Privacy Policy

Privacy Policy

Last updated: 12 September 2026

ThinkGeoEnergy ehf. respects your privacy and aims to handle personal data in a clear, proportionate and responsible way.

This Privacy Policy explains how we collect and use personal data when you visit our websites, subscribe to our newsletters, register for webinars, contact us or otherwise interact with ThinkGeoEnergy.

1.Who We Are

ThinkGeoEnergy ehf. is an Icelandic limited liability company and is responsible for the personal data described in this policy.

ThinkGeoEnergy ehf.
Kennitala: 460709-1800
Reykjavík, Iceland
Email: news@thinkgeoenergy.com

ThinkGeoEnergy ehf. operates ThinkGeoEnergy.com and the related language platforms PiensaGeotermia and JeotermalHaberler.

 

2. Information We Collect

We collect only information reasonably necessary to operate our websites, newsletters, webinars and business activities.

This may include:

• your name and email address;
• company, organisation or job title where provided;
• newsletter subscription information;
• webinar registration information;
• information you provide when contacting us;
• technical information such as IP address, browser, device and website usage information; and
• cookie and analytics information where you have given the required consent.

We do not intentionally request sensitive or special-category personal data through our general websites, newsletters or webinar registration processes.

 

3. Why We Process Personal Data

We process personal data for specific purposes and on an appropriate legal basis.

Newsletters
We process your email address and related subscription information when you have chosen to subscribe. The legal basis is your consent.

Webinars
We process registration information to administer webinars, provide joining information and communicate information necessary for the event. This is based on our legitimate interest in organising and providing the event you requested.

Enquiries and business communications
We process information you provide when contacting us so that we can respond, communicate with you and manage our business relationships. This is generally based on our legitimate interests or, where relevant, steps taken at your request before entering into an agreement.

Website operation and security
Technical information may be processed where necessary to operate, maintain and protect our websites and systems. This is based on our legitimate interests in maintaining secure and reliable services.

Analytics
We use analytics to understand how our websites are used and to improve their performance and content. Where consent is required for analytics cookies or similar technologies, the legal basis is your consent.

Legal obligations and claims
We may process information where necessary to comply with applicable law or to establish, exercise or defend legal claims.

 

4. Newsletters and Marketing

We operate opt-in newsletters for ThinkGeoEnergy, PiensaGeotermia and JeotermalHaberler.

We use Mailchimp to manage newsletter subscriptions and distribute newsletters.

We send newsletters when you have subscribed or otherwise provided the required permission. We do not automatically add people who register for a webinar or contact us to our newsletter lists.

You can unsubscribe at any time using the unsubscribe link included in every newsletter.

After you unsubscribe, limited information may be retained where necessary to ensure that your preference continues to be respected.

We do not sell or rent our mailing lists or personal data.

 

5. Webinars

We use GoToWebinar / GoTo to manage webinar registrations and deliver webinars.

Information submitted during registration is used to:

• administer registration;
• provide access details;
• send information necessary for the webinar; and
• manage participation in the event.

Webinar registration does not by itself constitute consent to receive ThinkGeoEnergy newsletters or unrelated marketing communications.

Where a webinar is recorded in a way that may identify participants, appropriate information will be provided in connection with the event.

6. Cookies and Analytics

Our websites use cookies and similar technologies for website operation, preferences and analytics.

We use a cookie-consent system to allow visitors to manage their choices.

Necessary cookies may be used where required for the website to function properly.

For non-essential cookies, including analytics cookies where consent is required, we ask for your consent through our cookie banner or cookie settings.

We use Google Analytics to understand how visitors use our websites. Depending on your consent choices, this may involve processing information such as pages visited, approximate location, device and browser information and technical identifiers.

You can change or withdraw your cookie choices through the cookie settings available on the website.

 

7. Service Providers

We use third-party service providers to help operate our websites and services. Our principal providers currently include:

• Hetzner for website hosting in Germany;
• Cloudflare for domain, network, security and website-delivery services;
• Google Workspace for email and business communications;
• Google Analytics for website analytics;
• Mailchimp for newsletter management and distribution;
• GoToWebinar / GoTo for webinar registration and delivery; and
• a cookie-consent service to manage cookie choices.

These providers process information only for the services they provide to us and subject to their applicable contractual and data-protection arrangements.

We may also disclose information where required by law or where necessary to establish, exercise or defend legal claims.

We do not sell personal data.

 

8. International Data Transfers

Some service providers or their subprocessors may process personal data outside Iceland or elsewhere outside the European Economic Area.

Where personal data is transferred outside the EEA, we use or rely on appropriate safeguards required under applicable data-protection law. Depending on the provider and destination, these may include an applicable adequacy decision or approved contractual safeguards such as Standard Contractual Clauses.

 

9. How Long We Keep Personal Data

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected.

In general:

• newsletter subscription information is retained while you remain subscribed, subject to limited records needed to respect an unsubscribe request;
• webinar registration information is retained for as long as reasonably necessary to administer the event and related business records;
• correspondence is retained for as long as reasonably necessary to deal with the matter and maintain appropriate business records;
• security and technical information is retained according to operational and security requirements; and
• analytics information is retained according to the settings used in our analytics services.

Information may be retained for longer where required by law or reasonably necessary in connection with a legal claim.

 

10. Your Rights

Under applicable data-protection law, and subject to the conditions and exceptions provided by law, you may have the right to:

• request access to your personal data;
• request correction of inaccurate information;
• request deletion of personal data;
• request restriction of processing;
• object to certain processing;
• receive certain information in a portable format where the right to data portability applies; and
• withdraw consent at any time where processing is based on consent.

Withdrawing consent does not affect processing that lawfully took place before consent was withdrawn.

You also have the right to lodge a complaint with the Icelandic Data Protection Authority, Persónuvernd, if you believe your personal data has been processed in breach of applicable data-protection law.

 

11. Security

We use reasonable technical and organisational measures intended to protect personal data against unauthorised access, alteration, loss or misuse.

No online service or communication system can guarantee absolute security, and we therefore cannot guarantee that information transmitted or stored electronically will always be completely secure.

 

12. Third-Party Websites

Our websites regularly contain links to companies, organisations, public authorities, publications and other third-party websites.

ThinkGeoEnergy does not control these websites and is not responsible for their privacy practices. When you leave our websites, the privacy policies of the relevant third party apply.

 

13. Changes to This Policy

We may update this Privacy Policy when our services, technology or legal obligations change.

The current version will be published on our website together with the date it was last updated.

 

14. Contact

For questions about this Privacy Policy, your personal data or the exercise of your data-protection rights, please contact:

ThinkGeoEnergy ehf.
Kennitala: 460709-1800
Reykjavík, Iceland
Email: news@thinkgeoenergy.com