Privacy information for visitors to Nordic Nexus.

1. Controller

Nordic Nexus BV is the controller for the processing described on this page.

You can contact us about privacy matters at mail@nordicnexus.nl.

2. Data we process

When you use this website, we may process the following categories of personal data:

• technical request data needed to deliver and protect the website, such as IP address and browser or device information;
• contact form data you submit, including your name, email address, company, use case and message;
• anti-abuse and operational data associated with contact form submissions, including your IP address, user agent, origin and submission timestamp.

We collect most of this data directly from you. Some technical data is generated automatically by your browser or device when you access the website.

3. Purposes and legal bases

We process personal data for the following purposes and legal bases:

• to make the website available, maintain its stability and protect it against misuse, based on our legitimate interests under Article 6(1)(f) GDPR;
• to review and respond to enquiries sent through the contact form and to take steps at your request before entering into a business relationship, based on Article 6(1)(b) GDPR and, where applicable, our legitimate interests under Article 6(1)(f) GDPR;
• to prevent spam, fraudulent submissions and repeated abuse of the contact form, based on our legitimate interests under Article 6(1)(f) GDPR.

4. Cookies, analytics and tracking

This website does not currently use non-essential cookies, third-party analytics tools or advertising trackers. If that changes in the future, this policy will be updated before the relevant processing is introduced.

5. Storage period

We keep personal data only for as long as necessary for the purpose for which it was collected. Contact enquiries are retained for as long as needed to review, respond to and follow up on your request, and for a reasonable period afterwards where necessary to manage the relationship, maintain business records or protect against misuse.

Technical and anti-abuse data is retained only for as long as required for security, debugging, operational continuity and the protection of the website and contact form.

6. Recipients of personal data

Personal data may be accessed by Nordic Nexus personnel who need it for the purposes described above and by service providers acting on our behalf, in particular hosting and infrastructure providers. We do not sell your personal data.

7. International transfers

As a rule, we aim to process website and enquiry data within the European Economic Area. If a transfer to a country outside the EEA becomes necessary, we will only do so where an appropriate GDPR transfer mechanism applies.

8. Your rights

Under the GDPR, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of your data, where the legal conditions are met;
• request restriction of processing;
• object to processing carried out on the basis of legitimate interests;
• request data portability, where applicable;
• withdraw consent at any time, where processing is based on consent.

To exercise your rights, contact mail@nordicnexus.nl.

9. Complaints

If you believe that the processing of your personal data infringes data protection law, you have the right to lodge a complaint with a supervisory authority. For Nordic Nexus BV, this may include the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

10. Automated decision-making

We do not use personal data collected through this website for automated decision-making or profiling within the meaning of Article 22 GDPR.

11. Updates

We may update this privacy policy from time to time to reflect legal, technical or operational changes. The version published on this page is the current version.