Privacy Policy

1. Data controller

The data controller responsible for the personal data collected through this website is:

• Legal name: NORDISK INVEST 2024 SL
• Tax ID (CIF): B19719335
• Registered address: Calle Pez Dorado, 42 Bj A, 29620 Torremolinos, Málaga, Spain
• Commercial Registry: Entry MA-183037, Electronic Volume, Electronic Folio of the Commercial Registry of Málaga
• Administrator: Armen Petrosyan
• Email: info@nordisk.es
• Phone: +34 654 94 60 46
• Website: nordisk.es
• Data Protection Contact: For any queries related to data protection, you can contact our privacy officer at info@nordisk.es

2. Personal data we collect

We collect the personal data that you voluntarily provide through the forms available on our website:

2.1. Quote request form

• Full name
• Email address
• Phone number
• City or locality
• Requested service category
• Project description

2.2. Contact form

• Name
• Email address
• Message

3. Purposes of data processing

We process your personal data for the following purposes:

• Managing quote requests: forwarding your request to up to 5 verified companies in our network so they can prepare and send you their quotes.
• Service-related communications: responding to your enquiries, informing you about the status of your request and facilitating communication with the selected companies.
• Service improvement: analysing platform usage in an aggregated and anonymised manner to improve the user experience.

4. Legal basis for processing

The processing of your personal data is based on the explicit consent you give by accepting this privacy policy through the checkbox provided in our forms (Article 6(1)(a) of the GDPR).

You may withdraw your consent at any time, without affecting the lawfulness of processing carried out prior to its withdrawal.

5. Data recipients

Your personal data may be disclosed to the following recipients:

• Verified companies in the Nordisk.es network: up to 5 construction, renovation or home services companies previously verified by Nordisk.es, for the sole purpose of preparing a personalised quote for you.
• Technology providers: companies that provide us with web hosting, email and database management services, acting as data processors under confidentiality agreements.

We do not sell, rent or transfer your personal data to third parties for commercial or advertising purposes.

Nordisk.es maintains data processing agreements (in accordance with Article 28 of the GDPR) with all partner companies that receive personal data from users through the platform. These agreements ensure that companies process data exclusively for the purpose of responding to the quote request and in compliance with applicable data protection regulations.

6. Data retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, according to the following criteria:

• Customer data (quote requests): up to 24 months from the last activity, or indefinitely in anonymised form if requested by the user.
• Registered company data: while the account is active plus 6 additional years to comply with Spanish accounting and tax obligations (General Tax Act art. 66, Commercial Code art. 30).
• Billing and payment data: 6 years from invoice issuance (Commercial Code art. 30).
• Consent records and marketing communications: 3 years from last interaction.
• Browsing data and cookies: as set out in our Cookie Policy (maximum 24 months).

After these periods, data is irreversibly deleted or anonymised. You may request early deletion of your data at any time via the "Delete my account" button in your user panel, or by emailing info@nordisk.es.

7. International data transfers

To provide our services, your personal data may be transferred to providers located outside the European Economic Area (EEA):

• Supabase Inc. (United States; data hosted in the EU — Ireland, eu-west-1) — database hosting
• Cloudflare Inc. (United States) — web hosting and content delivery network
• Resend Inc. (United States) — transactional email delivery
• Stripe Inc. (United States) — payment processing
• Holded Tech Iberia S.L. (Spain, data stored in the EU) — invoice issuance and management in accordance with Spanish tax regulations

These transfers are carried out under the European Commission's adequacy decision regarding the EU-US Data Privacy Framework and/or Standard Contractual Clauses approved by the European Commission, ensuring an adequate level of protection for your personal data.

8. Automated decision-making

Nordisk.es does not make decisions based solely on automated processing of data that produce legal effects concerning you or similarly significantly affect you. Our support chatbot uses artificial intelligence to answer general enquiries, but does not make decisions that affect your rights or contracted services.

9. Data subject rights

In accordance with the General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD), you have the right to:

• Access: obtain confirmation of whether we are processing your data and, if so, access it.
• Rectification: request the correction of inaccurate or incomplete data.
• Erasure: request the deletion of your data when it is no longer necessary for the purpose for which it was collected, among other grounds.
• Portability: receive your data in a structured, commonly used and machine-readable format, and transmit it to another controller.
• Objection: object to the processing of your data in certain circumstances.
• Restriction of processing: request the restriction of processing in the cases provided by law.

To exercise any of these rights, you may contact us by sending an email to info@nordisk.es, indicating your full name and the right you wish to exercise. We will respond within a maximum period of 30 days.

If you believe that the processing of your data does not comply with current legislation, you have the right to file a complaint with the Spanish Data Protection Agency (www.aepd.es).

10. Data security

Nordisk.es implements the technical and organisational measures necessary to ensure the security of your personal data and to prevent its alteration, loss, unauthorised processing or access, taking into account the state of technology, the nature of the data and the risks to which it is exposed.

11. Changes to this policy

Nordisk.es reserves the right to modify this privacy policy to adapt it to legislative or case-law developments, as well as changes to our services. Any changes will be published on this page with the corresponding update date.

12. Contact

If you have any questions about this privacy policy or about the processing of your personal data, please contact us at:

• Email: info@nordisk.es
• Phone: +34 654 94 60 46