Privacy Policy

Last updated: March 2026

Iceland Bike Rental ehf. ("we", "us", "the Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our website icebikerental.is and our rental services.

1. Data Controller

The data controller responsible for the processing of your personal data is:

• Iceland Bike Rental ehf.
• Kennitala: 420326-0330
• Address: Fléttuvöllum 34, 221 Hafnarfjörður, Iceland
• Email: info@icebikerental.is

2. What Personal Data We Collect

We collect and process the following categories of personal data:

• Identity information: Full name, date of birth, nationality, passport or national ID number.
• Contact information: Email address, phone number, postal address.
• License information: Motorcycle license number, issuing country, license class and validity.
• Booking information: Rental dates, number of motorcycles, pickup and return details.
• Payment information: Payment transaction records. We do not store full credit card numbers; payment processing is handled by our third-party payment provider.
• Communication records: Emails, messages, and other correspondence with us.
• Website usage data: IP address, browser type, pages visited, and cookies (see Section 8).

3. Purpose and Legal Basis for Processing

We process your personal data for the following purposes:

4. How We Obtain Your Data

We obtain personal data directly from you when you:

• Make a booking through our website or by email.
• Communicate with us by email, phone, or messaging services.
• Present identification documents at pickup.

We do not obtain personal data about you from third parties.

5. Who We Share Your Data With

We may share your personal data with:

• Payment processors: To process your rental payment and refunds.
• Insurance providers: To administer insurance coverage related to your rental.
• Icelandic authorities: When required by law (e.g. tax authorities, police in the event of an accident or theft).

We do not sell your personal data to third parties. We do not share your personal data for marketing purposes without your explicit consent.

6. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes described above, and in accordance with Icelandic legal requirements:

• Booking and rental records: Retained for 7 years to comply with Icelandic accounting and tax law (lög um bókhald nr. 145/1994).
• Communication records: Retained for the duration of the business relationship and up to 2 years thereafter.
• Website usage data: Retained for up to 12 months.

After the retention period, personal data is securely deleted or anonymized.

7. Your Rights

Under the Icelandic Act on Data Protection and the Processing of Personal Data (lög nr. 90/2018) and the General Data Protection Regulation (GDPR), you have the following rights:

• Access: You may request a copy of the personal data we hold about you.
• Rectification: You may request correction of inaccurate personal data.
• Erasure: You may request deletion of your personal data where there is no legal basis for continued processing.
• Restriction: You may request that we restrict processing of your data in certain circumstances.
• Data portability: You may request your data in a structured, machine-readable format.
• Objection: You may object to processing based on legitimate interest.
• Withdraw consent: Where processing is based on consent, you may withdraw consent at any time.

To exercise your rights, contact us at info@icebikerental.is. We will respond within 30 days.

8. Cookies

Our website uses cookies to improve your browsing experience. Cookies are small text files stored on your device.

• Essential cookies: Required for the website to function. These cannot be disabled.
• Analytics cookies: Used to understand how visitors use our website. These are only set with your consent.

You can manage your cookie preferences through the cookie banner on our website or through your browser settings.

9. Data Security

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted data transmission (SSL/TLS), secure storage, and access controls limiting who within the Company can view personal data.

10. Transfer of Data Outside Iceland

Your personal data is primarily processed within Iceland and the European Economic Area (EEA). If data is transferred outside the EEA (e.g. through third-party service providers), we ensure appropriate safeguards are in place in accordance with GDPR requirements.

11. Complaints

If you believe that we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the Icelandic Data Protection Authority:

• Persónuvernd
• Website: personuvernd.is
• Email: postur@personuvernd.is

12. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be published on our website with a revised "Last updated" date. Changes do not apply retroactively.

13. Contact

For questions regarding this Privacy Policy or our processing of your personal data:

• Email: info@icebikerental.is
• Address: Fléttuvöllum 34, 221 Hafnarfjörður, Iceland