Who is responsible
Lukas Dedic, kennitala 2910874699, Selfoss, Iceland is responsible for the personal data processed on this website. Contact: info@lukasdedic.com or 769 79 79.
What I collect
- Booking requests: name, company, email, phone, dates, passengers, vehicle, pickup place and the message you send.
- Company accounts in the booking portal: company name, contact person, email, phone, kennitala and invoice details. Passwords are only stored as a secure hash, never readable.
- Invoices: the details an invoice needs. Invoices are created and sent through Payday.
- Website visits: anonymous counting without cookies. I record which page was viewed, which website you came from, device type and browser language. Your IP address is not stored; instead a scrambled value that changes every day is used, so you can’t be followed from one day to the next.
- Security log: IP address, browser and time of logins (including failed ones), company registrations, booking requests and answers to offers.
- Emails to bus companies: when an offer was sent, whether its buttons were clicked and, if switched on, whether it was opened (using an invisible image), with IP address and browser.
Why, and on what legal basis
- To answer booking requests, make offers and carry out bookings (a contract, or steps before one).
- To invoice and keep accounts (legal obligation).
- To protect the website against misuse and break-ins, keep backups and understand how the site is used (legitimate interests).
- To offer my services to bus companies and see whether they answered (legitimate interests). You can ask me to stop at any time: the link at the bottom of every offer email does it in one step.
Cookies
No advertising or analytics cookies. Only necessary ones: the booking-portal login (ld_partner, 30 days), the admin login (only for me) and your language choice (locale, 1 year). Your light/dark choice is stored in your own browser.
Who processes data for me
- OVHcloud: web server hosting in Canada. Canada has an EU adequacy decision for personal data, which also applies in the EEA.
- Seznam.cz (Czech Republic): sending email.
- Payday ehf.: invoicing and payment collection.
- Your data is never sold or passed on to others for marketing.
How long I keep it
- Bookings and company accounts: for as long as we work together, or until you ask me to delete them.
- Invoices and accounting records: 7 years, as the Icelandic Bookkeeping Act (No. 145/1994) requires.
- IP addresses in the security log and email records: deleted automatically after 180 days.
- Anonymous visit counts: 400 days.
- Daily database backups: 14 days.
Your rights
You can ask to see the data I hold about you, have it corrected or deleted, restrict or object to its use (including direct marketing, at any time) and receive a copy. Send your request to info@lukasdedic.com. You can also complain to the Icelandic Data Protection Authority, Persónuvernd (personuvernd.is).