About us
Works. ("Works", "we" or "us") is an automation agency based in Iceland. We are responsible for the processing of personal data collected through works.is and our related services. You can contact us at info@works.is.
What data do we collect?
Data you provide
- Email address:when you request a free audit report or submit the contact form.
- Website URL:when you submit a site for analysis through our audit tool.
- Name and message:when you contact us through the contact form.
Data collected automatically
- IP address and browser information:standard web server logs, retained briefly.
- Usage data:pages visited and interactions, via Google Analytics (only if you accept cookies).
Why do we collect this data?
- To deliver the service:we send audit reports to the email address provided.
- To follow up as a potential client:if you provide a business email we may reach out to introduce our services. This is based on legitimate interests (GDPR Art. 6(1)(f)).
- To improve the service:usage data helps us understand what works and what doesn't.
- To respond to enquiries:when you contact us directly.
Legal basis (GDPR)
- Consent (Art. 6(1)(a)):analytics and marketing cookies.
- Legitimate interests (Art. 6(1)(f)):follow-up with potential clients and service improvement.
- Contract (Art. 6(1)(b)):processing necessary to deliver a requested service.
How long do we keep your data?
- Audit requests (URL + email):stored for 12 months in the audit tool database, then automatically deleted.
- Contact form submissions:retained while a service relationship exists or until you request deletion.
- Marketing lists:until you unsubscribe.
Third parties who receive data
We share data with the following third parties only for the purposes described above:
- Brevo:email delivery (audit reports and communications). Brevo Privacy Policy.
- Cloudflare:web hosting and security. Cloudflare Privacy Policy.
- Google Analytics:website analytics (only with your consent). Google Privacy Policy.
- Meta (Facebook/Instagram):advertising measurement (only with your consent). Meta Privacy Policy.
We never sell your personal data to third parties.
Client data
When Works processes data on behalf of a client as part of a service agreement (e.g. contact lists, messages), we act as a data processor on behalf of the client, who is the data controller. The client owns their data in full. Works owns the automation processes and technical infrastructure. Upon termination of a contract, access to automation processes is revoked and client data can be provided or deleted on request.
Your rights
Under GDPR you have the right to:
- Confirm whether we process data about you and access that data
- Request correction of inaccurate or incomplete data
- Request deletion of your data (right to erasure)
- Object to processing based on legitimate interests
- Request restriction of processing
- Receive your data in a portable format
- Withdraw consent at any time, without affecting the lawfulness of prior processing
To exercise your rights contact us at info@works.is. We will respond within 30 days.
Security
We use HTTPS/TLS on all communications and data is stored on secure servers with GDPR-compliant providers. No system can be 100% secure and we cannot guarantee absolute security.
Changes to this policy
We may update this privacy policy from time to time. For material changes we will post a notice on the website. The date at the top of this page indicates when it was last updated.
Questions?
Contact us at info@works.is or via the contact form.
You can also lodge a complaint with the Icelandic Data Protection Authority: personuvernd.is.