Privacy policy

1. Processing of personal data

So that allsber.is can serve you in the web shop and provide the services on offer, the company needs to process various kinds of personal data for different purposes and on different legal bases. This is personal data that we collect directly from you; we collect no information about you from anywhere else.

Contact details: That is, name, address and email address. This information is necessary to ensure that we send purchased products to the right place, to communicate about your purchase, and to ensure that the right customer is registered as the buyer, for example for invoicing and in the event of returns. We also use it for direct marketing if you have signed up to our mailing list to receive offers from us.

Payment details: We do not store any card details on our web servers or sites. At the end of your order you are redirected to the payment page of a card gateway, which sends us confirmation that the charge to your card was successful, and we process that information for accounting purposes. We therefore need to process this information because of your contract with us for the purchase of goods and because of our legal obligations, for example under the accounting act.

Purchase information: That is, which products you bought, when and for what amount. We process this information in order to be able to sell and send you the products in question and to fulfil our legal obligations.

In addition to processing personal data, we use various kinds of non-personally identifiable information to operate the web shop, for example statistical information on when our customers buy which products, and so on. None of this information can be traced to a specific customer; it is only non-personally identifiable information about groups of customers.

2. Sharing of personal data

We do not share the personal data about you that we process for the web shop with third parties, except in the following cases:

  • Email addresses of those who ask to receive offers by email are shared with a bulk email service operating within the EEA.
  • Accounting records are handed over to our auditors as they may request by law.
  • We reserve the right to comply with orders from competent Icelandic courts and supervisory authorities for the disclosure of data, including data that may contain personal data.

3. Retention period

The retention period of the personal data we process depends on the purpose for which it is collected and the legal basis on which the processing rests. We therefore keep your contact details, together with information about your mailing list subscription, for as long as you are a registered user of the web shop. It is worth repeating that users can unsubscribe at any time and close their account without notice.

We process information about your purchases together with payment details, that is, debit confirmations from the payment processor, for as long as we are required to under the accounting act, which is currently at least 7 years but no longer than 10 years.

4. Your rights

Where we process personal data about you, you have rights that are important for you to know about:

  • You have the right to request access to and a copy of your personal data held by us, to have us correct it if it is wrong or misleading, or to have us delete it if we no longer have authority to process it.
  • You have the right to transfer your own data, or to have us restrict the processing of personal data about you, subject to certain conditions.
  • You also have the right to object to the processing.

You have the right to lodge a complaint with the Data Protection Authority (Persónuvernd) about the processing.

5. Venue

Should a legal dispute arise in connection with these terms, it shall be brought before the Reykjavík District Court.

6. Controller and contact details

MISTRETI BEVERAGES SRL is the controller of this processing of personal data. Enquiries relating to the processing can be sent by email to allsber@allsber.is.