Privacy Policy
OSUSHI TRAIN
Last updated: September 5, 2026
1. About this policy
This Privacy Policy explains how Osushi Train processes personal data related to the use of its website and contact with the restaurant.
Processing is carried out in accordance with the General Data Protection Regulation (GDPR), Icelandic Act No. 90/2018 on Data Protection and the Processing of Personal Data, and other applicable regulations in Iceland.
2. Data Controller
Trade name: Osushi Train
Legal name: Aguacatalia ehf.
Kennitala: 450623-2880
Address: Fjarðargata 19, Hafnarfjörður, Iceland
Phone: +354 777 6037
Email: osushitrain@osushitrain.is
Aguacatalia ehf. is responsible for the processing of data carried out directly through the website and the contact channels managed by Osushi Train. When a visitor uses an external service, that provider may process data in accordance with its own privacy policy.
3. Data That May Be Processed
- Name, phone number, and email address provided by the visitor through the contact form;
- Content of messages and other information provided voluntarily;
- Technical access information, such as IP address, browser, device, pages accessed, date, and time;
- Preferences related to cookie consent;
- Information related to an order when the customer contacts the restaurant directly.
Online orders are placed through SalesCloud. Data entered on that platform is processed in accordance with SalesCloud’s own policy and terms. Full payment card details are not collected through the contact form on the new Osushi Train website.
4. How We Use the Data
Contact Form and Customer Service
We use the data provided to respond to questions, requests, and complaints. The legal basis is taking steps requested by the visitor, performance of a contract, or the legitimate interest in providing customer service.
Orders and Services
When necessary, we use the information to confirm orders, provide customer service, and resolve issues. The legal basis is performance of a contract and compliance with legal obligations.
Operation and Security
Technical data may be processed to keep the website operational, identify failures, prevent misuse, and protect systems. The legal basis is the legitimate interest in the security and operation of the website.
Analytics and Advertising
The website will use Google Tag Manager to manage tags. Google Analytics and Meta Pixel may be configured through this tool. When their use depends on consent, these tools and their optional cookies should only be activated after the visitor has made a choice.
5. External Services
SalesCloud
The order button directs the customer to SalesCloud, an external platform used for takeaway orders. By accessing this platform, the customer begins using an external service subject to its respective privacy policy and terms.
Hostinger
The website will be hosted by Hostinger. As a global service provider, technical data may be processed in different locations, depending on the service configuration and applicable safeguards.
Google Maps
The website will have Google Maps embedded to display the restaurant’s location. Loading or interacting with the map may transmit technical data to Google, in accordance with the service’s policies and applicable consent choices.
Google Tag Manager, Google Analytics and Meta Pixel
Google Tag Manager will be implemented to manage measurement tools. Google Analytics and Meta Pixel may be activated to measure visits and campaigns. The use of these tools must respect the visitor’s cookie preferences.
The website will not include newsletter registration. In this version, no data collection is planned for sending newsletters.
6. Data Sharing
Osushi Train does not sell personal data. Information may only be made available when necessary to service providers that support the operation of the website and services, including hosting, maintenance, contact forms, measurement, advertising, maps, and the ordering platform, or when disclosure is required by law.
Each service provider should receive only the data necessary for its purpose and process that information in accordance with its legal and contractual responsibilities.
7. International Transfers
Hostinger, Google, Meta, and other technology providers are companies with international operations. Depending on the configuration used, data may be processed outside Iceland or the European Economic Area.
Where applicable, such transfers must rely on a legal basis and safeguards recognized by data protection law, such as adequacy decisions or appropriate contractual clauses.
8. Retention
Data will be retained only for the period necessary for the purpose that justified its collection. Contact messages will be retained for as long as necessary to respond to and follow up on the request. Information related to orders, accounting, complaints, or the defense of rights may be retained for the periods required by applicable law.
Technical logs and consent preferences will be retained for the period necessary for security, operation, and evidence of the visitor’s choices.
9. Security
Osushi Train and its service providers must adopt appropriate technical and organizational measures to protect data against unauthorized access, alteration, loss, disclosure, or misuse.
If a security incident involving personal data occurs, the measures required by applicable law will be taken.
10. Data Subject Rights
Subject to the conditions set out in the GDPR and Icelandic law, the data subject may:
- Request information about and access to their data;
- Request correction of inaccurate or incomplete data;
- Request deletion or restriction of processing, where applicable;
- Object to certain processing activities;
- Request data portability, where applicable;
- Withdraw previously given consent;
- Lodge a complaint with the Icelandic data protection authority.
Requests may be sent to osushitrain@osushitrain.is. We may request reasonable information to confirm the identity of the requester. Certain rights may be limited where processing or retention is necessary to comply with a legal obligation or protect legitimate rights.
11. Data Protection Authority
The data subject may lodge a complaint with Persónuvernd, the Icelandic data protection authority. Website: www.personuvernd.is.
12. External Links
The website may contain links to SalesCloud, Google Maps, and social networks. Osushi Train does not control the privacy practices of these external services. We recommend that visitors review their policies before providing data.
13. Changes to This Policy
This policy may be updated to reflect changes to the website, the services used, or legislation. The updated version will be published with a new revision date.
14. Contact
Email: osushitrain@osushitrain.is
Phone: +354 777 6037
Address: Fjarðargata 19, Hafnarfjörður, Iceland
Cookie Policy
OSUSHI TRAIN
Last updated: September 5, 2026
1. What Are Cookies?
Cookies are small files stored on a visitor’s device when they access a website. They may enable technical functionality, record preferences and, with consent where required, measure visits and campaigns.
2. Cookies Used or Planned
Essential Cookies
They are used for basic functionality, security and, where applicable, maintaining the administrative panel session. They normally expire at the end of the session or within a few days. They are not used for advertising.
Analytics Cookies
Google Analytics may be configured through Google Tag Manager to measure traffic, browsing behavior, and performance. According to information provided by the developer, these cookies may last between six months and two years, depending on the tool’s configuration.
Marketing Cookies
Meta Pixel may be configured through Google Tag Manager to measure campaigns and personalize ads. According to information provided by the developer, these cookies may last between 90 days and one year, depending on the provider and configuration.
External Services
The embedded Google Maps and the external SalesCloud link may involve technologies belonging to their respective providers. By accessing or interacting with these services, the visitor will also be subject to their policies.
3. Visitor Choices
The website will provide a panel for accepting or rejecting optional cookies. Essential cookies may remain active when they are strictly necessary for functionality or security.
Analytics and marketing cookies should not be activated before consent when such consent is required. Rejecting optional cookies should not prevent the use of the website’s basic functions.
4. Changing or Withdrawing Consent
The visitor may withdraw or change their cookie choices. The team responsible for the website must keep an accessible way to reopen cookie preferences available.
The visitor may also delete cookies through their browser settings. Deleting necessary cookies may affect certain technical functions.
5. Duration and Technical List
The periods indicated in this policy are the ranges provided during development. The exact duration depends on the configuration actually published.
After the website’s final configuration, the technical list displayed in the cookie panel should automatically identify, whenever possible, the name, provider, purpose, category, and duration of active cookies.
6. Updates
This Cookie Policy may be updated whenever technologies are added, removed, or changed on the website.
7. Contact
Email: osushitrain@osushitrain.is
Phone: +354 777 6037
Address: Fjarðargata 19, Hafnarfjörður, Iceland