This Privacy Policy applies to you as a visitor to our Review Forest pages (e.g., reviewforest.org/company-xyz). It informs you about how we process your personal data in connection with your use of these pages.
ReviewForest provides individual Review Forest pages to companies (our customers), which display aggregated reviews from various review platforms as well as information about planted trees.
The following sections explain how we process your data.
ReviewForest GmbH Großbeerenstr. 11 10963 Berlin Email: mail@reviewforest.org
Leon Heuser c/o ReviewForest GmbH Großbeerenstr. 11 10963 Berlin Email: privacy@reviewforest.org
The Review Forest pages display aggregated ratings and reviews for companies that have been submitted on various publicly accessible review platforms. Additionally, they show information about trees planted in connection with these reviews.
When you visit the Review Forest pages, we collect and store certain data.
We will delete this data as soon as it is no longer necessary for the purposes for which it was collected, or restrict its processing if we are required to retain it by law.
Under the GDPR, you have the following rights:
To exercise any of these rights, please contact us at:
ReviewForest GmbH Großbeerenstr. 11 10963 Berlin Email: mail@reviewforest.org
You also have the right to lodge a complaint with a supervisory authority. A list of the relevant authorities in Germany can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
The reviews and names of reviewers displayed on the Review Forest pages come from publicly accessible sources on various review platforms. The protection of this data is subject to the agreements between the users and the respective review platforms.
If your name appears in connection with a planted tree on a Review Forest page and you wish to have it removed, please contact us at mail@reviewforest.org. We will comply with your request after verifying your identity.
We process your data based on Article 6(1)(f) GDPR. Our legitimate interest lies in providing a secure and efficient infrastructure for the Review Forest pages.
We use the following hosting provider:
Hetzner Online GmbH Industriestr. 25 91710 Gunzenhausen Germany
Server location: Germany
Hetzner acts as a data processor on our behalf. This arrangement is based on our legitimate interests (Article 6(1)(f) GDPR) in not having to maintain servers on our own premises.
We use the Content Delivery Network (CDN) provided by:
Cloudflare Germany GmbH Rosental 7, c/o Mindspace 80331 Munich Germany
This enhances the security and delivery speed of our website, which is in our legitimate interests (Article 6(1)(f) GDPR).
Cloudflare may process personal data in its server log files. Depending on your location, data may be transferred to the USA. An adequate level of data protection is ensured by an adequacy decision of the European Commission, which you can access here. Cloudflare is certified under the EU-U.S. Data Privacy Framework (DPF).
You have the right to object to this processing. The success of your objection will be evaluated based on a balancing of interests.
The processing described in this section is not legally or contractually required. However, the full functionality of the website cannot be guaranteed without this processing.
We use services provided by PostHog Inc., 2261 Market Street #4008, San Francisco, CA 94114, USA (“PostHog”) to collect usage data for the software we provide. This includes email addresses and company names you provided when setting up your account, which helps us better support our customers. We process this data based on Article 6(1)(b) GDPR.
PostHog transfers and stores data exclusively on servers in the EU, although it is a US-based company. We have a data processing agreement with PostHog that includes the Standard Contractual Clauses approved by the European Commission, with additional clauses required for compliance with Swiss data protection law. These provide appropriate safeguards for international data transfers as required by Article 46(1) GDPR.
We retain your anonymized access data for a maximum of 7 days. This data is used exclusively for statistical purposes and error analysis.
For more information about your rights regarding Cloudflare’s data processing, please visit: Cloudflare DPA
Cloudflare has implemented compliance measures for international data transfers. These apply to all worldwide activities where Cloudflare processes personal data of individuals in the EU. These measures are based on the EU Standard Contractual Clauses (SCCs). For more information, please visit: https://www.cloudflare.com/cloudflare_customer_SCCs-German.pdf
Last updated: May 2026 Version: 1.6-Review Forest Page
