Data Processors

Overview of the third parties Spaugur uses to process personal data in accordance with GDPR and Icelandic data protection legislation.

Spaugur ehf. uses the following third parties in operating its services. These parties may have access to customer personal data to the extent necessary to provide the service. All these data processors have committed to handling data in accordance with GDPR and applicable data protection laws.

Cloudflare, Inc.

United States

Security and web services

CDN, DDoS protection, DNS service, human verification (Turnstile) on the website, and sending automated service emails

Web analytics

Website usage analytics to measure visits and improve the service. The data is processed and stored in a data center within the EU

Payments

Payment processing and card handling in accordance with PCI DSS

Payment processing

Payment processing and settlement of transactions with Spaugur

Microsoft Corporation

Ireland and United States

Email and office solutions

Microsoft 365 for email, document storage, and internal staff communication

Spaugur updates this list whenever changes occur among its data processors. Last updated in July 2026. Questions can be sent to spaugur@spaugur.is.