1. Who is responsible for your data
The data controller is NorFalk A/S (CVR 45941248), Voldbjergvej 16, st. th., 8240 Risskov, Denmark. For any question about this policy or your personal data, write to info@nor-falk.com.
2. What data we process and why
When you visit the website
Our hosting provider automatically processes technical data needed to deliver the website securely, such as your IP address, browser type, the pages requested and the time of the request. Legal basis: our legitimate interest in operating a secure and functioning website (GDPR Art. 6(1)(f)).
Website analytics (only with your consent)
If you accept analytics cookies, we use Google Analytics 4 to understand how visitors use the website, for example which pages are visited and how visitors arrive at the site. Google Analytics processes pseudonymous identifiers, device and browser information, approximate location derived from your IP address, and your interactions with the site. We do not use it for advertising. Legal basis: your consent (GDPR Art. 6(1)(a)), which you can withdraw at any time via “Cookie settings” in the footer. See our Cookie Policy for details.
When you contact us
When you email us or use our contact form, we process the information you provide, such as your name, company, email address, enquiry type and message, to respond to your enquiry and follow up on any resulting dialogue. Legal basis: our legitimate interest in responding to enquiries and, where relevant, taking steps at your request before entering into a contract (GDPR Art. 6(1)(b) and (f)).
Content editors
Authorised NorFalk staff who log in to publish news receive a login cookie. This is limited to the administration area and does not apply to regular visitors.
3. Who we share data with
We do not sell personal data. We use the following service providers (data processors):
- Netlify, Inc. (USA): website hosting, image storage and receiving contact form submissions.
- Google Ireland Ltd. / Google LLC (EU/USA): Google Analytics, only if you consent.
- Our email provider: to receive and answer your messages.
- DevNova (Argentina): our web agency, which maintains the website on our behalf.
Some of these providers are located outside the EU/EEA. Where data is transferred to the USA, the transfer relies on the EU-U.S. Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses. Argentina is recognised by the European Commission as providing an adequate level of data protection.
4. How long we keep data
- Technical server logs: for a short period, as needed for security and operation.
- Google Analytics data: up to 14 months, after which it is deleted automatically.
- Enquiries and correspondence: as long as needed to handle the enquiry and any resulting relationship, and no longer than three years after our last contact, unless we are required to keep it longer by law.
5. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to our processing;
- receive your data in a portable format;
- withdraw your consent at any time, without affecting processing carried out before withdrawal.
To exercise any of these rights, email info@nor-falk.com. You can also lodge a complaint with the Danish Data Protection Agency (Datatilsynet), www.datatilsynet.dk.
6. Automated decisions
We do not use automated decision-making or profiling that produces legal or similarly significant effects.
7. Changes to this policy
We may update this policy when our website or services change. The date at the top of this page shows when it was last updated.