Last updated: 3 May 2026

Northern Lights Cabin (operated by 1707 ehf, registered in Iceland) respects your privacy and is committed to protecting the personal data we collect through our website at northernlightscabin.is. This Privacy Policy explains what we collect, how we use it, and your rights under the EU General Data Protection Regulation (GDPR) and Icelandic data protection law (Act No. 90/2018).

1. Who We Are

The data controller for this website is:

• Company: 1707 ehf (trading as Northern Lights Cabin)
• Address: Lautarbrekka 7, 805 Grímsnes, Iceland
• Email: 1707ehf@gmail.com

2. Information We Collect

We collect personal information only when you choose to provide it, and limited technical information automatically when you visit our site:

• Information you provide: When you submit our contact form, we collect your name, email address, and the contents of your message. If you book through Airbnb or Vrbo, those bookings are handled by those platforms under their own privacy policies — we receive only the booking details they pass to hosts.
• Information collected automatically: When you browse the site, our servers and analytics tools log your IP address, browser type, device type, referring URL, pages viewed, and approximate location (country/region). This is standard web log information.
• Cookies and similar technologies: See section 5 below.

3. How We Use Your Information

We use the information we collect to:

• Respond to enquiries you send via our contact form;
• Process and manage bookings or arrange your stay;
• Improve the website and understand which content is useful to visitors;
• Display relevant advertising through Google AdSense (see section 6);
• Comply with our legal obligations, including tax and accounting records.

4. Legal Bases for Processing (GDPR)

We rely on the following legal bases under Article 6 of the GDPR:

• Consent — for non-essential cookies and analytics, where required;
• Contract — when processing your booking or responding to your booking enquiry;
• Legitimate interests — for basic site security, fraud prevention, and improving our services;
• Legal obligation — for accounting and tax records as required by Icelandic law.

5. Cookies

This site uses cookies and similar technologies to make the site work, to measure traffic, and to serve advertising. The main categories are:

• Strictly necessary cookies — required for basic site functionality.
• Analytics cookies — Google Analytics / Google tag (gtag.js) is used to measure visits and understand how the site is used. These cookies collect information in an aggregated, mostly anonymous form.
• Advertising cookies — Google AdSense and its third-party vendors set cookies to serve and measure ads (see section 6).

You can control or disable cookies in your browser settings. Disabling cookies may affect how the site functions.

6. Google AdSense and Third-Party Advertising

This site uses Google AdSense, an advertising service provided by Google LLC, to display ads. Google and its partners use cookies and similar technologies to serve ads based on your prior visits to this and other websites.

• Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to our site and/or other sites on the Internet.
• You may opt out of personalised advertising by visiting Google Ads Settings.
• You may also opt out of some third-party vendors' use of cookies for personalised advertising by visiting aboutads.info or youronlinechoices.eu.
• For more information on how Google uses data, see Google's Privacy & Terms.

7. Analytics

We use Google Analytics / Google tag (gtag.js) to understand site usage. Google Analytics uses cookies to collect information about how visitors use our site. We do not combine this data with personally identifiable information you have submitted. You can opt out of Google Analytics by installing the Google Analytics opt-out browser add-on.

8. Sharing Your Information

We do not sell your personal information. We share it only with:

• Service providers that help us operate the site (hosting, email delivery, analytics, advertising), under contract and only for the purposes described here;
• Booking platforms (Airbnb, Vrbo) when you choose to book through them;
• Authorities, when we are required to do so by law.

9. International Transfers

Some of our service providers (including Google) are based outside the European Economic Area. When personal data is transferred outside the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or adequacy decisions.

10. Data Retention

We keep contact form messages for as long as needed to respond and for a reasonable period afterwards. Booking and accounting records are kept for the period required by Icelandic tax and accounting law (typically 7 years). Analytics data is retained according to our Google Analytics settings.

11. Your Rights

Under the GDPR and Icelandic law, you have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate data;
• Request erasure of your data ("right to be forgotten");
• Restrict or object to certain processing;
• Request data portability;
• Withdraw consent at any time, where processing is based on consent.

To exercise these rights, email 1707ehf@gmail.com. You also have the right to lodge a complaint with the Icelandic Data Protection Authority (Persónuvernd) at personuvernd.is.

12. Children

This site is not directed at children under 16, and we do not knowingly collect personal information from children. If you believe we may have collected information from a child, please contact us so we can delete it.

13. External Links

Our site links to third-party websites (booking platforms, attractions, social media). We are not responsible for the privacy practices of those sites. Please review their policies before providing personal information.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be posted on this page.

15. Contact

If you have questions about this Privacy Policy or how we handle your personal information, contact us at 1707ehf@gmail.com or by post at Lautarbrekka 7, 805 Grímsnes, Iceland.