Reforest Iceland
Last updated: 30 September 2026. This policy explains how Reforest Iceland AG handles personal data collected through reforesticeland.com, and the cookies the site uses. It covers both privacy and cookies in one place.
The controller is Reforest Iceland AG (“Reforest Iceland”, “we”, “us”), Hofstrasse 8, 8707 Uetikon am See, Switzerland, commercial register no. CHE-131.896.936. You can reach us at contact@reforesticeland.com. Planting and local operations are carried out by our Icelandic subsidiary Endurheimt Skóga ehf., which acts only as our service provider and is not an independent controller of your data. We process personal data under the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation (GDPR).
Analytics. When you allow it, we use Google Analytics 4 to understand how visitors use the site – pages viewed, approximate location, device and browser, and how you arrived. This uses cookies and an online identifier. The legal basis is your consent, which you give through our cookie banner and can withdraw at any time. Until you consent, analytics storage stays disabled and no analytics cookies are set.
Consent records. Our consent tool, Cookiebot (by Usercentrics), stores a record of your cookie choices so we can respect and document them. The legal basis is our legal obligation to obtain and evidence consent, and our legitimate interest in demonstrating compliance.
Contact and enquiries. If you email us or use a form, we process the details you provide to respond to you. The legal basis is your consent and, where relevant, steps taken at your request before entering a contract.
Purchases, accounts and billing. When you buy or subscribe, we process your name, email, billing details and order or subscription data to perform the contract, issue receipts and manage your account. Card payments are handled by our payment provider Mollie, and subscription billing by Chargebee; we do not receive or store your full card number. The legal basis is performance of a contract and our legal obligations, such as accounting retention.
Server logs and hosting. Our host records standard technical data, such as IP address, time and the request made, needed to deliver and secure the site. The legal basis is our legitimate interest in a secure, functioning website.
Audience survey. We use a short on-site survey (provided by Cookiebot) that asks how you found us. It sets no cookies and collects no personal data or identifiers – only your answer, the page, your device type and a timestamp.
Instagram feed. Our News page shows our latest Instagram post. To display it, your browser loads the post text and image from Behold (Nonesuch Studios Inc., USA), a service that supplies the feed on our behalf. Behold receives your IP address and standard technical information about your browser as part of that request. We set no cookies for this feature, and no data goes to Instagram unless you click through to it, in which case Instagram’s own privacy policy applies. The legal basis is our legitimate interest in showing our latest updates.
We use cookies and similar technologies in these categories:
You can change or withdraw your consent at any time through the consent link on the site, or by clearing cookies in your browser. Withdrawing consent does not affect processing already carried out. The list below is generated and kept current automatically by Cookiebot and shows every cookie on this site, its provider, purpose and duration:
We share personal data only with service providers acting on our instructions, and where required by law. Current recipients are Google (analytics), Cookiebot / Usercentrics (consent management), Webflow (website hosting and forms), Behold (the Instagram feed on our News page), Mollie (payments at checkout), Chargebee (subscription billing), and our Icelandic subsidiary Endurheimt Skóga ehf. and professional advisers where needed to deliver the service or meet legal duties. We do not sell your personal data.
Some of these providers process data outside Switzerland and the EEA, including in the United States. Where they do, the transfer is protected by recognised safeguards such as the EU–US Data Privacy Framework or the EU Standard Contractual Clauses together with the Swiss addendum. Providers such as Mollie (Netherlands) and Cookiebot (Denmark) process within the EEA.
We keep personal data only as long as needed for the purpose it was collected for: analytics data for the period configured in Google Analytics; contract, order and invoice data for as long as the law requires (Swiss accounting records are generally kept for ten years); and enquiry data for as long as needed to deal with your request.
Subject to the FADP and GDPR, you have the right to access your data, have it corrected or deleted, restrict or object to its processing, receive it in a portable form, and withdraw consent at any time. To exercise any of these, contact contact@reforesticeland.com. You may also lodge a complaint with a supervisory authority – in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC); in the EU or EEA, your local data protection authority.
We take reasonable technical and organisational measures to protect your data. No transmission over the internet can be guaranteed to be fully secure.
We may update this policy to reflect changes in our services or the law. The version in force is the one shown here, and the date at the top shows when it last changed.
For any question about this policy or your data, contact contact@reforesticeland.com – Reforest Iceland AG, Hofstrasse 8, 8707 Uetikon am See, Switzerland.