutions ehf

General

This privacy policy explains how we handle your personal data and your rights regarding that data. Daggir Solutions ehf operates Uppbod.com. For simplicity, we refer to Daggir and Uppbod.com collectively as “the website” or “we”.

We are committed to keeping your personal data safe, confidential, and treating it with respect. We want you to know how we collect, store, and use your information. This policy applies to personal data collected electronically, on paper, or by other means.

The policy is available on Uppbod.com.

Data Controller

Daggir Solutions ehf, ID 690509-0670, Turnahvarf 6, Kópavogur, Iceland, is the data controller for processing activities related to Uppbod.com services.

What information do we collect and how?

Personal data means information that can identify you, directly or indirectly. We collect personal data to activate your account, provide services, and share offers we believe you may be interested in.

We mainly collect:

• Contact details: Name, ID number, address, email, and phone number — collected directly through the website, email, or other methods.
• Payment information: Debit or credit card data via partners. We keep payment records required by accounting and tax laws.
• Communication history: Messages, complaints, or requests you send us, usually via email.
• Online marketing data: When we send you promotions by mail, email, or SMS.
• Technical data: IP address, browser type, device ID, system info, usage patterns, and website visits — including via cookies. See our Cookie Policy for details.

While we usually collect information directly from you, we may also receive it from third parties, such as CreditInfo Iceland, authorities, or service providers.

Why do we process your data?

We use your personal data to:

• Deliver the services you request on our site.
• Respond to your inquiries.
• Send you promotions (with your consent).
• Send you personalized content (e.g., birthday offers).
• Fulfill our contract with you.
• Meet legal obligations (e.g., tax and accounting).
• Make decisions about business terms, including credit checks.
• Allow social media sharing from our site.
• Communicate regarding your transactions.
• Notify you of important updates like changes to terms.
• Perform internal analysis and market research to improve our service.
• Share products and services from us, affiliates, or partners (with your consent).

You can consent to marketing when you create an account or by emailing us at [email protected]. You can withdraw your consent anytime through the website, an unsubscribe link in our emails, or by emailing us.

Withdrawal may take up to 30 days but will not affect service-related communications.

Sharing with third parties

We may share your personal data with third parties for the purposes described above, such as:

• Payment processors
• Shipping companies
• Customer service platforms
• Email marketing services
• IT hosting and telecom providers

Third parties only receive the minimum data needed and must keep it secure and confidential.

Current processors include:

• payday.is: Invoice creation (name, ID, address)
• Campaign Monitor (Createsend): Sending notifications and emails (email, phone, name)

Transfers outside the EEA

If data is processed outside the European Economic Area (EEA), we ensure it is done in compliance with applicable data protection laws.

Data security

We take appropriate measures to protect your personal data from loss, alteration, unauthorized access, or disclosure. Access is limited to authorized personnel under strict confidentiality obligations.

Please be mindful that any personal information you choose to share in public spaces (e.g., forums or Facebook pages) is your responsibility.

While we take every precaution, data transmission over the internet is never 100% secure. If you suspect a breach, please notify us immediately at [email protected].

If a data breach occurs, we will notify the Icelandic Data Protection Authority and affected individuals as required by law.

Our websites are intended for individuals aged 13 and older. We do not knowingly collect personal information from children under 13.

How long do we keep your data?

We keep personal data only as long as necessary for the purposes it was collected, subject to applicable legal obligations (such as accounting laws). In some cases, we may retain data longer if required to protect legitimate interests, like resolving disputes.

Your rights

Under applicable data protection laws, you may have the right to:

• Access your personal data.
• Correct inaccurate or incomplete data.
• Delete your data where appropriate (e.g., when no longer needed).
• Object to our processing where based on legitimate interest.
• Restrict processing under certain conditions.
• Withdraw consent at any time (without affecting previous lawful processing).

Requests should be sent to [email protected]. We aim to respond within 30 days. In complex cases, we may request additional information for verification.

Normally, we will not charge a fee for handling your request. However, if a request is clearly unfounded or excessive, we may charge a reasonable fee or refuse to act.

Effective date

This Privacy Policy was issued on November 28, 2023.