Privacy Policy

Thank you for choosing The Grumpy Whale. Your privacy is a priority for us, and we are dedicated to ensuring the security and confidentiality of your information. This Privacy Policy outlines the details of how we collect, use, and safeguard your personal information.

1. The Grumpy Whale

This Privacy Policy applies to The Grumpy Whale ehf., a company registered in Iceland under the ID number 6112200650 with its main office located at Bitra, 801, Selfoss. In this policy, “we” refers to The Grumpy Whale, and it addresses the collection and processing of personal information concerning guests, customers, potential customers, and website visitors. As a data controller, The Grumpy Whale is committed to maintaining the privacy of your data.

2. Information Collection and Purposes

We collect various types of personal information to enhance our services and products. The information may include:

Identification and contact information (e.g., name, date of birth, ID number, email address).
Booking and stay details.
Payment information (credit card number, expiration date, CVC code).
Accommodation and meal preferences, travel arrangements.
Photos (if requested).
Health requirements or additional assistance information (if provided by you).
Booking history, communication, and correspondence.
Customer feedback or complaints.
We use this information for purposes such as processing bookings, personalizing stays, improving services, providing updates, and responding to inquiries. Some processing is based on contractual requirements, consent, legitimate interests, or legal obligations. For example, health information and photos require your consent.

3. Online Shop

When using our Icelandic online shop, we collect information for processing orders. This includes identification and contact information, payment details, shipping preferences, and purchase history. The processing is based on contractual requirements, consent, or legal obligations.

4. Inquiries

Members of The Grumpy Whale newsletter may receive newsletters and promotional materials based on their consent. Inquiries, requests, complaints, or feedback are processed with your consent or based on legitimate interests.

5. Analysis and Market Research

Pseudonymized or anonymized information may be used for analysis and market research, aligning with our legitimate interests in improving services and products.

6. Website Usage

Our website uses cookies and tools like Google Analytics for analysis and tailored content. You can manage cookie preferences, and details are provided in our Cookie Policy.

7. Data Preservation and Sharing

Your personal information is retained as needed for its original purpose or legal compliance. We share data with data processors, third parties, and within the The Grumpy Whale organization, ensuring confidentiality. Your information may be disclosed when required by law, court orders, or for legal rights protection.

8. Security Measures

We prioritize the security of your information. Payment transactions are securely handled, our website uses SSL certificates, and personal data is managed by compliant data processors. In case of a breach, we promptly notify the relevant authorities and you, if necessary.

9. Your Rights

You have rights to access, correct, restrict processing, object, and request erasure or data transfer. Consent withdrawal is applicable where processing is based on consent. For requests or questions, contact us at

10. Links to other websites
The Grumpy Whale contains links to other websites. This privacy policy only applies to The Grumpy Whale, and doesn’t cover other websites/ organizations services and transactions that we link to. These services have their own terms and conditions and privacy policies.

11. Following a link to another website
If you go to another website from this one, read the privacy policy on that website to find out what it does with your information.

12. Minors

We do not intentionally collect information from minors under 16. If provided, please contact us for prompt removal.

13. Privacy Policy Amendments

This policy may be updated to reflect changes in data processing. Changes are effective immediately and applicable to new bookings, purchases, inquiries, and website visits.

14. Complaints

If you disagree with our data processing, you can lodge a complaint with the Icelandic Data Protection Authority or the relevant authority in your EEA member state.