COOKIE AND PRIVACY POLICY

5. Visits to our website
When you visit nordicco.eu, we may process technical information such as IP address, time of visit, pages visited, browser type, device type, and information about errors and security incidents.

The information is used to provide the website, ensure stable and secure operation, prevent misuse, and investigate technical errors.

Processing that is necessary for secure operation is carried out on the basis of our legitimate interest in operating and protecting our website.

We use Google Analytics and Google Ads for analytics and marketing purposes. When you accept cookies, information about your use of our website may be shared with Google for statistics and advertising.

Statistics and marketing that require consent are only used if you have given the relevant cookie consent.

6. Downloads of materials and newsletter
Nordicco may make materials available that you can access by completing a form and subscribing to our email communications.

The form clearly states that access to the materials is linked to consent to marketing from Nordicco A/S by email.

Consent is given by actively ticking a box that is not pre-ticked.

6.1 Information we process
We may process your first name, your email address, the material you have requested, the time of subscription, the accepted consent text, documentation of the subscription, and information about delivery and unsubscribing.

6.2 Purpose
The information is used to:

·       Provide you with access to the requested material
·       Manage and document your subscription
·       Send newsletters and other marketing by email
·       Handle delivery, errors, and unsubscribes
·       Measure and improve our communication

The marketing may include, among other things, professional inspiration, customer cases, product news, invitations to webinars and events, and information about Nordicco’s products and solutions.
The processing is carried out on the basis of your consent and in accordance with the rules of the Danish Marketing Practices Act.

You may withdraw your consent at any time.

7. Contact forms and enquiries
When you contact us via the website, email, or telephone, we may process your name, company, job title, email address, phone number, and the content of your enquiry.

We may also process information about the building, installation, or solution to which the enquiry relates, as well as subsequent correspondence and quotations.

The information is used to respond to your enquiry, contact you as requested, assess your needs, prepare and follow up on quotations, and manage an existing or potential customer relationship.

Depending on the circumstances, processing is carried out in order to perform a contract or handle a request prior to entering into a contract, on the basis of our legitimate interest in handling business enquiries, or to comply with a legal obligation.

A general enquiry does not automatically result in subscription to our newsletter.

8. Data processors
We use Mailchimp for, among other things, registering subscriptions, sending emails, handling unsubscribes, documenting consent, and compiling statistics on email campaigns.

Mailchimp is provided by the Intuit group and processes personal data on our behalf pursuant to a data processing agreement.

We may also use other suppliers for hosting, forms, cookie management, analytics, IT security, backup, and support.

Data processors may only process information in accordance with our instructions and pursuant to a data processing agreement.

We do not sell your personal data and do not disclose it to other companies for their own marketing purposes. We may share information with our data processors and other recipients where this is necessary and lawful.

9. Transfers outside the EU/EEA
Some suppliers may process personal data outside the EU/EEA.

Mailchimp is a US-based service, and transfer of or access to information from the United States may therefore occur.

Transfers take place on a valid basis under data protection rules, for example the EU-U.S. Data Privacy Framework, the European Commission’s Standard Contractual Clauses, or an adequacy decision.

10. Storage and deletion
We only retain personal data for as long as necessary for the purpose for which it was collected.

10.1 Newsletter and email communication
Information about active recipients is retained for as long as the recipient remains subscribed.
When you unsubscribe, we stop sending marketing.
However, we may retain limited documentation of consent and unsubscribing for up to four years after the consent was last used, if necessary to document compliance with legislation. During the same period, the email address may be retained on a limited suppression list to prevent further marketing from being sent by mistake.

10.2 Enquiries and sales dialogue
Enquiries that do not lead to an agreement or continued dialogue are generally deleted no later than 24 months after the most recent meaningful contact.
Information may be retained for longer if the dialogue remains relevant, if legislation requires it, or if the information is necessary in connection with agreements, warranties, service, or legal claims.

10.3 Technical information and security logs
Technical information and security logs are retained only for as long as necessary for operation, security, and troubleshooting. The retention period depends on the nature of the information and our suppliers’ technical setup. Information may be retained for longer if necessary to investigate a specific security incident or establish, exercise, or defend a legal claim.

11. Your rights
Under data protection rules, you have, among other things, the right to:

·       Access the information we process about you
·       Have inaccurate information corrected
·       In certain cases, have information deleted or processing restricted
·       In certain cases, receive your information in a machine-readable format
·       Object to processing based on legitimate interest
·       Object to direct marketing
·       Withdraw consent

These rights may be subject to conditions and exceptions under legislation.

You can exercise your rights by writing to hello@nordicco.eu.

We will respond to your enquiry without undue delay and generally no later than one month after receipt. In special cases, this period may be extended by a further two months.

12. Unsubscribing
You can unsubscribe from Nordicco’s newsletters and other email marketing at any time by clicking the unsubscribe link in our emails or by writing to hello@nordicco.eu.

Unsubscribing is free of charge.
Unsubscribing does not affect the lawfulness of processing carried out before consent was withdrawn. We may continue to retain limited documentation of consent and unsubscribing where necessary to comply with legislation.

13. Security, complaints, and changes
We use appropriate technical and organisational security measures to protect personal data against loss, misuse, unauthorised access, and other unlawful processing.

Our website may contain links to websites operated by others. Nordicco is not the data controller for those parties’ processing of personal data.

If you have objections to our processing of your personal data, you are welcome to contact us. You also have the right to lodge a complaint with the Danish Data Protection Agency: www.datatilsynet.dk.

We update this privacy policy when necessary. The current version is always available on nordicco.eu with the date of the latest update.