We collect as little personal data as we can. This website has no analytics, no advertising, no tracking and no cookies. The only personal data involved is what any web server records when a page is requested, and what you choose to send us when you contact us.
Who is responsible
The company responsible for your personal data (the "data controller" under the EU General Data Protection Regulation, GDPR) is:
If you have any questions about this policy or about your data, write to contact@nordhal.dk.
When you visit the website
When your browser asks for a page, our hosting provider's servers automatically record some technical details in a log file. This happens on almost every website, and we do not use it to identify you.
What is recorded
- your IP address
- the date and time of the request
- the page or file requested, and whether it was delivered
- the type of browser and operating system you use
- the page that linked you here, if your browser passes it on
Why, and on what legal basis
These logs are needed to deliver the website to you, to keep it secure and to find the cause of faults and attacks. Our legal basis is our legitimate interest in running a secure, working website (GDPR Article 6(1)(f)).
How long it is kept
The logs are kept by our hosting provider for a short period for security and fault-finding, and are then deleted automatically. We do not combine them with any other data, and we do not use them to build profiles of visitors.
When you contact us
If you email or call us, we receive whatever you choose to share: usually your name, email address or phone number, the organisation you work for and the content of your message.
Why, and on what legal basis
We use this to answer you and to follow up on the conversation. If you are asking about working with us or buying from us, our legal basis is taking steps at your request before a possible contract (GDPR Article 6(1)(b)). Otherwise, it is our legitimate interest in replying to people who contact us and keeping a record of business conversations (GDPR Article 6(1)(f)).
How long it is kept
We keep correspondence while the conversation or business relationship is active, and for up to three years after our last contact, so that we can refer back to earlier discussions. After that, it is deleted.
If a message becomes part of our accounting records, for example an order or an invoice, Danish bookkeeping law (bogføringsloven) requires us to keep it for five years from the end of the financial year it relates to.
You do not have to give us any personal data, but we cannot reply to you without a way of contacting you.
Who we share data with
We do not sell personal data, and we do not share it for marketing. We only share it with:
- Our hosting provider, Hostinger International Ltd., which runs the servers this website is on and keeps the server logs described above on our behalf.
- Our email provider, which stores and delivers the emails we send and receive on our behalf.
- Professional advisers, such as our accountant or lawyer, when they need it for their work for us. They are bound by professional confidentiality.
- Public authorities, when the law requires us to.
Our hosting and email providers act as our "data processors". This means they may only use the data to provide their service to us, under a data processing agreement, as the GDPR requires.
Data outside the EU
We prefer providers that store data inside the EU and the European Economic Area. If one of our providers handles personal data outside that area, we make sure the transfer is covered by a legal safeguard recognised under the GDPR. That is either a decision by the European Commission that the country protects data to EU standards (which includes the EU-US Data Privacy Framework), or the Commission's standard contract terms for data transfers. You can ask us for a copy of the relevant safeguard.
Your rights
Under the GDPR you have the right to:
- see the personal data we hold about you, and get a copy of it
- have it corrected if it is wrong
- have it deleted, unless we are legally required to keep it
- have its use restricted while a question about it is being settled
- object to our use of it where we rely on our legitimate interest
- receive it in a common, machine-readable format, or have it sent to someone else, where the GDPR gives you that right
To use any of these rights, email contact@nordhal.dk. We will reply within one month. We may ask you to confirm who you are before we act on a request.
We do not make decisions about you by purely automated means, and we do not profile visitors.
Complaints
If you think we handle your data wrongly, please tell us first so we can put it right. You also always have the right to complain to the Danish data protection authority, Datatilsynet.
Changes to this policy
If we change how we handle personal data, for example by adding a contact form or website statistics, we will update this page first and change the date at the top. For how this website uses cookies (it does not), see our cookie policy. Company details and terms of use are in the legal notice.