Privacy Policy

1. Introduction

BTR ehf ("BTR", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website at btr.is or engage with our services.

BTR ehf is an Icelandic company subject to the General Data Protection Regulation (GDPR) as implemented in Iceland through the EEA Agreement. We take our data protection obligations seriously.

2. Data Controller

The data controller responsible for your personal data is:

3. Personal Data We Collect

We collect personal data that you voluntarily provide to us when you:

• Submit a contact form or consultation request
• Send us an email
• Engage with us for advisory services

The types of personal data we may collect include:

• Contact Information: Name, email address, phone number, organization name, job title
• Communication Data: The content of your messages and inquiries
• Professional Information: Your role, organization, and the nature of your inquiry

4. How We Use Your Data

We use your personal data for the following purposes:

• To respond to inquiries: Processing and responding to your contact form submissions and emails
• To provide services: Delivering advisory and consulting services you have requested
• To communicate: Sending you information relevant to your inquiry or our ongoing engagement
• To comply with legal obligations: Meeting our legal and regulatory requirements

5. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Consent: When you submit a contact form, you consent to us processing your data to respond to your inquiry
• Contractual necessity: When processing is necessary to perform a contract with you or take pre-contractual steps at your request
• Legitimate interests: For our legitimate business interests, such as improving our services, provided these do not override your rights
• Legal obligation: When we must process data to comply with a legal requirement

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• Contact form submissions: Up to 2 years after our last communication, unless an ongoing relationship exists
• Client engagement data: For the duration of our engagement plus any period required by applicable law
• Legal and compliance records: As required by Icelandic and EU law

7. Data Sharing

We do not sell your personal data. We may share your data with:

• Service providers: Third parties who assist us in operating our website and conducting our business (e.g., email hosting, web hosting), under appropriate data protection agreements
• Legal requirements: When required by law, court order, or governmental authority
• Business transfers: In connection with any merger, acquisition, or sale of assets, with appropriate notice

8. International Data Transfers

As an Iceland-based company within the EEA, your data is primarily processed within the European Economic Area. If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

9. Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data in certain circumstances
• Right to restrict processing: Request that we limit how we use your data
• Right to data portability: Receive your data in a structured, commonly used format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at josh@btr.is.

10. Cookies and Tracking

Our website does not use tracking cookies or third-party analytics services. We may use essential cookies necessary for the basic functionality of the website.

11. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

12. Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Icelandic Data Protection Authority (Persónuvernd):

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: