Skip to content
Bakkastofa

Privacy

Last updated: November 2026

Bakkastofa respects your privacy. This page explains what personal data we process when you use this website, in accordance with the Icelandic Data Protection Act no. 90/2018 and the General Data Protection Regulation (GDPR).

Data controller

Bakkastofa, Eyrargata 32, 820 Eyrarbakki, Iceland. Email: bakkastofa@gmail.com, phone +354 821 2426.

What we collect

Contact form: name, email address, subject and message.

Shop order requests: name, email address and – if you provide them – phone, address and a note, together with the product and quantity.

We use no web analytics and no advertising or marketing cookies.

Our hosting provider logs technical data such as IP address and time of visit for security purposes.

Purpose and legal basis

We use the information to answer enquiries and handle orders at your request (GDPR Art. 6(1)(b)), and to protect the website against abuse based on our legitimate interests (Art. 6(1)(f)).

Your information is never sold or used for marketing.

How long we keep it

Messages and order requests are deleted once they are no longer needed to reply to you or complete your order. Information needed for accounting is kept for as long as the law requires.

Cookies

Necessary: “bk_consent” stores your cookie choice (6 months). The admin login cookie is only used by the site's administrators.

Optional: the OpenStreetMap map on the Contact page is only loaded with your consent. Your IP address is then sent to the OpenStreetMap Foundation.

You can change your choice at any time with the “Cookie settings” link at the bottom of every page.

Service providers

We use these providers, who process data on our behalf: Vercel (website hosting), Turso (database) and Cloudinary (images). Where data is processed outside the EEA, this is done under appropriate safeguards such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

Your rights

You have the right to access the data we hold about you, to have it corrected or erased, to restrict or object to processing, and to data portability. Send your request to bakkastofa@gmail.com.

You can also lodge a complaint with the Icelandic Data Protection Authority, Persónuvernd (www.personuvernd.is).