How we handle your data on the Rondva waitlist

Rondva is built and operated by Vitvélar ehf. (company registration no. 591206-1090), Hjálmholt 2, 105 Reykjavík, Iceland. Vitvélar is the data controller for the information described on this page.

Questions about privacy go to hjalti@vitvelar.is.

Right now rondva.com is a pre-launch site with a waitlist. The only personal data we collect here is what you type into the waitlist form. The Rondva app is not yet available to the public; before it is, a separate privacy policy for the app will be published at this address and linked from the app.

• Email address — so we can write to you when Rondva is ready for you to try.
• Country you inspect in — so we know which markets to open first and which to contact first.
• Technical details of the submission— the time, your browser's user-agent string, and a one-way hash of your IP address. We use these only to detect abuse and duplicate submissions. The hash cannot be turned back into your IP address.

The legal basis is our legitimate interest in building a product with the people who asked to hear about it (GDPR art. 6(1)(f)), and, for the email we send you, your request to be contacted. We do not use the list for a newsletter, a drip campaign, advertising, or profiling, and we do not sell or share it.

We keep the list small and the processors few:

• Supabase — database hosting in the European Union (AWS, Ireland). This is where the waitlist entries live.
• Vercel — hosts this website and the form endpoint. Vercel processes the request that carries your submission.
• Resend — sends a one-line internal notification to us when someone joins, and later the email telling you Rondva is ready.

Each of these acts as a processor under a data-processing agreement. Where a processor is outside the EEA, transfers rest on the EU Standard Contractual Clauses.

Until Rondva launches and we have written to you, or until you ask us to remove you — whichever comes first. If Rondva does not launch, the list is deleted. Entries that never lead to an account are deleted no later than 24 months after they were submitted.

You can ask to see what we hold about you, have it corrected or deleted, restrict or object to its use, or receive a copy in a portable format. To leave the list, reply to any email from us or write to hjalti@vitvelar.is; we remove you within a few days and confirm.

If you think we have handled your data incorrectly you can complain to the Icelandic Data Protection Authority (Persónuvernd, personuvernd.is) or to the supervisory authority in your own country.

One essential cookie remembers your cookie choice. Analytics (Google Analytics 4) and marketing cookies (Meta and Google ad measurement) are set only if you accept them in the banner, and you can withdraw that at any time. We also use Vercel Web Analytics, which sets no cookies and stores no identifier about you. Details, names and lifetimes are on the cookie page.

We will update this page when the app launches or when our processors change. The date below is the last revision.