Privacy Policy

Last updated: 15 July 2026

1. About this Privacy Policy

Byggingafélagið Hvati ehf respects your privacy and is committed to handling personal information responsibly and securely.

This Privacy Policy explains how we collect, use, store and share personal information when you visit our website, contact us or otherwise communicate with us.

For the purposes of applicable data-protection legislation, Byggingafélagið Hvati ehf is the controller of the personal information described in this policy.

2. Contact details

Byggingafélagið Hvati ehf
Tunguhálsi 17
110 Reykjavík
Iceland

Email: bhv@bhv.is
Phone: +354 893 0422

Questions or requests concerning your personal information may be sent to the email address above.

3. Information we collect

We may collect the following categories of personal information.

Information you provide to us

When you use our contact form, email us or contact us by telephone, we may collect:

  • Your name
  • Your email address
  • Your telephone number, if provided
  • The contents of your message
  • Information about your proposed construction project
  • Any other information you choose to provide

Please avoid submitting sensitive personal information unless it is necessary for your enquiry.

Information collected automatically

When you use the website, certain technical information may be collected automatically, including:

  • Your IP address
  • Browser and device type
  • Operating system
  • Date and time of access
  • Pages visited
  • Referring website
  • Technical error and security information

This information may be recorded in server logs or collected through cookies and similar technologies.

4. How we use your information

We may use personal information to:

  • Respond to enquiries and requests
  • Discuss potential construction projects
  • Prepare estimates, proposals or quotations
  • Take steps before entering into a contract
  • Deliver and manage agreed services
  • Maintain our business records
  • Operate, maintain and secure the website
  • Detect misuse, technical errors or security incidents
  • Improve the functionality and performance of the website
  • Comply with legal, accounting and regulatory obligations
  • Establish, exercise or defend legal claims

We do not use information submitted through the contact form for unrelated marketing unless you have separately agreed to receive such communication.

5. Legal bases for processing

Depending on the circumstances, we process personal information on one or more of the following legal bases:

Steps taken before entering into a contract or performance of a contract
We may process your information when you ask us to prepare a quotation, discuss a project or provide agreed services.

Legitimate interests
We may process information where necessary to communicate with potential and existing clients, administer our business, maintain the website, protect our systems and establish or defend legal claims.

Legal obligations
We may process and retain information where required by accounting, tax, construction, regulatory or other applicable laws.

Consent
We rely on consent when using non-essential cookies or where consent is otherwise required. You may withdraw your consent at any time without affecting processing that took place before it was withdrawn.

6. Contact forms and correspondence

When you submit the website’s contact form, the information you provide is sent to us so that we can respond to your enquiry.

Submitting an enquiry does not automatically create a contractual relationship between you and Byggingafélagið Hvati ehf.

We may retain correspondence where reasonably necessary to follow up on an enquiry, document discussions, prepare a proposal or protect our legal interests.

7. Cookies

The website may use cookies and similar technologies.

Cookies are small data files stored on your device. They may be used to provide essential website functionality, remember preferences, maintain security and understand how the website is used.

Necessary cookies

Necessary cookies support core website functionality and security. The website may not function correctly without them.

Optional cookies

Analytics, preference or marketing cookies will only be used where permitted and, where required, after you have provided consent.

You can accept, reject or manage optional cookies through the website’s cookie banner or cookie-preference tool. You can also configure your browser to block or delete cookies, although doing so may affect some website functions.

Detailed information about individual cookies, their providers, purposes and storage periods should be displayed in the website’s cookie declaration.

8. Who we share information with

We may share personal information with trusted third parties where necessary, including:

  • Website hosting and technical-service providers
  • Website maintenance and development providers
  • Email and communication providers
  • Cookie-consent and analytics providers
  • Accountants, legal advisers and other professional advisers
  • Contractors or suppliers involved in delivering a requested service
  • Public authorities, regulators or courts where disclosure is legally required

These recipients may only use personal information for the relevant purpose and must protect it in accordance with applicable data-protection requirements.

We do not sell or rent personal information.

9. International data transfers

Some technical or cloud-service providers may process information outside Iceland or the European Economic Area.

Where personal information is transferred outside the European Economic Area, we take reasonable steps to ensure that an appropriate transfer mechanism is in place. This may include an adequacy decision, standard contractual clauses or another safeguard recognised under applicable data-protection legislation.

Further information about relevant safeguards may be requested using the contact details above.

10. How long we keep information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected.

The applicable retention period may depend on:

  • The nature of the enquiry or project
  • Whether a contractual relationship is established
  • The length of the client relationship
  • Applicable accounting or legal requirements
  • Limitation periods for possible legal claims
  • Security and fraud-prevention requirements

Information that is no longer required will be deleted, anonymised or securely archived where continued retention is legally required.

Cookie retention periods are listed in the website’s cookie declaration.

11. Information security

We use appropriate technical and organisational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, disclosure or access.

However, no website, email system or internet transmission can be guaranteed to be completely secure. You should therefore avoid sending highly sensitive or confidential information through the general contact form.

12. Your rights

Subject to applicable law and any relevant exceptions, you may have the right to:

  • Request confirmation that we process your personal information
  • Obtain access to your personal information
  • Request correction of inaccurate or incomplete information
  • Request deletion of your information
  • Request restriction of processing
  • Object to processing based on legitimate interests
  • Receive certain information in a portable format
  • Withdraw consent at any time
  • Lodge a complaint with a competent supervisory authority

We may request information needed to confirm your identity before responding to a request.

Where a request is manifestly unfounded, excessive or restricted by applicable law, we may decline the request or charge a reasonable fee where legally permitted.

Requests may be submitted to bhv@bhv.is.

These rights arise under the GDPR and Icelandic data-protection legislation.

13. Complaints

We encourage you to contact us first if you have concerns about how your personal information is processed.

You also have the right to submit a complaint to Iceland’s supervisory authority:

Persónuvernd
Laugavegi 166, 4th floor
105 Reykjavík
Iceland

Phone: +354 510 9600
Email: postur@personuvernd.is

Persónuvernd supervises compliance with Icelandic rules governing the processing of personal information.

14. Third-party websites

The website may contain links to websites operated by other organisations, including social-media platforms.

We are not responsible for the content, security or privacy practices of external websites. You should review the privacy policy of any external service before providing it with personal information.

15. Children’s information

The website is intended for people seeking information about construction services and is not directed specifically at children.

We do not knowingly seek to collect personal information from children through the website.

16. Changes to this policy

We may update this Privacy Policy when our services, website functionality or legal obligations change.