How we collect, use, and protect your personal data.
This policy is a starting draft — review with legal counsel before launch.
Updated: 24 June 2026
This site is operated by Sterna Travel, a brand of GTS ehf., a tour operator based in Selfoss, Iceland. In this policy, “we”, “us”, and “Sterna” refer to GTS ehf. We are the data controller for the personal data described below. You can reach us at info@sternatravel.com or +354 480-1200.
We collect the information you give us when you book a tour or get in touch: your name, email address, phone number, and the details of your booking (tour, date, passenger count, pick-up location, and any special requests you add). When you submit our contact form we collect your name, email, and message. Payment card details are handled by our booking and payment provider and are never stored on our own servers. We also collect limited technical data automatically — such as your IP address, device and browser type, and pages viewed — through cookies and analytics, as described below.
We use your data to take and manage your booking, to send confirmations and pre-tour information, to respond to your enquiries, to process refunds and changes, to meet our legal and accounting obligations, and to understand and improve how our website performs. We rely on your contract with us as the legal basis for booking-related processing, on your consent for non-essential analytics cookies, and on our legitimate interest in running and securing the website for the rest.
We share data only with the service providers needed to run this site and fulfil your booking. These are: Bokún (booking and reservation system, used to process and manage your tour booking); Sanity (content management system that powers the site's content); Vercel (website hosting and content delivery); Sentry (error and performance monitoring, which may capture limited technical and diagnostic data); Vercel Analytics and Speed Insights (privacy-friendly traffic and performance measurement); and Google Analytics 4 (website analytics). Each of these providers processes data on our behalf under their own data-processing terms. Some are based outside the EEA, in which case transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses.
We use cookies and similar technologies to keep the site working and to measure how it is used. Essential cookies are needed for core functionality such as completing a booking. Analytics cookies — used by Google Analytics 4 and Vercel — help us see which pages and tours are popular so we can improve the experience. These stay off until you accept them in our cookie banner, and you can change your choice at any time via the “Cookie settings” link in the footer or by clearing cookies in your browser. Disabling essential cookies may affect booking.
We keep booking and transaction records for as long as needed to provide our service and to meet Icelandic accounting and tax requirements (generally seven years). Contact-form enquiries are kept only as long as needed to handle your request and a reasonable period afterwards. Analytics data is retained according to the providers' standard retention periods. When data is no longer needed, we delete or anonymise it.
Under the EU/EEA General Data Protection Regulation (GDPR), you have the right to access the personal data we hold about you, to have inaccurate data corrected, to request erasure, to object to or restrict certain processing, and to receive a copy of your data in a portable format. Where we rely on your consent, you can withdraw it at any time. You also have the right to lodge a complaint with the Icelandic Data Protection Authority (Persónuvernd).
To exercise any of your rights, email us at info@sternatravel.com with a short description of your request. We may need to confirm your identity before acting. We aim to respond within one month. You can also reach us by phone on +354 480-1200.
Questions about your data or this policy? Contact us at info@sternatravel.com / +354 480-1200.
