EN · IS (Switch to Icelandic)
All productsStone and concreteGlassTextile and leatherMetalCarsGraffitiElectricalOtherDocumentsFor businessesAbout usContactBusiness loginÍslenska (Switch to Icelandic)

Privacy policy

This policy explains what personal data Sér Tækni ehf. processes about customers and others who use the company's websites under ser.is, such as ser.is and nanoman.ser.is, for what purposes, and what your rights are under the Icelandic Data Protection Act No. 90/2018 and the General Data Protection Regulation (EU) 2016/679.

Last updated 12 October 2026

Controller

Sér Tækni ehf. is the controller for personal data processed on this website. Questions and requests about data protection can be sent to info@ser.is.

Name
Sér Tækni ehf.
Kennitala (ID no.)
470126-2210
VAT number
160058
Address
Síðumúli 1, 108 Reykjavík
Register
Register of Enterprises (Skatturinn), Iceland

Sér Tækni ehf. has not appointed a data protection officer, as none is required given the scale and nature of the processing.

What we process

Orders
Name, email, phone number, kennitala if given, address or pickup point, order note, products, amounts and payment status. Card details go straight to Straumur and we never receive them.
Business accounts
Company kennitala and name, contact name, email, phone number, line of business and the message in the application, together with the company's orders and quotes. Names and email addresses of staff given access, who placed which order and enquiries sent from the business area. If sign-in with electronic ID is used, we store that staff member's kennitala, solely to link the sign-in to the right account.
Business contacts (CRM)
Names, email addresses, phone numbers and roles of contacts at companies we do business or correspond with, together with correspondence history, quotes and whether emails were delivered. This information comes from our correspondence with the contacts, for example by email, and from public registers.
Sign-in
Email address, sign-in links, sessions and a password if one has been set. Links, sessions and passwords are stored only as hashes. To prevent abuse we record the IP address and browser type at sign-in, on failed sign-in attempts and when a link is requested.
Quotes
When a quote is accepted on the website we record the name of the person accepting it and the IP address.
Enquiries
Name, email, phone number and the message you send us.
Mailing list
Email address, name if given, language, the website where you signed up, when and from which IP address consent was given, when it was confirmed and when you unsubscribed.
Analytics
The address of the page viewed, the site that referred to it, country, device type, operating system and browser. No cookies are used and IP addresses are not stored.
Cookies
See the cookies section below.

Purposes and legal bases

Orders and delivery
To process and deliver orders, take payments and handle complaints. Based on performance of a contract.
Bookkeeping
To keep accounts and meet tax obligations. Based on a legal obligation under the Bookkeeping Act No. 145/1994.
Business accounts and quotes
To open accounts, grant invoice terms and make quotes. Based on performance of a contract or steps taken at the company's request before entering into one.
Business relationships
To manage correspondence with companies we do business with or would like to. Based on our legitimate interest in such correspondence.
Sign-in and security
To sign users in and protect the website against abuse. Based on our legitimate interest in running the website securely.
Enquiries
To answer what you send us. Based on legitimate interest or steps taken at your request.
Analytics
To see how many people visit each website and which pages they view, so we can improve the websites. Based on our legitimate interest in running the websites.
Mailing list
To send you news, offers and information about Sér Tækni products by email. Based on your consent, which you confirm with a link by email. You can withdraw it at any time with the link at the bottom of every email or by contacting us.

We never sell personal data and do not use it to show advertising.

Cookies and browser storage

The website uses only cookies that are strictly necessary for it to work. We use no advertising cookies, so we do not ask for cookie consent.

Session cookie (__Secure-st_session, or __Host-nm_session outside ser.is)
Keeps you signed in to the business area on all Sér Tækni websites under ser.is. Valid for 14 days from last use.
Electronic ID sign-in (__Host-nm_eid)
Holds one-time security codes while a sign-in with electronic ID is in progress. Valid for 10 minutes and deleted when the sign-in completes.
Cart cookie (__Secure-st_cart, or __Host-nm_cart outside ser.is)
Holds your shopping cart on all Sér Tækni websites under ser.is. Valid for 30 days.
Theme (st_theme)
Your choice of light or dark theme is stored in a cookie so that it applies on all Sér Tækni websites under ser.is, and also in your browser (localStorage). The cookie is valid for one year. It is sent with requests to the website, but we do not read it or store anything about it.

We count visits to each website and page with Vercel Web Analytics. It uses no cookies and stores nothing in your browser. IP addresses are not stored and visits are not tracked from one day to the next. We only see totals, such as the number of visits, country and device type.

Some Nanoman product pages have videos from Nanoman hosted on Vimeo. A video does not load until you click it. Your browser then fetches it from Vimeo, which receives your IP address and information about your browser. We ask Vimeo not to track the viewing (dnt), but Vimeo's processing follows its own privacy policy.

Processors

The following service providers process data on our behalf. They receive only what they need to provide their service.

Vercel
Website hosting and analytics. The website runs in London, United Kingdom; Vercel Inc. is a US company.
Neon
Website database. London, United Kingdom.
Resend
Email delivery. United States.
Straumur
Payment processing. Iceland. Straumur is itself responsible for processing card details under its own terms.
Microsoft
The company's email (info@ser.is).
Dropp
Parcel delivery. Iceland.
Pósturinn
Parcel delivery. Iceland.
Payday
Bookkeeping and invoicing. Iceland.

The United Kingdom benefits from a European Commission adequacy decision. Transfers to the United States, to Vercel and Resend, rely on their certification under the EU-U.S. Data Privacy Framework and on the standard contractual clauses in their data processing agreements.

Dropp and Pósturinn receive the name, phone number, email and delivery point needed to deliver the parcel.

Retention

Accounting records
Orders, invoices and payments are kept for seven years from the end of the financial year under the Bookkeeping Act No. 145/1994.
Shopping carts
Deleted after they expire.
Sign-in
Sign-in links are valid for 15 minutes (password reset links and links we send you for 24 hours) and sessions for 14 days from last use. Expired links and sessions and recorded sign-in attempts are deleted after 30 days.
Contacts and enquiries
Kept while the business relationship lasts or as long as they are needed. Handled enquiries are deleted three years after they arrived. We delete or correct your data at your request.
Business applications
A rejected application is deleted one year after it arrived. An approved application is kept while the company remains a customer.
Mailing list
While you are on the list. Unconfirmed sign-ups are deleted after 30 days. After you unsubscribe we keep the address and the time as proof that consent was withdrawn, but send nothing to it.

Your rights

You have the right to:

  • access the personal data we process about you and receive a copy;
  • have inaccurate data corrected;
  • have data erased, unless we are required to keep it, for example under bookkeeping law;
  • object to processing based on legitimate interests and have processing restricted;
  • receive data you have provided to us in a machine-readable format.

Send requests to info@ser.is. We reply within one month.

Complaints to Persónuvernd

If you believe our processing breaks the law you can complain to Persónuvernd, the Icelandic Data Protection Authority, which supervises Act No. 90/2018. See personuvernd.is. We would, however, appreciate the chance to resolve the matter with you first.

Security

Connections to the website are encrypted. Staff only have access to the data their role requires. Sign-in is by a link sent by email or with a password. Passwords are stored only as hashes and nobody at Sér Tækni can see them.

Changes

We update this policy when our processing changes. The latest version is always on this page.