Privacy Policy

Data Controller Information

This Privacy Policy explains how nordwise.biz AS ("we," "us," or "our") collects, uses, and protects your personal information when you visit our website nordwise.biz or use our services. As the data controller, we are committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

Data Controller:
nordwise.biz AS
Industriestraße 194
45545 Essen, Germany
Registration Number: 43293015
VAT Number: DE441654985

Data We Collect

We collect various types of personal data to provide and improve our services. The data collection includes information you provide directly to us and information automatically collected when you use our website:

Information You Provide

• Contact information (name, email address, phone number)
• Company information (company name, job title, industry)
• Communication data (messages, inquiries, feedback)
• Service preferences and requirements
• Any other information you choose to provide

Automatically Collected Information

• IP address and location data
• Browser type and version
• Device information and operating system
• Website usage patterns and navigation behavior
• Referral sources and search terms
• Cookie and tracking technology data

How We Use Your Information

We process your personal data for specific, legitimate purposes based on legal grounds under GDPR. How we use your data depends on how you interact with our services:

Service Delivery

• Responding to your inquiries and providing customer support
• Delivering automation services and solutions
• Processing service requests and managing projects
• Providing technical support and maintenance

Communication

• Sending service-related communications and updates
• Providing information about our services and offerings
• Responding to questions and providing support
• Sending newsletters and marketing communications (with consent)

Business Operations

• Improving our website and services
• Analyzing usage patterns and user preferences
• Conducting market research and business analysis
• Ensuring security and preventing fraud
• Complying with legal obligations and regulations

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

Our website uses various types of cookies and tracking technologies:

• Necessary Cookies: Essential for basic website functionality
• Analytics Cookies: Help us understand how visitors use our website
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Used for advertising and remarketing campaigns

For detailed information about our cookie usage, please refer to our Cookie Policy.

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Consent: When you have given clear consent for specific processing activities
• Contract: When processing is necessary for performing a contract with you
• Legal Obligation: When we must process data to comply with legal requirements
• Legitimate Interest: When we have a legitimate business interest that doesn't override your privacy rights

Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your data in the following limited circumstances:

Service Providers

We work with trusted third-party service providers who assist us in operating our website and delivering our services. These providers are contractually bound to protect your data and use it only for specified purposes.

Legal Requirements

We may disclose your information when required by law, court order, or government regulation, or when we believe disclosure is necessary to protect our rights, property, or safety, or that of others.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of the business transaction, subject to appropriate privacy protections.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Our data retention periods are based on:

• The nature and sensitivity of the data
• The purposes for which we collected the data
• Legal and regulatory requirements
• Business and operational needs

Generally, we retain personal data for the following periods:

• Contact form inquiries: 3 years from last contact
• Customer data: 7 years after contract termination
• Website analytics data: 26 months
• Marketing communications: Until you unsubscribe

Your Rights

Under GDPR and applicable privacy laws, you have several rights regarding your personal data:

Access and Portability

• Right to access your personal data and receive a copy
• Right to data portability in a structured, machine-readable format

Correction and Deletion

• Right to rectify inaccurate or incomplete personal data
• Right to erasure ("right to be forgotten") under certain circumstances

Processing Control

• Right to restrict processing of your personal data
• Right to object to processing based on legitimate interests
• Right to withdraw consent at any time (where processing is based on consent)

Automated Decision-Making

• Right not to be subject to automated decision-making, including profiling

To exercise any of these rights, please contact us using the contact information provided below. We will respond to your request within one month, as required by GDPR.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication procedures
• Employee training on data protection practices
• Incident response and breach notification procedures

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

• Adequacy decisions by the European Commission
• Standard Contractual Clauses (SCCs)
• Binding Corporate Rules (BCRs)
• Other legally recognized transfer mechanisms

Children's Privacy

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16 without parental consent, we will take steps to remove that information from our systems.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "last updated" date. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:

You also have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated. In Germany, you can contact the relevant data protection authority in your state or the Federal Commissioner for Data Protection and Freedom of Information.