Privacy policy
Draft, under review
This policy explains what personal data Sér Tækni ehf. processes about customers and others who use the company's websites under ser.is, such as ser.is and nanoman.ser.is, for what purposes, and what your rights are under the Icelandic Data Protection Act No. 90/2018 and the General Data Protection Regulation (EU) 2016/679.
Last updated 10 October 2026
Controller
Sér Tækni ehf. is the controller for personal data processed on this website. Questions and requests about data protection can be sent to info@ser.is.
- Name
- Sér Tækni ehf.
- Kennitala (ID no.)
- 470126-2210
- Address
- Síðumúli 1, 108 Reykjavík
- info@ser.is
- Phone
- +354 790 0505
What we process
- Orders
- Name, email, phone number, kennitala if given, address or pickup point, order note, products, amounts and payment status. Card details go straight to Straumur and we never receive them.
- Business accounts
- Company kennitala and name, contact name, email, phone number, line of business and the message in the application, together with the company's orders and quotes.
- Business contacts (CRM)
- Names, email addresses, phone numbers and roles of contacts at companies we do business or correspond with, together with correspondence history, quotes and whether emails were delivered.
- Sign-in
- Email address, sign-in links and sessions. Links and sessions are stored only as hashes. To prevent abuse we record the IP address when a sign-in link is requested.
- Enquiries
- Name, email, phone number and the message you send us.
- Analytics
- The address of the page viewed, the site that referred to it, country, device type, operating system and browser. No cookies are used and IP addresses are not stored.
- Cookies
- See the cookies section below.
Purposes and legal bases
- Orders and delivery
- To process and deliver orders, take payments and handle complaints. Based on performance of a contract.
- Bookkeeping
- To keep accounts and meet tax obligations. Based on a legal obligation under the Bookkeeping Act No. 145/1994.
- Business accounts and quotes
- To open accounts, grant invoice terms and make quotes. Based on performance of a contract or steps taken at the company's request before entering into one.
- Business relationships
- To manage correspondence with companies we do business with or would like to. Based on our legitimate interest in such correspondence.
- Sign-in and security
- To sign users in and protect the website against abuse. Based on our legitimate interest in running the website securely.
- Enquiries
- To answer what you send us. Based on legitimate interest or steps taken at your request.
- Analytics
- To see how many people visit each website and which pages they view, so we can improve the websites. Based on our legitimate interest in running the websites.
We never sell personal data and do not use it to show advertising.
Cookies and browser storage
The website uses only cookies that are strictly necessary for it to work. We use no advertising cookies, so we do not ask for cookie consent.
- Session cookie (__Secure-st_session)
- Keeps you signed in to the business area on all Sér Tækni websites under ser.is. Valid for 14 days from last use.
- Cart cookie (__Secure-st_cart)
- Holds your shopping cart on all Sér Tækni websites under ser.is. Valid for 30 days.
- Language cookie (NEXT_LOCALE)
- Remembers whether you view the site in Icelandic or English.
- Theme
- Your choice of light or dark theme is stored in your browser (localStorage) and never sent to us.
We count visits to each website and page with Vercel Web Analytics. It uses no cookies and stores nothing in your browser. IP addresses are not stored and visits are not tracked from one day to the next. We only see totals, such as the number of visits, country and device type.
Processors
The following service providers process data on our behalf. They receive only what they need to provide their service.
- Vercel
- Website hosting and analytics. United States.
- Neon
- Website database. London, United Kingdom.
- Resend
- Email delivery. United States.
- Straumur
- Payment processing. Iceland.
- Dropp
- Parcel delivery. Iceland.
- Pósturinn
- Parcel delivery. Iceland.
- Payday
- Bookkeeping and invoicing. Iceland.
Where data is transferred outside the European Economic Area, the transfer relies on a European Commission adequacy decision or standard contractual clauses.
Retention
- Accounting records
- Orders, invoices and payments are kept for seven years from the end of the financial year under the Bookkeeping Act No. 145/1994.
- Shopping carts
- Deleted after they expire.
- Sign-in
- Sign-in links are valid for 15 minutes and sessions for 14 days from last use.
- Contacts and enquiries
- Kept while the business relationship lasts or as long as they are needed. We delete or correct them at your request.
Your rights
You have the right to:
- access the personal data we process about you and receive a copy;
- have inaccurate data corrected;
- have data erased, unless we are required to keep it, for example under bookkeeping law;
- object to processing based on legitimate interests and have processing restricted;
- receive data you have provided to us in a machine-readable format.
Send requests to info@ser.is. We reply within one month.
Complaints to Persónuvernd
If you believe our processing breaks the law you can complain to Persónuvernd, the Icelandic Data Protection Authority, which supervises Act No. 90/2018. See personuvernd.is. We would, however, appreciate the chance to resolve the matter with you first.
Security
Connections to the website are encrypted. Staff only have access to the data their role requires. No passwords are used; sign-in is by a link sent by email.
Changes
We update this policy when our processing changes. The latest version is always on this page.