Privacy Policy

Last updated: 11 October 2026

NordVault respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect information when you visit our website, contact us, or use our services.

This policy is intended to support compliance with applicable European data protection law, including the EU General Data Protection Regulation (GDPR).

1. Who We Are

NordVault provides Linux, cloud, cybersecurity and IT infrastructure services for businesses.

For the purposes of applicable data protection law, NordVault is the data controller for personal data collected directly through this website or through our business relationship with you.

Company: NordVault
Country: Denmark
Email:
Company registration number:
Registered address:

If you have questions about this Privacy Policy or how we process personal data, you can contact us using the details above.

2. Personal Data We May Collect

Depending on how you interact with us, we may collect information such as:

  • Name
  • Company name
  • Job title
  • Email address
  • Telephone number
  • Business address
  • Information included in contact forms, emails or enquiries
  • Information relating to services you request from us
  • Technical information such as IP address, browser type, device type and operating system
  • Website usage information
  • Security and access logs
  • Billing and contractual information where you become a customer

We aim to collect only the information reasonably necessary for the relevant purpose.

3. How We Collect Personal Data

We may collect personal data when you:

  • Visit our website
  • Submit a contact form
  • Contact us by email or telephone
  • Request an assessment, quotation or consultation
  • Enter into a contract with us
  • Receive technical support
  • Interact with our website infrastructure
  • Subscribe to communications, where offered

Some technical information may be collected automatically by the web server or other security systems.

4. Why We Process Personal Data

We may process personal data for the following purposes:

Responding to enquiries

We use contact information to respond to questions, requests for quotations and service enquiries.

Providing our services

Where you become a customer, we may process information necessary to deliver, manage and support the agreed services.

Contracts and billing

We may process customer and company information to prepare contracts, invoices and other business documentation.

Security

Technical information and logs may be processed to protect our website, infrastructure, customers and systems against unauthorized access, abuse, fraud or cyber threats.

Legal obligations

We may process or retain information where necessary to comply with accounting, tax, regulatory or other legal requirements.

Improving our services

We may use limited website and service information to understand how our services are used and to improve our website and technical environment.

5. Legal Bases for Processing

Under the GDPR, we process personal data only where there is an appropriate legal basis.

Depending on the circumstances, this may include:

  • Contract: processing necessary to provide services or take steps before entering into a contract.
  • Legitimate interests: for example, operating and securing our website, responding to business enquiries and protecting our systems.
  • Legal obligation: where processing is required by law.
  • Consent: where you have specifically agreed to a particular type of processing.

Where processing is based on consent, you may withdraw your consent at any time.

6. Cookies and Similar Technologies

Our website may use cookies or similar technologies.

Essential cookies may be used where necessary for:

  • Website functionality
  • Security
  • Session management
  • Administrative access

If we use non-essential analytics, marketing or tracking cookies, we will provide appropriate information and, where required, obtain consent before they are activated.

You can also control cookies through your browser settings.

7. Website Hosting and Server Logs

Our website may automatically create technical server logs.

These logs may contain information such as:

  • IP address
  • Request date and time
  • Requested page
  • Browser information
  • HTTP status code
  • Referring website
  • Security-related events

Such logs may be used for security monitoring, troubleshooting, abuse prevention and technical administration.

We aim to retain logs only for as long as reasonably necessary for these purposes.

8. Data Hosting and European Infrastructure

NordVault aims to prioritize European infrastructure and data residency where practical and appropriate.

Where personal data is hosted or processed by third-party infrastructure providers, we assess the relevant provider, processing location and contractual arrangements.

Where personal data is transferred outside the European Economic Area, appropriate safeguards will be used where required by law.

These may include, where applicable:

  • EU adequacy decisions
  • Standard Contractual Clauses
  • Other legally recognized transfer mechanisms

9. Third-Party Service Providers

We may use third-party service providers where necessary to operate our business.

These may include providers of:

  • Cloud infrastructure
  • Website hosting
  • Email
  • Backup
  • Security services
  • Accounting
  • Payment processing
  • Professional services

Where such providers process personal data on our behalf, we aim to ensure that appropriate contractual and security arrangements are in place.

We do not sell personal data to advertisers or data brokers.

10. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected, unless a longer retention period is required by law.

Retention periods may vary depending on the type of information.

For example:

  • General enquiries may be retained for a reasonable follow-up period.
  • Customer records may be retained for the duration of the business relationship.
  • Accounting records may be retained for the period required by Danish law.
  • Security logs may be retained for a limited period based on security requirements.

When information is no longer required, it may be deleted, anonymized or securely archived where appropriate.

11. How We Protect Personal Data

We take reasonable technical and organizational measures to protect personal data against:

  • Unauthorized access
  • Accidental loss
  • Destruction
  • Alteration
  • Disclosure
  • Misuse

Depending on the service, measures may include:

  • Encryption
  • Access controls
  • Multi-factor authentication
  • Network segmentation
  • Secure remote access
  • Logging and monitoring
  • Backup
  • Patch management
  • Least-privilege access
  • Security updates

No system can guarantee absolute security, but we aim to apply controls proportionate to the risks involved.

12. Your Rights

Under the GDPR, you may have rights including:

  • The right to access your personal data
  • The right to correct inaccurate data
  • The right to request deletion of your personal data
  • The right to restrict processing
  • The right to object to certain processing
  • The right to data portability
  • The right to withdraw consent where processing is based on consent
  • The right to lodge a complaint with a supervisory authority

These rights are subject to applicable legal conditions and exceptions.

To exercise your rights, contact us at:

We may need to verify your identity before responding to certain requests.

13. Automated Decision-Making

NordVault does not currently use personal data collected through this website for automated decision-making that produces legal or similarly significant effects on individuals.

If this changes, this Privacy Policy will be updated accordingly.

14. Children

Our services are intended for businesses and professional users.

We do not knowingly design our website or services for children or intentionally collect personal information from children through this website.

15. Links to Other Websites

Our website may contain links to third-party websites.

NordVault is not responsible for the privacy practices or content of those websites. You should review the privacy policy of any external website you visit.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • Changes to our services
  • Changes to our infrastructure
  • New legal requirements
  • New service providers
  • Changes in our data-processing practices

The current version will be published on this page together with the latest revision date.

17. Complaints

If you have concerns about how NordVault processes your personal data, please contact us first so that we can review the matter.

You also have the right to contact the competent data protection supervisory authority.

For organizations established in Denmark, the relevant authority is generally Datatilsynet (the Danish Data Protection Agency).