Privacy Policy

This policy explains how Verzla Software ehf. (“Verzla”, “we”, “us”) handles personal data when you visit verzla.com or humla.is, contact us, or do business with us. We process personal data in accordance with the Icelandic Act no. 90/2018 on Data Protection and the Processing of Personal Data and the EU General Data Protection Regulation (GDPR).

1. Who is responsible for your data

Verzla Software ehf., a company registered in Iceland with registration number (kennitala) 630725-0890 and VAT number (VSK) 159176, is the data controller for the processing described in this policy, except as set out in section 9. You can reach us about anything in this policy at hallo@verzla.com.

2. The data we collect

• Website usage data. When you visit our websites, the servers that host them process technical data such as your IP address, browser and device type, the pages you request and the time of each request.
• Advertising measurement data. On verzla.com, if you agree, a measurement tag collects data about your visit, as described in section 4.
• Information you send us. When you email us, we receive your name, email address, company and whatever else you include in your message.
• Customer and partner data. If you work for one of our customers or partners, we hold business contact details, contract and billing information, and our correspondence and support history with you.

The contact tool on verzla.com builds an email draft inside your browser. What you select or type there is not sent to us unless you choose to send the email from your own email program.

3. Why we use your data and our legal basis

• To run and secure our websites. Our legitimate interest in keeping them available and protected against misuse.
• To respond to enquiries. Our legitimate interest in answering you, or steps you have asked us to take before entering into a contract.
• To provide our services and manage customer relationships. Performance of a contract, and our legitimate interest in communicating with the people who work at our customers and partners.
• To measure our advertising. Your consent, which you can withdraw at any time.
• To meet legal obligations. For example accounting, tax and responding to lawful requests from authorities.

We do not make decisions about you based solely on automated processing.

4. Cookies and advertising measurement

verzla.com can use a measurement tag (a “pixel”) provided by OpenAI, so that we can measure whether our advertising leads to enquiries. The tag only loads if you accept it in the consent notice shown on your first visit. If you decline, it does not load and the website works the same. The tag reports when you click a link to contact us by email.

When the tag loads, your browser connects to OpenAI’s servers. OpenAI can receive your IP address, browser details and the page you are visiting. OpenAI handles that data as described in its privacy policy. The tag also sets these cookies on verzla.com:

• __obref recognises your browser between visits and lasts for up to 12 months;
• __oppref records the advertising click that brought you here, if there was one, and lasts for up to 30 days.

You can change your choice at any time with the “Vafrakökur” (cookies) link in the footer of verzla.com. If you withdraw your consent, the tag stops loading and we remove these cookies. We remember your choice in your browser’s local storage. humla.is does not use this tag. We do not set any other tracking cookies on our websites.

5. Who we share data with

We share personal data only where needed for the purposes above, with:

• service providers that work for us, such as hosting, email, accounting and advertising measurement providers;
• authorities, courts and advisers, where the law requires it or a legal claim needs it;
• a successor or buyer, if our business is reorganised or sold.

6. Transfers outside the European Economic Area

Some of our service providers, including OpenAI, may process data outside the European Economic Area, for example in the United States. Where that happens, we rely on an adequacy decision or another safeguard permitted by data protection law, such as the European Commission’s standard contractual clauses.

7. How long we keep data

• Server logs are kept for a limited period for security and then deleted.
• Enquiries are kept for as long as needed to respond and follow up.
• Customer and partner data is kept for the duration of the relationship and afterwards for as long as needed to deal with possible claims.
• Accounting records are kept for seven years, as required by the Icelandic Act no. 145/1994 on Bookkeeping.

8. Your rights

You have the right to request access to your personal data, to have it corrected or erased, to restrict its processing, and to receive it in a portable format. You also have the right to object to processing based on our legitimate interests, and to object at any time to processing for marketing purposes. Where we rely on consent, you can withdraw it at any time.

To exercise these rights, email hallo@verzla.com. We will respond within one month. If you are unhappy with how we handle your data, you can complain to the Icelandic Data Protection Authority, Persónuvernd.

9. Data we process for our customers

Online stores that run on Verzla or Humla decide how the data of their own shoppers and users is handled. For that data, the store is the controller and we act as its processor, following its instructions under our agreement with it. This policy does not cover that processing. If you are a shopper at one of these stores, please see the store’s own privacy policy and contact the store directly.

10. Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access. No system or transmission over the internet can be guaranteed to be completely secure.

11. Changes to this policy

We may update this policy from time to time. The latest version is always on this page, with the date of the last update at the top.