Privacy Policy
Last updated
This policy explains what personal data goldencircleiceland.com collects, why, who it is shared with, and the choices you have.
Who is responsible
Golden Circle Iceland is operated by Etravel ehf. (kt. 530208-1680), Skeifunni 19, 108 Reykjavík, Iceland. Etravel ehf. is the controller of the personal data described here.
When you book a tour
Tours are booked in the booking calendar on each tour page. The calendar and checkout are provided by Bokun, a booking system for tour companies, and load from Bokun’s servers. To book, you give your name, email address, phone number and the details of your trip, such as the date, the number of travellers and your pickup place.
Your card details are entered in Bokun’s checkout and handled by its payment provider. They never pass through this website’s servers.
We use your booking details to confirm and manage your booking and to answer questions about it. They are shared with the company that runs your tour, which needs them to carry it out.
When you browse the site
Our hosting provider, Vercel, processes the technical data needed to deliver pages and keep the site secure, such as your IP address, browser type and the pages you request.
Analytics and cookies
We use Google Analytics 4 to understand how visitors use the site: which pages are viewed, how people arrive, and roughly where they are and what device they use. It uses cookies, and they are only set if you accept them in the cookie banner.
Until you accept, no analytics cookies are set and Google receives only limited signals without cookies. The site loads no advertising tags and sets no advertising cookies.
- _ga and _ga_<ID> — Google Analytics. Set only after you accept, and they expire after two years.
- Booking calendar — Bokun may store data in your browser to keep your booking session working while you book.
- Your cookie choice — kept in your browser’s local storage, not in a cookie, so the banner does not ask again on every page.
You can change your choice at any time with Cookie settings at the bottom of every page. If you decline after accepting, the Google Analytics cookies are removed.
Why we are allowed to use your data
- Your booking — needed to carry out the contract you enter into when you book.
- Running the website — our legitimate interest in a working, secure site.
- Analytics — your consent, which you can withdraw at any time.
- Accounting records — our legal obligation to keep them.
Who we share it with
- Bokun — the booking calendar and checkout.
- The company running your tour — to carry it out.
- The payment provider connected to Bokun’s checkout — to take payment.
- Google — Google Analytics, only if you accept.
We do not sell personal data.
Some of these providers, such as Google and Vercel, may process data outside the European Economic Area. Where they do, the transfer relies on safeguards recognised under the GDPR, such as the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.
How long we keep it
Booking details are kept for as long as needed to deliver and support your booking, and for as long as Icelandic bookkeeping law requires for accounting records. Google Analytics data is kept for the retention period set in our Google Analytics account, after which Google deletes it.
Your rights
You have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to how it is used, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time.
To use these rights, write to us at the address above. If you believe we have mishandled your data, you can complain to Persónuvernd, the Icelandic Data Protection Authority, at personuvernd.is.
Changes to this policy
If we change how we handle personal data, we will update this page and the date at the top.