Home

Privacy policy

Last updated: October 15, 2026

We don't track you on this site and we don't use cookies. The only personal data we ask for is what you send us in an inquiry. This page explains what we do with it.

01

Data controller

The controller is Stormur Datacenters ehf. (Reg. no. 590224-0730), Neshagi 16, 107 Reykjavik, Iceland. Send privacy questions and requests to info@sdc.is.

02

This website

This site sets no cookies and uses no analytics or tracking tools.

If you choose a language with the language switch (IS/EN), your choice is saved in your browser's local storage under the key “preferred_lang”, so the site remembers it next time. It is never sent to us, and you can clear it in your browser settings. If you haven't chosen a language, the site checks your browser's language setting and time zone to decide whether to show the Icelandic version. This check runs in your browser and nothing is stored. If it points to Icelandic, your browser simply loads the Icelandic page.

Cloudflare, which hosts the site, processes your IP address and technical request data to deliver the site and protect it from attacks and abuse. This is based on our legitimate interest in running the site securely (GDPR Art. 6(1)(f) and the Icelandic Act No. 90/2018 on Data Protection and the Processing of Personal Data).

03

Inquiries

If you send us an inquiry through the contact form, we receive your name, email address and message, as well as your phone number and company if you provide them, and whether you used the English or Icelandic version of the site. We handle inquiries sent by email in the same way.

We use this information to reply and follow up and, if your inquiry concerns our services, to prepare a quote or a contract. The legal basis is our legitimate interest in answering inquiries and preparing quotes (GDPR Art. 6(1)(f)). Where the contract would be with you personally, the processing is also necessary to take steps at your request before entering into a contract (Art. 6(1)(b)).

You don't have to give us this information, but we can't reply without your name, email address and message.

04

Processors and transfers outside the EEA

We use three processors, which handle the information only on our instructions: Cloudflare, which hosts this site and receives form submissions; Resend, which delivers your inquiry to us by email; and Microsoft, which hosts our email (Microsoft 365).

Cloudflare, Resend and Microsoft are US companies, so your information may be transferred outside the European Economic Area. Such transfers rely either on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework or on the Commission's standard contractual clauses. You can ask us for more information about these safeguards, or for a copy of them, at info@sdc.is.

We never sell or rent your information or share it with anyone for marketing. We pass it only to the processors named here, or to others where the law requires us to.

05

Retention

We keep personal data only as long as we need it for the purposes described above. Inquiries that don't lead to business are deleted once the conversation has ended and there is no longer a reason to follow up. If an inquiry leads to a contract, we keep the correspondence for as long as the business relationship lasts, and after that only as long as the law requires or as needed to establish, exercise or defend legal claims.

06

Your rights

You have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict its processing and to receive it in a machine-readable format. You can also object at any time to processing based on our legitimate interests. Send your request to info@sdc.is and we will reply within the time limits set by law, normally within one month.

If you believe we are mishandling your data, you can complain to the Icelandic Data Protection Authority, Persónuvernd (www.personuvernd.is).

07

Scope and changes

This policy covers the sdc.is website and inquiries you send us through the contact form or by email. It does not cover personal data handled as part of our colocation services; the service contract with each customer sets out how that data is handled. If we change this policy, we'll update the date at the top of this page.