Privacy Policy

Thank you for visiting our website. Your privacy is very important to us. This policy explains what information we collect, why we collect it, and how we use it. We value your trust and are committed to safeguarding your details.

This is the Privacy Policy of Blue Lagoon Ltd., Id. no. 490792-2369, a company registered in Iceland with its office address at Nordurljosavegur 9, 240 Grindavik, Iceland. Blue Lagoon Ltd. operates geothermal spas, hotels, restaurants and shops in Iceland.

What personal information we may collect and for what purposes

The kinds of personal information we may collect from you depend on the services we provide you with. We first and foremost use your personal information for providing and improving our services and products. This includes: identification and contact information, information related to your booking and stay, payment details, accommodation and meal preferences, booking history, and communication correspondence.

Preservation of your personal information

Your personal information will be kept for the duration needed to be used in conformity with the original purpose of its collection unless otherwise necessary to comply with legal requirements. In some cases, your personal information may be stored for seven years from the closure of the accounting year in accordance with the Icelandic Accounting Act.

Sharing of personal information

We may share personal information with data processors to facilitate our services. These parties have access to your personal information only to perform specific tasks on our behalf and are obligated not to disclose or use your information for any other purposes. We will not transfer personal data outside of the European Economic Area unless permitted by applicable privacy legislation.

Security

Payment transactions are safeguarded at all times. They are PCI DSS certified to ensure safe transactions. Our websites are secured with SSL certificates with the highest level of encryption and security.

Your rights

You have the right to access your personal information at all times and to have the information corrected if inaccurate. You have the right to restrict processing, to object to processing related to direct marketing, and to have personal data erased when no longer necessary. Contact us at [email protected] with "Privacy" in the subject line.

Complaints

You have the right to lodge a complaint to the Icelandic Data Protection Authority (Personuvernd), Raudararstigur 10, 105 Reykjavik, Iceland.

Updated: 11 February 2022