Terms of service

1. About these terms

These terms are an agreement between Einyrkinn and the business that uses it: a sole trader, or a one-person ehf. Whoever signs up accepts them on the business's behalf. If the Icelandic and English versions differ, the Icelandic version applies.

2. What Einyrkinn does

Einyrkinn issues invoices and credit notes, records expenses and their receipts, and shows the VSK for each VSK period. It is not a bookkeeping system. It keeps no double-entry books, files nothing with Skatturinn, and knows no tax other than VSK. The business remains responsible for its bookkeeping, its VSK returns and its other taxes.

3. Your account

Keep your password to yourself. You are responsible for what is done through your account, and for the information you give about the business being correct.

4. Issued invoices are never altered

An issued invoice or credit note cannot be changed, and cannot be deleted on its own while Einyrkinn holds the business's records. A mistake is corrected with a credit note. Invoice numbers are allocated in an unbroken series.

5. The records belong to the business

Everything the business records in Einyrkinn is its own. You can download a complete archive of it at any time from Settings.

6. Einyrkinn processes personal data on the business's behalf

The business's records contain personal data about other people, for example a client who is an individual. For that data the business is the controller and Einyrkinn its processor, under Article 28 of the General Data Protection Regulation as given effect by Act No. 90/2018. The processing lasts as long as the account exists. It covers the names, kennitölur, addresses, email addresses and phone numbers of clients, what was sold to them and what they paid, and the people named on receipts. Einyrkinn:

• processes the data only to provide the service these terms describe. These terms and the business's use of the service are its documented instructions, including on transfers outside the EEA. Einyrkinn tells the business if it believes an instruction breaks data protection law;
• ensures that everyone it authorises to process the data is bound by confidentiality;
• protects the data with appropriate technical and organisational measures under Article 32, including encryption in transit and encrypted off-site backups;
• uses only the sub-processors named in the privacy notice, binds each of them by contract to the same obligations, and remains responsible for them. Einyrkinn tells the business before adding or replacing one, so that it can object, and close the account if it does not agree;
• does not act on a request from a data subject that reaches it, such as a client asking for their data to be erased, but passes it to the business and helps the business answer it. The business decides, because it may be obliged to keep the record;
• helps the business meet its obligations under Articles 32 to 36, and tells it without undue delay after becoming aware of a personal data breach affecting its records;
• when the account is closed, returns the data in the archive and then deletes it, as section 8 describes;
• makes available the information needed to show that it meets these obligations, and allows for and contributes to audits by the business or an auditor it mandates, on reasonable notice.

For the data Einyrkinn needs to run the account itself, such as sign-in, security and billing, Einyrkinn is the controller. The privacy notice describes it.

7. A dormant account is kept

Einyrkinn does not close an account for inactivity. A dormant account and everything in it is kept for as long as the account exists. The account is the business's instruction to hold its records.

8. Closing the account

Custody passes to you. Before closing, you download the complete archive and confirm that you have it. Icelandic bookkeeping law generally requires a business to keep its accounting records for seven years from the end of the accounting year. That duty is the business's, and closing does not end it. From the moment of closing, keeping the archive is your responsibility alone.

Deletion is irreversible. When you confirm, your access ends at once and Einyrkinn deletes the account and all of the business's data, issued invoices, credit notes, closed VSK periods and receipts included. Nobody, Einyrkinn included, can recover it. Opening a new account later starts with nothing in it.

The closure receipt. On closing you get a link, shown on screen and sent to your login email, that tells you whether deletion is complete. It says nothing else and contains nothing that identifies you or the business. It expires 90 days after deletion. Until then Einyrkinn keeps only a one-way hash of the code in the link and the time deletion finished.

Backups. Einyrkinn keeps backups for at most 30 days. Deleted data is gone from every backup no later than 30 days after closing. A backup restored in that time is not put back into service while it still holds a closed account.

Einyrkinn's own billing records. Einyrkinn keeps its own invoices to the business for its subscription, and the record of their payment, as its own accounting records, for as long as the law requires Einyrkinn to keep them. They do not include any of the business's records.

9. When the owner dies

The estate (dánarbú) of a sole trader, or whoever holds authority for the business, can obtain the archive through Einyrkinn's support on proof of that authority, such as a certificate of private administration (einkaskiptaleyfi) or the appointment of an administrator (skiptastjóri).

10. Availability and liability

Einyrkinn aims to be available at all times but cannot promise uninterrupted service. Check an invoice and the VSK figures before relying on them: Einyrkinn is not liable for indirect loss, and the business remains responsible for what it files with Skatturinn.

11. Changes to these terms

Einyrkinn emails you at least 30 days before a change that matters to you takes effect. If you do not agree to it, you can close the account before then.

12. Law and courts

These terms are governed by Icelandic law. A dispute that cannot be settled otherwise goes before the District Court of Reykjavík (Héraðsdómur Reykjavíkur).