Skip to content

Legal

Privacy Policy

What we collect when you order, contact us or sign up, and what you can do about it.

Last updated 2026-08-23

  1. 1.Who controls your data

    Next Car ehf, Njarðarbraut 3L, 260 Reykjanesbær, Iceland (kennitala 430626-0940) is the data controller for this site.

    A dedicated data-protection contact has not been named yet. Until then, reach us through the contact form at /contact.

  2. 2.What data we collect

    • Contact form: name, e-mail, phone (optional), and your message.
    • Order data: delivery address, invoice details, order and purchase history.
    • Payment data: processed by Rapyd, our payment provider. NextCar does not store your full card details.
    • Newsletter: e-mail address, consent, and the time you signed up.
    • Technical data and cookies: see our Cookie Policy.

  3. 3.Legal basis for processing (GDPR Art. 6)

    • Performance of a contract: processing your order, arranging delivery, handling a warranty claim.
    • Consent: the newsletter and any marketing communication.
    • Legitimate interest: keeping the site secure and working correctly.

  4. 4.How we use your data

    To fulfil and ship your order, to answer a service or workshop booking, to keep you updated on your container’s schedule, and, only with your consent, to send marketing e-mail.

  5. 5.Sharing with third parties

    • Rapyd: processes your payment.
    • Resend: sends order confirmations and account e-mail.
    • Vercel: hosts the site.
    • Supabase: hosts the database behind the site and shop.
    • Our freight partner in Reda, Poland: consolidates and ships the weekly container.

    [Do uzupełnienia]Pelna lista dostawcow IT/analityki (np. narzedzie do newslettera, jesli inne niz Resend) zostanie uzupelniona, gdy zostana faktycznie wybrani. Nie wymyslamy tu nazw uslug, ktorych NextCar nie uzywa.

  6. 6.International transfers

    [Do potwierdzenia z prawnikiem]Czy dane opuszczaja EOG zalezy od regionu hostingu wybranego w Vercel/Supabase: do potwierdzenia z prawnikiem przy konfiguracji infrastruktury, przed uruchomieniem produkcji.

  7. 7.How long we keep your data

    [Do potwierdzenia z prawnikiem]Dokladne okresy przechowywania danych zamowien (wymogi islandzkiej ksiegowosci) oraz moment usuniecia danych marketingowych po wycofaniu zgody wymagaja potwierdzenia z prawnikiem/ksiegowa.

  8. 8.Your rights under GDPR

    You can ask to access, correct, delete or limit the use of your data, ask for a copy in a portable format, object to processing, or withdraw consent at any time. Send your request through the contact form at /contact. We respond within one month, as required by GDPR.

  9. 9.Cookies & tracking

    See our full Cookie Policy at /cookies for categories and what each one does.

  10. 10.Security measures

    The site is served over encrypted connections (HTTPS), and access to order and customer data in the admin system is restricted to the people who run NextCar.

  11. 11.Complaints

    You can lodge a complaint with Persónuvernd, the Icelandic Data Protection Authority, if you believe your data has been mishandled.

  12. 12.Changes to this policy

    We may update this policy. The date at the top of this page shows when it was last changed.