1Data controller
RentEvent ehf. is responsible for the processing of personal data described in this policy.
- Company
- RentEvent ehf.
- ID no.
- 500226-0640
- Address
- Kríuhólar 2, 111 Reykjavík
- [email protected]
- Phone
- 778 8817
2Information we collect
When you book, ask for a quote or contact us, we receive the following information from you:
- Contact details: name, email address and phone number.
- Delivery details: address or location of the event, and notes about access.
- The booking itself: the dates of the event and delivery, when the equipment is collected, and what equipment or services you order.
- Invoicing details (optional): company name and ID no. (kennitala), if an invoice is to be issued to a company or an individual.
- Payment details: confirmation of payment, amount and date. We never receive card numbers.
- Correspondence: emails and messages you send us.
In your browser we store your booking list and your cookie choice. This information is not sent to us until you complete a booking. Tracking on the website is covered in section 5.
3Purpose and legal basis
We only process the information for clear purposes and on the legal bases in Article 9 of Act No. 90/2018:
| Purpose | Legal basis |
|---|---|
| Handling a booking: reserving, delivering, setting up and collecting equipment | Performance of a contract with you |
| Confirming bookings and answering enquiries | Performance of a contract, or steps taken at your request before a contract is made |
| Issuing invoices and keeping accounts | Legal obligation under the Bookkeeping Act No. 145/1994 and the VAT Act |
| Statistics on how the website is used | Your consent |
| Measuring the results of ads and showing ads | Your consent |
| Recovering payment for damage, equipment that is not returned or unpaid invoices | Performance of a contract and our legitimate interests |
| Website security and protection against spam and misuse of forms | Our legitimate interests |
If you do not give us your name, phone number and address, we cannot deliver the equipment. We do not use the information to make automated decisions about you.
The ID no. (kennitala) is only used when it is necessary to identify the payer on an invoice, cf. Article 13 of Act No. 90/2018.
4Where the data is stored
We use the following service providers. They process the information on our behalf and only for the purposes described here:
Google (Google Drive and Gmail)
Bookings are recorded in a booking spreadsheet stored in Google Drive. Email correspondence goes through Gmail.
Cloudflare
The website is hosted by Cloudflare. As with any web hosting, technical information such as your IP address and browser type passes through Cloudflare's systems when the page is opened, in order to display it and protect it against attacks.
Teya
Teya handles card payments. Card details are entered with Teya and RentEvent never sees the full card number. We only receive confirmation of payment.
Accounting system
Invoices are issued and accounts kept in an accounting system. It holds the name, ID no. (if provided) and details of what was purchased.
Staff
Staff who handle delivery and collection receive the name, phone number, address and what is to be delivered, so they can get the equipment to the right place.
Transfers outside the EEA
Google, Meta and Cloudflare are US companies, and information may be processed outside the European Economic Area. Such transfers are based on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
5Cookies and tracking
When you first visit the website, we ask whether you allow cookies. Essential storage is always active. Cookies for statistics and marketing are only stored if you consent. The Meta Pixel is not loaded until you have consented to marketing. We never send names, email addresses, phone numbers, addresses or messages from forms to the tracking tools.
Categories
| Category | Purpose | Service and cookies |
|---|---|---|
| Essential | Remembering your booking list, chosen dates and cookie choice | Web storage in your browser (localStorage)Cookie choice lasts 6 months |
| Statistics | Seeing which pages are viewed and how the website works, so we can improve it | Google Analytics _ga, _ga_*Up to 2 years |
| Marketing | Measuring whether ads lead to bookings, and showing relevant ads to people who have visited the website | Google Ads _gcl_au, Meta Pixel _fbpUp to 90 days |
We use Google Consent Mode. If you decline, no cookies are stored for statistics or advertising, but Google may receive anonymous, cookieless signals (for example that a page was opened), which are used to estimate overall traffic.
6Retention periods
We do not keep information longer than necessary:
- Bookings, invoices and payment records: seven years from the end of the financial year in question, as required by the Bookkeeping Act No. 145/1994.
- Enquiries and quotes that do not lead to a booking: deleted when no longer needed, normally within 12 months.
- If a dispute or claim arises: the information needed, for as long as needed to resolve the matter.
- Cookie choice: 6 months. After that we ask again.
- Statistics and advertising data: according to the settings at Google and Meta, see the table above.
7Your rights
Under Act No. 90/2018 you have the right to:
- access the information we hold about you and get a copy of it,
- have incorrect information corrected,
- have information deleted, unless we are required to keep it, for example under bookkeeping law,
- object to processing or have it restricted,
- receive the information you provided to us in a machine-readable format,
- withdraw your consent to cookies at any time, without affecting processing that took place before.
Send a request to [email protected] or call 778 8817. We reply within a month and may need to confirm your identity before handing over any information.
Complaints to the Data Protection Authority
If you believe we are not handling your information correctly, you can send a complaint to the Icelandic Data Protection Authority (Persónuvernd), Rauðarárstígur 10, 105 Reykjavík, [email protected], www.personuvernd.is. We would, however, welcome the chance to resolve the matter first.
8Changes and contact
We update this policy if our processing changes, for example if we start using a new service. The date of the last update is shown at the top of the page.
We protect the information with technical and organisational measures. Communication with the website is encrypted, and only those who need access have it. If a security breach occurs that threatens your rights, we report it to the Data Protection Authority and to you, as required by law.
The service is intended for people aged 18 and over, and we do not knowingly collect information about children.
Please send questions about privacy to [email protected]. See also our rental terms.
Have a question?
Call us or drop us a line. We reply within 24 hours.