Privacy Policy

This policy explains what personal data we process when you visit nordaprofile.pl, open a client profile page hosted here, send a message through a profile contact form, or save a profile to your phone wallet. It is written to meet the GDPR and Swedish data protection law.

1. Who is responsible

For the nordaprofile.pl website and the technical operation of profile pages, Andersen Innovations is the data controller. When you send a message through a client’s profile contact form, the client named on that profile is the controller of your enquiry and Andersen Innovations processes it on their behalf (see section 4).

2. What data we process

Visiting the website or a profile page

• Technical data needed to deliver the page: IP address, browser type, time of request, requested URL. Stored in server logs for a short period for security and fault analysis.
• Cookieless product analytics that record the page path, selected market, profile identifier and actions such as opening a link, saving a contact, adding a wallet pass or sending a form. These events do not contain your name, email address, IP address or advertising ID.

Contact form on a profile page

• Name, email address, company (optional) and the message you write.
• The profile the message was sent from and the time it was sent.

Saving a contact or a wallet pass

• “Save contact” creates a vCard file on your own device. Nothing is sent to us.
• Apple Wallet and Google Wallet passes are generated on our server from the profile owner’s public details. We do not receive your wallet identity. Apple or Google may process the pass under their own privacy terms.

Enquiries about Norda Profile

• If you email us, we keep the correspondence for as long as the enquiry is open.

3. Why and on what legal basis

• Delivering pages and keeping them secure — legitimate interest (Art. 6(1)(f) GDPR).
• Forwarding your contact-form message to the profile owner — steps at your request prior to a contract (Art. 6(1)(b)) and the profile owner’s legitimate interest in answering you (Art. 6(1)(f)).
• Aggregated analytics — legitimate interest in understanding how the service is used (Art. 6(1)(f)). No personal profiles are built.
• Sales enquiries and contracts with clients — contract (Art. 6(1)(b)) and legal obligations such as bookkeeping (Art. 6(1)(c)).

4. Who receives the data

• The profile owner you wrote to. Contact-form messages are stored in our database and emailed to the address the client has registered with us.
• Processors we use to run the service: Lovable (application hosting and database, EU region via Supabase), Cloudflare (content delivery and DDoS protection), Mailgun (transactional email delivery, EU region), Apple and Google (wallet passes when you choose to add one). All processors act under data processing agreements.
• We never sell personal data and never share it for advertising.

5. International transfers

Data is hosted in the European Union. Where a processor may access data from outside the EU/EEA (for example Cloudflare or Apple/Google for wallet passes), the transfer is covered by the EU Standard Contractual Clauses or an adequacy decision.

6. How long we keep data

• Server logs: up to 30 days.
• Contact-form messages: until the profile owner has handled the enquiry, at most 12 months, unless a client relationship follows.
• Client contracts and invoices: 7 years, as required by the Swedish Bookkeeping Act.

7. Cookies

nordaprofile.pl does not set advertising or analytics cookies. A technically necessary preference cookie may be used on preview or legacy language routes to remember the market selected by the visitor. It is not used to track visitors across websites. That is why there is no consent banner for analytics or advertising cookies.

8. Your rights

You can ask for access to your data, correction, deletion, restriction, portability, and you can object to processing based on legitimate interest. Write to kontakt@nordaprofile.pl with the subject “Privacy”. We answer within one month. If you sent a message to a client profile, we will forward your request to that client and help them fulfil it.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY, imy.se) or with the supervisory authority in your own country.

9. Changes

We update this policy when the service changes. The date at the top shows the current version.