Legal
Privacy Policy
Last updated 21 September 2026
Who we are
Dúfan Apartments, Þjóðólfsvegur 14, 415 Bolungarvík, Iceland, operates this website and manages your booking. You can reach us via our contact page. Contact page
What we collect
When you make a booking we collect your name, email, phone number, stay dates, and guest count. For company invoicing we also collect the payer organization name, kennitala, contact details and reference, and verify the organization through Skatturinn. Card payments are processed by Teya — we never see or store your full card details. Your reservation is stored in Cloudbeds.
How we use it
We use your information only to process and manage your reservation, take payment, communicate with you about your stay, and meet our legal and accounting obligations. We do not sell your data or use it for third-party advertising.
Who we share it with
We share the minimum necessary with the services that run the booking: Cloudbeds (property management) and Teya (payments). These providers process data on our behalf under their own privacy and security terms.
Cookies
We use a single essential cookie to keep you signed in to your booking portal. It is not used for tracking or advertising.
Retention & your rights
We keep your booking information for as long as needed to provide your stay and to meet legal and accounting requirements, then delete it. Under the GDPR you may request access to, correction of, or deletion of your personal data — just contact us.