Privacy
Last updated 17 August 2026
Data controller
The controller of personal data processed on bokasal.is is eTronica ehf., reg. no. (kennitala) 411214-1330, Þorrasalir 1-3, 201 Kópavogur, Iceland, tel. +354 768 3300, e-mail etronica@etronica.is. Processing complies with the Icelandic Data Protection Act no. 90/2018 and the EU General Data Protection Regulation (GDPR).
What we store
For a booking request: your name, e-mail, phone number, the company name if you give one, the number of guests and anything you write in the message. For an account: your name, e-mail, phone and a hashed password. For a venue listing: the details the owner enters, including a company kennitala if supplied. For an owner subscription: the chosen plan, invoicing details and the payment status of issued invoices.
Purpose and legal basis
The data is used solely to run the service: delivering requests, managing accounts and subscriptions, and issuing invoices. Processing is based on the performance of a contract with you and on our legitimate interest in operating the site. The data is never sold and never used for third-party marketing.
Who sees it
A booking request is sent to the owner of that venue and to nobody else. If you ask for catering, staff or another service, that request goes to us so we can find a supplier; we only pass your details on to a supplier at your request.
Hosting and processors
The site is hosted by Vercel in Frankfurt and data is stored in a Neon database within the European Economic Area. E-mail is delivered through Resend and invoices are issued through Payday. These providers process data solely on our behalf under data processing agreements.
Cookies and analytics
This site uses only strictly necessary cookies, a sign-in cookie for account holders. There are no marketing or tracking cookies. Visitor statistics are collected with Vercel Web Analytics, which sets no cookies and does not identify individual visitors; figures exist only in aggregate. Adverts are served from our own database and views and clicks are counted without profiling. Because no non-essential cookies are used, no cookie consent banner is required.
Retention and your rights
Booking requests are kept while they are useful to both parties and then removed. You have the right to access the data we hold about you, and to have it corrected, deleted, restricted or ported. Write to hallo@bokasal.is to exercise these rights. You may also lodge a complaint with the Icelandic Data Protection Authority (Persónuvernd, personuvernd.is).