Privacy Policy

Last updated: 1/28/2026

1. Data Controller

Optima ehf. (hereinafter “Optima”, “we” or “our”) is the data controller responsible for processing personal data collected through the website optima.is.

Address: Tryggvagata 10, 101 Reykjavik, Iceland
Email: optima@optima.is

2. What Information Do We Collect?

We collect the following personal information when you contact us:

  • Name
  • Email address
  • Company name (optional)
  • Message content

3. Purpose of Processing

We use your personal information to:

  • Respond to your inquiries
  • Provide information about our services
  • Improve our services and website

4. Legal Basis

The processing of personal data is based on your consent (GDPR Article 6(1)(a)) when you submit an inquiry through our contact form.

5. Retention Period

We retain your personal information for up to 24 months from receipt of inquiry, unless you request deletion earlier.

6. Service Providers (Processors)

We use the following service providers who may have access to personal data:

  • Vercel Inc. - Website hosting (United States)
  • Sanity AS - Content management system (Norway)

All service providers have signed a Data Processing Agreement (DPA) and comply with GDPR requirements.

7. Your Rights

Under data protection laws and GDPR, you have the following rights:

  • Right of access: Right to obtain information about what data we hold about you
  • Right to rectification: Right to have inaccurate information corrected
  • Right to erasure: Right to request deletion of personal data
  • Right to restriction: Right to restrict processing
  • Right to portability: Right to receive your data in a machine-readable format
  • Right to object: Right to object to processing

To exercise your rights, contact us at optima@optima.is.

8. Cookies

Our website only uses essential cookies that are necessary for the functionality of the site. We do not use tracking cookies or advertising cookies.

9. Complaints

If you believe we have not handled your personal data correctly, you can file a complaint with the Icelandic Data Protection Authority (www.personuvernd.is).

10. Changes to This Policy

We reserve the right to modify this privacy policy. Any changes will take effect when the updated policy is published on the website.