Bedroom Community / Reykjavík / 2006–2026Privacy & Data Protection
Privacy Policy
Bedroom Community is committed to protecting your privacy and handling your personal data transparently, securely, and in full compliance with European and Icelandic data protection laws.
Last updated: 29 September 2026
1. Data Controller
The data controller responsible for the processing of your personal data on this website and across Bedroom Community communications is:
Valgeir Sigurðsson ehf. (trading as Bedroom Community)
Bedroom Community operates in Iceland, within the European Economic Area (EEA), and processes personal data under the General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the Icelandic Data Protection Act (Act No. 90/2018).
2. Personal Data We Collect & Why
We collect and process minimal personal data necessary to provide our music, manage tour announcements, and understand how our audience engages with the label.
Newsletter & Announcements
When you join our mailing list on the website or during campaign initiatives, we collect your email address, optional first name, and optional country.
Purpose: Sending updates on releases, live concerts, archival projects, and special editions.
Legal basis: Consent (GDPR Article 6(1)(a)).
Platform: Hosted via Mailjet (ISO 27001 certified, EU data hosting).
Retention: Retained until you withdraw consent. Every newsletter contains an immediate one-click unsubscribe link.
Website Analytics & Performance
If you allow analytics, we measure site visits and page activity to understand how the website is used.
Purpose: Monitoring page performance, reading engagement, and aggregate site health.
Choice: Optional analytics stays off until you allow it in the tracking preferences.
Platform: Google Analytics 4 (Measurement ID: G-HX101X26DQ).
Retention: Event-level user data retention is strictly limited to 14 months, with IP anonymisation enforced.
Outbound Intent & Campaign Measurement
If you allow advertising measurement, we record page views, successful newsletter subscriptions, and clicks from our website to external stores, ticket offices, and streaming providers.
Purpose: Understanding listener departures to Bandcamp, concert ticketing box offices, and digital streaming platforms.
Choice: Optional advertising measurement stays off until you allow it in the tracking preferences.
Platforms: Meta Pixel and Meta Conversions API, with shared event IDs used to deduplicate browser and server copies.
Data processed: Event type, page path, destination host and path, timestamp, browser network details, and Meta attribution cookies when available.
Advanced matching: The Meta dataset is configured to use available email, optional first name, and country details entered in newsletter forms to improve matching. The website’s server-side event does not include these form values.
Newsletter event: We record a lead only after Mailjet confirms a successful subscription.
Transactions: We do not record a purchase unless a store or ticketing provider supplies a confirmed sales signal.
Direct Enquiries & Licensing
When you contact us regarding synchronization, licensing, press materials, distribution, or general questions, we receive your email and message contents.
Purpose: Responding to enquiries and fulfilling business agreements.
Legal basis: Performance of a contract or preliminary contract steps (GDPR Article 6(1)(b)), or legitimate interests (GDPR Article 6(1)(f)).
Retention: Maintained for the duration of the enquiry or commercial relationship, plus statutory accounting retention periods where relevant.
3. Third-Party Services & External Destinations
We deliberately avoid carrying financial transactions or commercial payment gateways directly on bedroomcommunity.net. Instead, transactions occur through specialist third parties:
Bandcamp: Official physical merchandise, vinyl records, and digital album downloads are hosted and processed through Bandcamp. Some Bedroom Community artists maintain independent storefronts. Purchases made on Bandcamp are governed by Bandcamp’s Privacy Policy.
Tour Venues & Ticketing Box Offices: Ticket links for concerts (including London Southbank Centre, Tampere Hall / Tiketti, National Concert Hall Dublin, Espoo Cultural Centre, and Turku Music Festival) direct visitors to the official box office of each venue. Transactions are processed under each venue’s respective privacy terms.
Streaming Providers: Embedded audio players and outbound streaming links connect to Spotify, Apple Music, YouTube Music, SoundCloud, and TIDAL under their individual privacy policies.
Worldwide Distribution: Physical records are distributed worldwide by The State51 Conspiracy, and by Forced Exposure in North America.
4. Cookies & Tracking Technologies
The site stores a necessary preference cookie so it can remember your choice. Optional analytics and advertising technologies remain off until you actively allow each category. Your choice is kept in this browser for 180 days and can be changed here at any time. Allowing advertising measurement also allows the Meta matching described above.
Cookie
Provider
Purpose
Duration
_ga, _ga_*
Google Analytics 4
Distinguishes unique users and persists session state across pageviews.
Up to 14 months
_fbp, _fbc
Meta Technologies
Measures advertising effectiveness and campaign referral attribution.
Up to 90 days
bc20_consent
Bedroom Community
Remembers your optional analytics and advertising measurement choices.
180 days
Your choice does not affect catalogue browsing or other essential site features. Use the controls below to review or change your optional tracking choices.
Tracking preferences
5. Your Legal Rights
Under the General Data Protection Regulation (GDPR) and the Icelandic Data Protection Act, you have the following rights regarding your personal data:
Right of Access (Article 15): You have the right to request a copy of the personal data we hold about you.
Right to Rectification (Article 16): You may ask us to correct inaccurate or incomplete data.
Right to Erasure (Article 17): You may request the deletion of your personal data ("right to be forgotten").
Right to Restriction of Processing (Article 18): You may request that we suspend processing your data in certain circumstances.
Right to Data Portability (Article 20): You may request to receive your personal data in a structured, machine-readable format.
Right to Object (Article 21): You may object at any time to processing based on legitimate interests.
Right to Withdraw Consent: Where processing is based on consent (such as our newsletter), you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.
To exercise any of these rights, please email us directly at herro@bedroomcommunity.net. We respond to all verified requests promptly within statutory time limits (normally 30 days).
6. Supervisory Authority
If you believe that our processing of your personal data infringes data protection regulations, you have the right to lodge a complaint with the Icelandic Data Protection Authority:
Persónuvernd (The Icelandic Data Protection Authority)
If you reside elsewhere in the European Union or the United Kingdom, you may also lodge a complaint with your local supervisory authority (e.g. the Information Commissioner’s Office in the UK).
7. Contact Us
If you have questions about this Privacy Policy or how your information is handled, please get in touch:
