Privacy

Data controller

The controller is the individual identified in the “Legal information” section at the top of this page, trading as MÓTA Vefstofa. MÓTA Vefstofa is a trading name and not a separate legal person. The controller’s kennitala, business address and contact details are also shown there.

What information is collected

When you submit an enquiry, MÓTA processes the information you choose to provide and the technical information necessary to receive the enquiry securely.

• Your name, company name and role, where applicable
• Email address and phone number
• The kennitala of the individual or legal entity submitting the enquiry
• Information about an existing website, industry, goals, requirements, content readiness, budget and timeframe
• Free-text messages and other information you choose to send
• The site language, the page from which the enquiry was sent and necessary security data such as IP address and timestamp

The enquiry form requests a kennitala to identify the correct individual or legal entity, reduce the risk of incorrect records and prepare a proposal, agreement and invoicing if the engagement proceeds. The kennitala is not used for marketing, credit checks or unrelated purposes.

Purposes and legal bases

• To answer an enquiry, assess a project and prepare a proposal or quote at your request. The processing is necessary to take steps before entering into a contract.
• To use the kennitala to identify the enquirer unambiguously and associate the enquiry with the correct contracting and invoicing party. This processing is carried out to take steps at your request before entering into a contract and, if the engagement proceeds, to perform the contract and comply with invoicing and accounting obligations.
• To enter into and perform a contract, deliver the project and provide the agreed service. The processing is necessary for the contract.
• To issue invoices, keep accounting records and comply with tax and other legal duties. The processing is based on a legal obligation.
• To protect the website against spam and misuse, diagnose faults and establish, exercise or defend legal claims. The processing is based on the controller’s legitimate interests in secure operation and legal protection.

Ticking the privacy notice box confirms that you have read this policy; it is not consent to marketing email. MÓTA does not send marketing email unless separate, freely given and withdrawable consent has been provided.

How long information is kept

• An enquiry that does not lead to a project is normally kept for up to 12 months after the last communication and then deleted, unless there is a lawful reason to keep it longer.
• Information connected with a contract is kept for the duration of the engagement and afterwards for as long as necessary for settlement, warranties or legal claims.
• Accounting records and supporting documents are kept for seven years from the end of the relevant financial year, as required by Icelandic accounting law.

Recipients and service providers

Access to personal data is limited to the controller and the service providers necessary to operate the website and answer enquiries. MÓTA does not sell personal data.

• Vercel — hosts the website and processes necessary service and security data.
• Resend — delivers the confirmation email to the sender and the notification to MÓTA.
• Supabase — stores enquiries in a database where database storage is enabled.
• Google — provides the email inbox used by MÓTA to receive and answer enquiries.
• Cloudflare Turnstile — may process technical information to detect automated misuse where spam protection is enabled.

Processing outside the EEA

Some providers or their subprocessors may process information outside the European Economic Area, including in the United States. Where this occurs, the transfer relies on an adequacy decision, standard contractual clauses or another lawful safeguard. Further information is available by contacting MÓTA.

Cookies and browser storage

The website does not use advertising cookies. It may use necessary browser storage to remember language, theme and an unfinished form. A form draft is stored in the browser and is not sent to MÓTA until you submit the form.

If analytics, marketing cookies or other non-essential tracking are enabled later, this policy will be updated and consent will be requested where required by law.

Your rights

Where applicable, you have rights to information and access, rectification, erasure, restriction of processing, objection and data portability. Where processing is based on consent, you may withdraw it at any time. These rights are not absolute; for example, a legal obligation may require continued retention of accounting records.

MÓTA responds without undue delay and normally within one month. Information necessary to verify the requester’s identity may be requested.

If you believe that the processing breaches data protection law, you may lodge a complaint with the Icelandic Data Protection Authority, Persónuvernd.

Law and language

Personal data is processed under Icelandic Act No. 90/2018 and Regulation (EU) 2016/679 as applicable in Iceland. Translations are provided to aid understanding, and statutory rights are not reduced by the language used or by a difference in translation.

Contact

Privacy requests and questions can be sent to mota@mota.is.