​According to Act No. 90/2018 on Data Protection and the Processing of Personal Data Effective from: 22/04/2026 Skín og Bón ehf., Kt; 660225‑1020, Dalshraun 8, 220 Hafnarfjörður (“the company”, “we”, “us”), processes personal data in accordance with Act No. 90/2018 and the EU General Data Protection Regulation (GDPR). This policy applies to our on‑site services, our website, and our mobile app.

​

1. Data Controller

Skín og Bón ehf.
Dalshraun 8
220 Hafnarfjörður
Email: skin@skin.is

​

2. Personal Data We Process

We only process information necessary for our operations, services, and app usage.

​

2.1 General Information

• Name

• Phone number

• Email

• National ID number (if used for invoicing or business transactions)

• Booking and communication history

• Payment information (we do not store card numbers)

​

2.2 Vehicle Information

• License plate number

• Vehicle type and service history

• Automatic number plate recognition (ANPR) upon arrival and departure

• Arrival and departure timestamps

​

2.3 Information Collected in the App

• User account (login, encrypted password)

• User settings

• Purchase history and service usage

• Location data (if the user grants permission)

• Technical data: device type, operating system, IP address, app version

• Notification settings (push notifications)

​

2.4 Video Surveillance

We use security cameras on the premises to ensure safety, protect property, and support operations. Cameras may record:

• Images of individuals

• Images of vehicles

• License plates

• Vehicle condition, e.g., defects, dents, scratches, unauthorized items or equipment, according to Skín og Bón ehf. terms and conditions

​

3. Purpose of Processing

We process personal data to:

• Provide and perform car wash and related services

• Operate and improve the app and digital services

• Contact customers regarding bookings or services

• Authenticate users in the app

• Ensure security and prevent damage

• Fulfill legal obligations, e.g., retention of accounting records

• Send offers and marketing materials (if consent is given)

​

4. Legal Basis for Processing

Processing is based on:

• Contract – when you use the app or purchase services

• Legitimate interests – e.g., security cameras, ANPR, service improvements

• Legal obligation – e.g., retention of accounting records

• Consent – e.g., marketing, location services, app notifications

​

5. Retention Period

We retain personal data only as long as necessary:

• Accounting records

• Vehicle service history

• App user data

• Video recordings

• ANPR data

• Technical app information

​

6. Sharing of Personal Data

We only share data when necessary:

• With service providers working on our behalf (e.g., app development, payment processing, accounting, technical partners)

• With public authorities when required by law

We never sell personal data.

​

7. Information Security

We use appropriate technical and organizational measures to protect data from unauthorized access, alteration, loss, or disclosure.
This includes, especially for the app:

• Encrypted communication

• Secure authentication

• Regular updates

• Access controls

​

8. Your Rights

You have the right to:

• Access your personal data

• Request correction of inaccurate data

• Request deletion when permitted by law

• Restrict processing

• Object to processing based on legitimate interests

• Receive your data in a portable format

• Withdraw consent at any time

Requests may be sent to: skin@skin.is

​

9. Complaints

If you believe processing violates Act No. 90/2018, you may contact us or:

The Icelandic Data Protection Authority (Persónuvernd)
www.personuvernd.is

​

10. Changes to This Policy

We reserve the right to update this policy in line with changes to laws or company practices. Updates take effect upon publication on our website and in the app.