Privacy Policy
Tungl Media ehf.
Robert Arnar
Reykjavík, Iceland
Website: robertarnar.is
Last updated: 2 November 2026
This Privacy Policy explains how Tungl Media ehf. ("we", "us" or "our"), operating robertarnar.is, collects, processes, uses and protects personal information.
We are committed to handling personal information responsibly and in accordance with applicable data protection legislation, including the General Data Protection Regulation (GDPR) and the Icelandic Act on Data Protection and the Processing of Personal Data No. 90/2018.
1. Data Controller & Contact Information
The data controller responsible for processing personal information through this website and in connection with our business activities is:
Tungl Media ehf.
Reykjavík, Iceland
Email: robertarnar@robertarnar.com
For any questions or requests concerning personal information or this Privacy Policy, please contact us using the email address above.
2. Personal Information We Collect
The type of personal information we collect depends on how you interact with our website and services.
2.1 General Enquiries & Contact
When you contact us by email or through our website, we may collect:
Name and contact details.
Email address and telephone number.
Company or organisation name.
Project descriptions, requirements and other information you choose to provide.
Correspondence and communication history.
2.2 Client Projects & Bookings
When you commission photography or video production services, we may collect information necessary to manage and deliver the project, including:
Client and business contact information.
Billing and invoicing details.
Project requirements and production briefs.
Shoot dates, locations and scheduling information.
Communication, approvals and project-related correspondence.
Other information necessary to fulfil contractual obligations.
2.3 Website Usage & Technical Information
When visiting robertarnar.is, certain technical information may be collected automatically through our website platform, Squarespace, and other services used to operate the website.
This may include:
IP address.
Browser type and device information.
Operating system.
Pages visited and general website interactions.
Approximate geographical location.
Referral sources and technical usage information.
This information may be used to maintain website functionality, monitor performance, improve user experience and identify technical issues.
Where analytics or non-essential cookies require consent, they will only be used in accordance with applicable consent requirements.
3. How We Use Personal Information
Personal information is processed only where necessary for legitimate business purposes and in accordance with applicable data protection legislation.
We may use your information to:
Respond to enquiries and communication requests.
Prepare project quotations and proposals.
Establish and manage client relationships.
Plan, coordinate and deliver photography and video projects.
Manage bookings, payments and invoicing.
Maintain business and accounting records.
Communicate important project updates.
Maintain website functionality and security.
Analyse website performance and improve our services.
Meet legal, regulatory and contractual obligations.
We do not sell personal information to third parties.
4. Legal Basis for Processing
We process personal information under one or more of the following legal bases established under the GDPR:
Contractual necessity: Processing required to provide requested services, fulfil agreements or take steps at your request before entering into a contract.
Legal obligations: Processing necessary to comply with applicable legal requirements, including accounting, tax and record-keeping obligations.
Legitimate interests: Processing necessary for legitimate business interests, such as responding to business enquiries, maintaining website security, managing client relationships and improving our services, provided these interests do not override your fundamental rights and freedoms.
Consent: Where required, we rely on your consent for specific activities, such as optional cookies, certain analytics technologies or direct marketing.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
5. Sharing & Third-Party Service Providers
We do not sell, rent or trade personal information.
However, certain information may be shared with trusted third-party service providers where necessary to operate our business and provide our services.
These may include:
Squarespace: Website hosting, website functionality and related technical services.
Email providers: Managing and responding to business correspondence.
Accounting and invoicing providers: Processing invoices, payments and required financial records.
Payment providers: Processing transactions where applicable.
Analytics and technical service providers: Understanding website performance and maintaining functionality, where used.
These providers may process personal information on our behalf or act as independent controllers, depending on the service they provide.
Where a service provider processes personal information on our behalf, appropriate contractual and data protection arrangements will be maintained.
6. International Data Transfers
Some third-party service providers may process or store personal information outside Iceland or the European Economic Area (EEA).
Where personal information is transferred internationally, we will ensure that the transfer complies with applicable data protection legislation.
Depending on the destination, this may involve an applicable adequacy decision, approved Standard Contractual Clauses or another legally recognised transfer mechanism.
Further information about specific international transfers and applicable safeguards may be requested by contacting us.
7. Data Retention
We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law.
Our general retention practices are:
General enquiries: Enquiries that do not result in a booking are generally retained for up to 12 months before deletion, unless further retention is necessary for legitimate business or legal purposes.
Client and project information: Project-related information and correspondence are retained for as long as necessary to manage the client relationship, fulfil contractual obligations and address potential legal claims.
Accounting and financial records: Accounting documents, invoices and supporting financial records are retained in accordance with Icelandic accounting legislation, generally for seven years from the end of the relevant financial year.
Website and technical data: Technical and analytics information is retained according to the applicable platform settings, service provider retention policies and the purposes for which it was collected.
When personal information is no longer required, it will be securely deleted or anonymised where appropriate.
8. Photography, Video & Personal Images
As a photography and video production business, we may capture photographs and video footage containing identifiable individuals during commissioned projects.
The handling, use, storage and publication of such materials will depend on the nature of the project, the applicable client agreement and relevant data protection and privacy requirements.
Depending on the circumstances, Tungl Media ehf. may act as a data controller, joint controller or data processor in relation to personal information captured during a production.
Where we act on behalf of a client, the processing arrangements will be governed by the relevant agreement and documented instructions.
If you appear in photographs or video produced by us and have questions or concerns regarding the handling or use of your personal information, you may contact us at robertarnar@robertarnar.com.
9. Cookies & Website Technologies
Our website is operated using Squarespace and may use cookies and similar technologies to support website functionality, security and performance.
These technologies may include:
Essential cookies required for website functionality.
Performance and analytics cookies, where enabled.
Third-party cookies associated with embedded content or external services, where applicable.
Non-essential cookies and tracking technologies will only be used where the required consent has been obtained.
You can manage or withdraw your cookie preferences through the available cookie settings on the website or through your browser settings.
Disabling certain cookies may affect some website functionality.
10. Data Security
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
These measures may include access restrictions, secure service providers and appropriate administrative safeguards.
However, no method of electronic storage or transmission over the internet can be guaranteed to be completely secure.
11. Your Data Protection Rights
Under applicable data protection legislation, you may have the right to:
Access: Request a copy of the personal information we hold about you.
Rectification: Request correction of inaccurate or incomplete information.
Erasure: Request deletion of your personal information where applicable.
Restriction: Request restrictions on how your information is processed.
Objection: Object to certain types of processing, including processing based on legitimate interests.
Data portability: Request your personal information in a structured, commonly used and machine-readable format, where applicable.
Withdraw consent: Withdraw previously provided consent where processing is based on consent.
These rights are subject to applicable legal conditions and exceptions. For example, certain information may need to be retained to comply with legal obligations.
To exercise your rights, contact:
We may request reasonable information to verify your identity before responding to a request.
12. Complaints & Supervisory Authority
If you have concerns about how your personal information is handled, we encourage you to contact us first so that we can address the matter.
You also have the right to lodge a complaint with the Icelandic Data Protection Authority (Persónuvernd).
Website: https://www.personuvernd.is
The authority supervises compliance with Icelandic data protection legislation and the GDPR.
13. Changes to This Privacy Policy
Tungl Media ehf. reserves the right to update or amend this Privacy Policy when necessary to reflect changes in our business operations, website functionality or applicable legal requirements.
Any revised version will be published on this page together with an updated revision date.
We encourage visitors and clients to review this policy periodically.
14. Contact Information
For questions, requests or concerns regarding this Privacy Policy or the processing of personal information, please contact:
Tungl Media ehf.
Robert Arnar
Reykjavík, Iceland
Email: robertarnar@robertarnar.com
© 2026 Tungl Media ehf. All rights reserved.