Skip to Content

Privacy Policy and Terms of Business

Snakk.is | Iðnmark ehf.
Version 29 October 2026

This English translation of the terms and the privacy policy is provided for convenience only. In the event of any discrepancy between the versions, the Icelandic version prevails.

General terms of business

Iðnmark ehf., company ID (kennitala) 410288-1259, Gjótuhraun 5, 220 Hafnarfjörður, Iceland (the "Company"), sells products to companies and business operators, including through its web shop available at www.snakk.is (the "Web Shop"). These terms apply to all business, including orders, between the Company and the customer, including business conducted through the Web Shop. In these terms, "customer" means the party placing an order for products. Only legal entities can be customers within the meaning of these terms.

Orders and delivery

Once a customer has placed and confirmed an order for products from the Company, a contract is formed between the Company and the customer for the purchase of the products covered by the order. The customer cannot cancel the products without the Company's consent. The contract is, however, subject to the ordered products being in stock. The Company therefore reserves the right to withdraw from an order, change an order, offer a substitute product or offer another solution if a product that has been ordered is not in stock.

The Company endeavours to deliver orders as quickly as possible but does not guarantee a specific delivery time. The customer is notified when an order is ready for collection. Orders are handed over at the Company's premises at Gjótuhraun 5, 220 Hafnarfjörður during normal opening hours, unless the customer has requested that they be shipped.

Responsibility for and risk in purchased products pass from the Company to the customer when the customer has taken delivery of the products at the Company's premises, or when they have been handed over to a carrier if the customer has requested shipping. The Company therefore bears no liability for any damage to products after that point, for example in transit or if shipments are lost in transit.

If products are not collected or received within seven days of the customer being notified that the order is ready for collection, responsibility for and risk in the products pass to the customer from that point, regardless of whether delivery has taken place.

Prices and payment terms

All prices shown on the website are in Icelandic krónur and exclude VAT. If the customer requests that products be shipped, shipping costs are calculated separately and depend on the size of the order and the delivery location.

The Company reserves the right to change its prices as needed at any time, without specific notice to the customer. Such changes do not, however, affect orders that have already been placed.

Once an order has been placed, the customer receives an invoice from the Company. Payment terms are as agreed with each customer and are stated on the invoice. The due date and final due date are also stated on the invoice. The Company may require full payment for the products before they are handed over.

Title to the products remains with the Company until payment for the products has been made in full.

If an invoice is not paid by its final due date, the customer shall pay penalty interest in accordance with Chapter III of Act No. 38/2001 on Interest and Price Indexation. If the customer has not paid an invoice within 30 days after the final due date, the Company may terminate the contract with the customer for the products.

Errors and changes

Information about products, prices and delivery may in exceptional cases contain errors or inaccuracies.

In such cases the Company reserves the right to withdraw from orders and/or correct such errors without liability. Customers will be informed of such changes as soon as possible.

Returns, complaints and liability

Customers are encouraged to inspect products on receipt and to report defects, damage or incorrect deliveries as soon as possible. If no such notification is received within 7 days of the products being handed over to the customer, or to the carrier if the customer requested shipping, the customer cannot rely on defects, damage and/or incorrect deliveries.

Returns are subject to the Company's approval and are only considered for unopened and undamaged products with sufficient remaining shelf life.

If a notification of a defect, damage or incorrect delivery is received within the time limit under this clause and the notification is well founded, the Company reserves the right to decide which remedy will be applied, such as repair, refund or delivery of a replacement product. The Company's liability for defects, damage and incorrect delivery of products is limited to what is set out in this clause.

Under no circumstances shall the Company be liable for the customer's indirect or consequential loss, including loss of business, loss of profit or goodwill, or the customer's breach of a contract with a third party. Should the Company become liable for damages, the Company's liability shall be limited to ISK 1,200,000.

Force majeure

If the Company is unable to fulfil its obligations to the customer due to force majeure, the Company is released from all its obligations for as long as the force majeure event continues, and the customer is not entitled to exercise remedies for breach against the Company, including claims for refunds, discounts, damages or termination.

Force majeure means an event or circumstances beyond the Company's control, of such a nature that the Company could not have overcome them by reasonable means. Without limiting the general scope of the foregoing, force majeure includes war, insurrection, sabotage, riots, epidemics, natural disasters, government action such as in the field of currency and trade, embargoes, general transport disruptions, breakdowns of production equipment, cyber attacks of any kind, force majeure events in dealings with subcontractors and suppliers, and any similar events that disrupt the Company's performance, including where the Company's suppliers or service providers are unable to fulfil their obligations to the Company due to force majeure, with the result that the Company cannot fulfil its obligations to the customer. If a force majeure event continues for 30 consecutive days or longer, the Company may terminate or cancel the contract with the customer without notice and without incurring liability for damages.

Privacy

The Company is committed to ensuring that all processing of personal data complies with applicable data protection law. The Company acts as a data controller within the meaning of data protection law with respect to the processing of personal data of contact persons acting on behalf of companies and other legal entities doing business with the Company. For the Company's processing of such data, please see the Company's Privacy Policy, which is available on the Company's website.

Governing law

These terms are governed by Icelandic law. Any dispute between the parties arising from these terms shall be resolved before the District Court of Reykjanes.

Changes to the terms

The Company reserves the right to change these terms. Changes will be announced on the Company's website with at least 30 days' notice.

Privacy Policy

Iðnmark ehf., company ID (kennitala) 410288-1259, Gjótuhraun 5, 220 Hafnarfjörður, Iceland (also referred to as the "Company", "Iðnmark" and "we"/"our") is committed to the security and confidentiality of personal data and processes it in accordance with Act No. 90/2018 on Data Protection and the Processing of Personal Data ("data protection law"). This Privacy Policy is intended to inform you about the Company's processing of personal data, including which personal data the Company collects and how it uses such personal data.

This Privacy Policy applies only when Iðnmark processes personal data as a data controller within the meaning of data protection law, for example when Iðnmark processes personal data of contact persons acting on behalf of legal entities doing business with the Company, or of applicants for positions with the Company.

What personal data do we process?

Iðnmark's processing of personal data depends on Iðnmark's relationship with the individuals to whom the data relate.

The following sections provide further information about which personal data Iðnmark processes in different contractual relationships, a description of the purposes of the processing and the legal basis on which the processing relies.

a) Customer contact persons

The Company's main activity is the sale of products to legal entities. If you act on behalf of such a customer of ours, for example in communications with the Company or when registering and submitting orders through the Company's web shop at www.snakk.is, or if you act on behalf of one of our suppliers, Iðnmark processes the following data about you on the basis of the Company's legitimate business interests:

  • Name
  • Email address and phone number
  • Name, company ID and address of the company the contact person represents
  • Workplace
  • Information about orders and business history, as applicable
  • Information about communications relating to orders and business

Iðnmark may also use contact details to send you information about new products and offers. That processing is based on the Company's legitimate business interests, but you can always opt out of such emails by clicking the link at the bottom of the relevant email.

b) Iðnmark's website

On Iðnmark's website www.snakk.is you can send us a message, whether a general enquiry or a suggestion. When you send us an enquiry and/or suggestion, we ask for the following personal data, on the basis of our legitimate interest in contacting you and, where applicable, on the basis of your request to enter into a contract:

  • name and email address
  • phone number
  • type and subject of the enquiry
  • where applicable, information about purchase history

The Web Shop (Odoo) records information about companies, including name, company ID and address, the name, email address and phone number of contact persons, login details, orders and order history, and communications relating to orders. The web server records IP address, visited URL and timestamp in access logs. The Web Shop's visitor tracking stores the country and which pages were viewed, but not IP addresses.

The Web Shop uses only strictly necessary cookies to ensure its functionality, including for login, the shopping cart and language selection. No third-party cookies are used, and no cookies are used for analytics or marketing.

c) Iðnmark's premises

The following personal data are collected about meeting visitors to Iðnmark's premises. That processing is based on our legitimate interests, as it is necessary for security and property protection purposes:

  • name and time of meeting
  • phone number
  • which employee is being visited

d) Job applications

If you apply for a job with the Company, we process the following personal data about you:

  • information contained in your CV and cover letter
  • information in the application form, including about work history and education
  • information provided in a job interview, as applicable

If you proceed in the recruitment process, we may, where applicable, request the following information:

  • criminal record certificate
  • information from references

Once a criminal record certificate has been reviewed, it is deleted. That processing is based on the Company's legitimate interest in ensuring the safety and integrity of the workplace.

Information about job applicants is primarily obtained from the applicants themselves, but may also be obtained from references and, where applicable, recruitment agencies, and is used to assess your suitability for the position in question. That processing is based on your request to enter into an employment contract.

The Company retains applicants' personal data for up to 6 months after the application is received by the Company, after which applications are securely deleted.

Retention and security

Except where otherwise specifically stated in this policy, Iðnmark does not retain personal data for longer than necessary for the purpose of the processing or as required by law, including accounting law. According to information from the operator of the Web Shop, information about customers, orders and invoices is retained for the duration of the business relationship and thereafter for as long as accounting law requires, generally seven years. Web server access logs are kept for 14 days. Visitor tracking records of visitors who are not logged in are deleted automatically after 60 days of inactivity. Encrypted backups of the Web Shop are taken daily and retained for up to six months, so deleted data disappear from the backups within that period.

Appropriate technical and organisational measures are taken to protect personal data against unauthorised access, loss and misuse, having regard to the nature and scope of the processing. Examples of such measures are access controls for the systems in which data are stored and specific processes and procedures relating to data and information security.

Disclosure of data

The Web Shop (Odoo) is operated for Iðnmark by Vitus lausnir / Eno and hosted by a service provider within the European Economic Area (EEA). Basic customer information and invoices are also recorded in the DK accounting system. The customer register is transferred from there to the Web Shop and orders are transferred back to DK, but that transfer is currently not automatic. Microsoft 365 is used for email, including order confirmations and communications with customers. Backups of the Web Shop are stored encrypted with a hosting provider within the EEA. The location of processing and possible data transfers relating to other service systems, including Microsoft 365, are not confirmed in this information.

The Company may disclose personal data to third parties that provide the Company with services involving the processing of personal data as part of the Company's operations. Examples of such parties are external advisers, such as auditors, lawyers and audit firms, as well as parties providing the Company with accounting services and IT and telecommunications services, for example in connection with the operation of our Web Shop. Disclosure of personal data to such parties is based on the Company's legitimate interest in outsourcing certain tasks to external parties.

In addition, the Company may disclose personal data to supervisory authorities when required to do so by law, administrative order or court order. An example of such disclosure is providing personal data to the tax authorities or the police on the basis of a court order or a lawful request.

These parties may be located outside Iceland. The Company will, however, not transfer personal data outside the European Economic Area unless permitted under applicable data protection legislation, such as on the basis of standard contractual clauses, your consent or a notice from the Icelandic Data Protection Authority on countries that provide an adequate level of protection for personal data.

Rights of individuals

You have the right to access and, in certain cases, obtain a copy of the personal data we process about you, as well as information about the processing.

In certain circumstances you may also be entitled to request that personal data about you be deleted or that their processing be restricted. You also have the right to have your personal data rectified if they are inaccurate or unreliable. It is therefore important that you notify us of any changes to the personal data you have provided to us, when applicable.

In addition, you may have the right to receive a copy of the data you have provided to us in a machine-readable format, or to have us transmit it directly to a third party.

When we process your personal data on the basis of our legitimate interests, you may object to that processing. When we process your data on the basis of consent, you also always have the right to withdraw that consent.

The above rights are, however, not absolute. Laws or regulations may permit or require the Company to refuse your request to exercise those rights. Your right to object to the processing of your personal data for direct marketing purposes is, however, absolute.

If you wish to contact the Icelandic Data Protection Authority (Persónuvernd) directly, or if a dispute arises concerning the handling of your personal data, you are always entitled to lodge a complaint with the Data Protection Authority. This can be done by sending an email to postur@personuvernd.is or by post to:

Persónuvernd
Laugavegur 166, 4th floor
105 Reykjavík, Iceland

Contact

If you wish to exercise the rights described in this policy, or if you have any questions about how we process your personal data, please contact the Company by email at snakk@snakk.is or by phone at +354 565 2555. The Company will endeavour to answer enquiries and guide you regarding your rights under this Privacy Policy.

Changes

The Company may from time to time make changes to this Privacy Policy in line with changes to applicable laws or regulations or changes in how the Company processes personal data. Changes to the policy take effect upon publication on the Company's website, www.snakk.is.

Version: 29 October 2026.