1. Who operates this site

friendbasketroostr.forum is an independent informational website about winter road trips in Iceland. It is not an official government, road authority, tourism-board, rental, accommodation or travel-booking service. The site operator is Friend Basket Roostr Forum ehf., Hafnarstræti 20, 101 Reykjavík, Iceland. Privacy enquiries may be sent to [email protected].

2. Information collected

You can read the guide without submitting a contact form. If you use the form, the site asks for your name, email address, enquiry topic and message. The information is provided by you and may contain details you choose to include. Do not submit sensitive personal information unless it is necessary for your enquiry. The form shown on this static website is processed in the browser only; it does not transmit or deliver a message to a server. The success message confirms only that the browser accepted the form fields for the local interaction.

Like many websites, the hosting environment may process technical request information such as an IP address, browser type, requested page and time of request in server logs. The exact logging and retention depend on the hosting provider’s configuration. This site does not add analytics scripts or advertising trackers. We do not claim that the host retains no technical data; consult the actual hosting provider’s documentation for details.

3. Cookies and browser storage

The site uses local browser storage to remember your cookie-banner choice. This preference is stored in your browser and is not used to identify you or track activity between unrelated websites. The site does not currently implement analytics cookies, advertising cookies or third-party embedded services. If the site’s technology changes, this policy and the cookie policy should be updated before any additional optional technology is introduced.

4. Purposes and legal bases

Information submitted in an enquiry form would ordinarily be used to review and respond to the request if a functioning delivery service is connected in the future. In the current static implementation, form data remains in the browser and no message is sent to the operator. A mail link opens the visitor’s chosen email application; any resulting email is handled by the visitor’s email provider and the recipient’s email service. Technical hosting logs, where generated by the host, may be used for delivering, maintaining and securing the website. Depending on the circumstances and applicable law, processing may rely on consent, steps requested by you, legitimate interests or a legal obligation. This statement does not claim a formal legal assessment has been completed.

5. Retention and security

The cookie-choice value remains in local storage until it is changed or removed by the visitor. The site itself does not receive that value. Form submissions are not transmitted by this frontend and are not retained by a form backend. If you email the published address, correspondence may be retained for as long as needed to handle the enquiry, maintain records or meet applicable legal requirements. Appropriate safeguards depend on the systems used by the email and hosting providers. No method of transmission or storage can be guaranteed completely secure.

6. Service providers and international transfers

The public website may be served by a hosting provider and the domain’s infrastructure. The specific provider and its processing locations depend on deployment. No analytics processor or advertising provider is integrated in the supplied site code. A visitor who chooses to send email will use their own email service and the operator’s email provider; those services have their own privacy terms. Data may be processed outside your country where a provider’s infrastructure is located. Where applicable, providers and the site operator should use lawful transfer safeguards. Contact the privacy address for information about a particular processing question.

7. Your rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability or objection to certain processing, and to withdraw consent where processing relies on consent. Under GDPR or similar laws, you may also have the right to complain to a relevant supervisory authority. California residents may have rights under the CCPA/CPRA, where applicable, to know, access, correct or delete personal information and to opt out of sale or sharing. This site does not sell personal information or use it for cross-context behavioral advertising in the implementation described here. Rights and exemptions vary by jurisdiction.

8. Making a privacy request

Send a request to [email protected] with the subject “Privacy request.” Explain the right you want to exercise and provide enough context to locate relevant correspondence. Do not send passwords or unnecessary identity documents. We may request proportionate information to verify a request where the law permits or requires it. We aim to respond within applicable legal deadlines. If information exists only in a third-party host’s logs, the request may need to be directed to that provider, and we will explain the practical limit where known.

9. Children, updates and contact

This guide is written for trip-planning information and is not directed to children. The operator does not knowingly request children’s personal information through this site. We may revise this policy when the website, its providers or applicable requirements change. The current version and effective date appear on this page. Continued use after a revision does not remove rights granted by applicable law. For questions, use the privacy email above or the Contact page. This policy is general information and is not legal advice.