Privacy

This website has no forms, no logins and no tracking cookies. There is no analytics here that identifies individual visitors.

The hosting provider records standard access logs — IP address, timestamp and the page requested — for security and operational purposes. That information is not used to identify individuals and is not combined with anything else.

Delivering services — backup in particular — brings me into contact with data the client is responsible for. Under data protection law the client is the controller and Sysadmin is the processor.

Client data is used only to provide the agreed service. It is not browsed unnecessarily, not passed to third parties and never used for any other purpose.

Clients on a backup service are given a separate data processing agreement setting out what data is processed, for what purpose, and how long it is retained.

TODO: state where backups are actually held — for example on the client's premises and in a data centre in Iceland or elsewhere in the EEA.

Backups are encrypted both in transit and at rest. The storage location and retention period are set out in each client's data processing agreement.

Under data protection law you have the right to know what personal data is held about you, to have it corrected, to have it erased, and to object to its processing.

To exercise those rights, contact me by email at the address below. You also have the right to lodge a complaint with the Icelandic Data Protection Authority (personuvernd.is).