Privacy Statement

Last updated: October 22, 2026

This statement explains what personal information is collected through gislio.com and gridland.net, why, and what rights you have. We collect as little as possible and never sell or rent personal information.

Who is responsible

The data controller for both websites is Griðland ehf, Reykjanesbær, Iceland, Company ID 5102034190, VAT number 74251. You can reach us about any privacy matter at gislio@gislio.com.

What we collect and why

When you contact us or send a request. If you inquire about a keynote or an engagement, ask for an examination or review copy, or write to us, we receive the details you provide, such as your name, email address, organization, role, and message. We use them only to answer your request and to follow up on it. The legal basis is your request and our legitimate interest in responding to it.

When you subscribe or download a free resource. When you subscribe to the newsletter, or request the executive summary of The AI Fluent Nation or the AI Leadership Bottleneck Diagnostic, we use your name and email address to deliver what you asked for and to send you the newsletter essays. You can unsubscribe at any time using the link in every email. The legal basis is your consent.

When you visit the websites. Our hosting provider automatically records technical information such as your IP address, browser type, and the pages requested, in order to deliver the sites securely. These logs are kept for a short period and are not used to identify you.

Cookies

The websites do not use advertising or tracking cookies, and the fonts are served from our own sites rather than from a third party.

Who else processes your information

We use a small number of trusted service providers to run the websites: Cloudflare, which hosts the websites and delivers inquiry messages to us by email; and MailerLite, which manages newsletter subscriptions and resource downloads. They process information only on our behalf. Where a provider stores data outside the European Economic Area, the transfer is protected by the European Commission’s standard contractual clauses or an equivalent safeguard.

Links to Amazon, LinkedIn, and other external sites are governed by those sites’ own privacy policies.

How long we keep it

Correspondence and requests are kept for as long as needed to respond and for up to two years afterward, unless a working relationship follows. Newsletter addresses are kept until you unsubscribe.

Your rights

Under the Icelandic Data Protection Act, No. 90/2018, and the EU General Data Protection Regulation, you have the right to access the personal information we hold about you, to have it corrected or deleted, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent at any time. To exercise any of these rights, write to gislio@gislio.com. You also have the right to lodge a complaint with Persónuvernd, the Icelandic Data Protection Authority.

Changes

If this statement changes, the updated version will be posted here with a new date.