Privacy policy

Last updated: October 2026

1. Controller

The controller for the processing of your data on this website is:

Marten Thorand (īkara)
Veghús 25, 112 Reykjavík, Iceland
Email: marten@ikara.space
Phone: +354 775 80 11

2. The short version

• This website does not set any cookies itself, uses no tracking and no advertising networks.
• Fonts and all images are served by this website itself. Nothing is loaded from Google, social media services or other third parties.
• I only receive personal data when you write to me through the contact or reservation form, by email or by phone or when you buy a download in the shop (the purchase itself runs on Payhip).

3. Hosting and technical access data

This website is delivered through Cloudflare Workers (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). When you open the pages, Cloudflare processes technically necessary data in order to deliver and protect them, in particular your IP address, date and time, the page requested, the browser type and operating system.

The legal basis is Art. 6(1)(f) GDPR: my legitimate interest is a secure, fast and reliable presentation of the website. Because Cloudflare is based in the USA, data may be transferred to a third country. This relies on safeguards recognised by the European Commission (in particular the EU-US Data Privacy Framework or standard contractual clauses). A data processing agreement is in place with Cloudflare.

4. Contact form and reservation request

When you use the contact form or the reservation form for an artwork, I process the information you enter there:

• your name and email address,
• your request and message,
• for a reservation additionally date, time and place of birth (needed to create your Human Design chart) and whether the artwork is a gift,
• your consent (checkbox) as well as the time and page of the request.

The data is sent over an encrypted connection to a server that receives my enquiries. It runs on an installation of the automation software n8n that I operate myself at IONOS SE (Elgendorfer Str. 57, 56410 Montabaur, Germany). IONOS acts as my processor. The delivery of the website through Cloudflare does not store the form data; it only passes it on.

Purpose: answering your request and, for a reservation, preparing and carrying out the requested artwork including the reading.
Legal basis: your consent (Art. 6(1)(a) GDPR) and, where it concerns entering into or performing a contract, Art. 6(1)(b) GDPR.
Retention: I delete your data once the request has been dealt with and no statutory retention duty applies. If an order results, I keep invoicing and booking data for as long as commercial and tax law require.

5. Contact by email or phone

When you write to me or call me, I process your details (for example name, email address, phone number and the content of your message) in order to reply. The legal basis is Art. 6(1)(b) GDPR where a contract or its preparation is concerned, otherwise Art. 6(1)(f) GDPR. I delete the correspondence once it has been dealt with and no retention duty applies.

I run my mailbox with Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, USA). Emails you send me and my replies are stored there. This also applies to notifications about requests from the contact or reservation form, if they are sent to this mailbox. A data processing agreement is in place with Google. Where data is transferred to the USA, Google relies on standard contractual clauses or the EU-US Data Privacy Framework. The legal basis is Art. 6(1)(f) GDPR (my interest in reliable email communication) or Art. 6(1)(b) GDPR where a contract is concerned.

6. Shop purchases and payment

Downloads in the shop (Payhip). The audio sessions in the shop are sold and delivered by Payhip (Payhip Limited, United Kingdom). When you click “Buy” you leave this website and the purchase takes place on the pages of Payhip. Payhip processes your order and payment and delivers the download. This includes data such as your name, email address, country, payment details and IP address. Payhip passes the payment on to its payment providers and also processes data under its own responsibility. Its privacy policy applies (payhip.com/privacy). I receive the order data I need for bookkeeping and support. The legal basis is Art. 6(1)(b) GDPR. The European Commission has recognised the United Kingdom as a country with an adequate level of data protection. I keep invoicing and booking data for as long as commercial and tax law require.

Reservations and orders by bank transfer. Payments for reservations and individual orders are made by bank transfer. Your bank and mine process the payment data (for example name, IBAN, amount, reference). The legal basis is Art. 6(1)(b) GDPR.

7. Links to other websites

This website contains links to other websites, for example to Instagram profiles or to the checkout of Payhip. Data is only transferred to the respective provider once you click a link. Its own privacy policy applies to its processing.

8. Recipients of your data

Your data is only received by the service providers named in this policy (Cloudflare for delivering the website, IONOS as host of my n8n server, Google for email and for purchases in the shop Payhip), to the extent they need it to perform their service. Beyond that, I only pass on data if the law requires it or you have consented.

9. Your rights

Under the GDPR you have the right to

• access to the data stored about you (Art. 15),
• rectification of inaccurate data (Art. 16),
• erasure (Art. 17) and restriction of processing (Art. 18),
• data portability (Art. 20),
• object to processing based on legitimate interests (Art. 21).

You can withdraw any consent at any time with effect for the future. Just write to marten@ikara.space.

10. Right to lodge a complaint

You can lodge a complaint with a data protection supervisory authority. The authority responsible for me is the Icelandic Data Protection Authority Persónuvernd, Rauðarárstígur 10, 105 Reykjavík, Iceland (personuvernd.is). You can also contact the supervisory authority where you live.

11. Security and changes

The website and the forms use an encrypted connection (HTTPS). If the website or the legal situation changes, I will update this policy. The version published here applies.