Privacy policy

ESJA Legal ehf., reg. no. 470909-2180, operator of the websites esl.is and tjonid.is, is the controller of personal data on both websites. This policy is based on Icelandic Act No. 90/2018 and Regulation (EU) 2016/679 (GDPR).

Personal data is processed only on the basis of a legal authorisation, a power of attorney or a contract, and for the purpose of providing the service the client has requested. It is kept secure, is not disclosed except with clear authorisation, by law or by court order, and is deleted as soon as permitted or required.

In accident and personal injury cases, health data is processed when necessary for the establishment, exercise or defence of legal claims.

Case files are kept while the case is ongoing and for as long as necessary in the client's interests, because of limitation periods or because of a legal obligation. Accounting records are kept for seven years.

Website chat

esl.is offers a chat answered by artificial intelligence (Claude by Anthropic). The chat answers general questions about the firm and takes enquiries, but does not give legal advice. Please do not enter ID numbers, health information or other sensitive information in the chat.

To generate replies, the conversation is sent through ESJA Legal's intermediary server, hosted by Cloudflare, to Anthropic. ESJA Legal does not store the conversation, on the intermediary server or elsewhere, and it disappears when you close the browser window. Anthropic processes the content as ESJA Legal's processor and deletes it within 30 days, unless the law requires longer retention or the content is flagged as violating Anthropic's usage policy, in which case it may be kept for up to two years.

If you press “Send enquiry”, your name, email, phone number, case category and a short description are sent to ESJA Legal at esl@esl.is. This information is processed at your request so that the firm can contact you and offer a consultation. It is treated confidentially like other communications with the firm and deleted when no longer needed. Nothing from the chat reaches the firm unless you press the button yourself.

Anthropic and Cloudflare are US companies. Transfers to Anthropic are based on the European Commission's standard contractual clauses. Transfers to Cloudflare are based on the EU–U.S. Data Privacy Framework and, as a fallback, on standard contractual clauses.

Requests for access are handled at Hlíðarfótur 15, 102 Reykjavík, on presentation of valid photo identification. The person responsible for this policy is Ómar R. Valdimarsson, omar@esl.is, tel. +354 517 3100. Complaints may be submitted to the Icelandic Data Protection Authority (Persónuvernd).

This policy was adopted on 15 July 2018 and last updated on 12 November 2026.