Last updated: 5 July 2026

Nordic Cloud is the trading name of Nordic Cloud ApS. In this Privacy Policy, “Nordic Cloud,” “we,” “our,” or “us” refers to Nordic Cloud ApS.

We respect your privacy and are committed to protecting personal data. This Privacy Policy explains how we collect, use, store, share, and protect personal data when you visit our website, contact us, request information, use our services, or interact with us as a customer, prospect, partner, supplier, or website visitor.

Nordic Cloud provides cloud, integration, automation, and managed technology services for businesses. Our services may include managed integrations, API connectivity, workflow automation, cloud infrastructure, service-management integrations, monitoring, technical consulting, implementation, and related support services.

For personal data processed for our own business purposes, Nordic Cloud ApS generally acts as the data controller.

1. Company and Controller Information

Legal company name: Nordic Cloud ApS
Trading name: Nordic Cloud
CVR number: 46584279
Registered office address: Lundeborgvej 71, 6000 Kolding, Denmark
Company operational address: Lundeborgvej 71, 6000 Kolding, Denmark
Postal address: Lundeborgvej 71, 6000 Kolding, Denmark
Website: nordcld.com
Email: contact@nordcld.com

This address may be used for official correspondence, privacy-related requests, business communication, legal notices, and operational matters related to our services.

2. Age Verification

Our website and services are intended for business and professional users.

You must be at least 18 years old to request services, enter into an agreement in your own name, or submit information to us for contractual purposes.

If you act on behalf of a company or other organization, you confirm that you have authority to provide information and communicate with us on its behalf.

We do not knowingly market our services to children or intentionally collect personal data from children.

3. Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data.

Identity and Contact Data

This may include:

• Name

• Business email address

• Telephone number

• Job title

• Employer or company name

• Business address

• Professional profile information

Enquiry and Communication Data

This may include:

• Contact-form submissions

• Emails and other correspondence

• Meeting notes

• Service enquiries

• Discovery-call requests

• Support requests

• Feedback

• Records of business communications

Customer and Contract Data

This may include:

• Company and stakeholder information

• Service requirements

• Proposals

• Contracts

• Statements of work

• Service preferences

• Account and access details

• Billing contacts

• Invoice and payment status information

Technical and Usage Data

This may include:

• IP address

• Browser type

• Device type

• Operating system

• Referral source

• Pages visited

• Session duration

• Timestamps

• Website interaction information

• Security, diagnostic, and performance logs

Service, Integration, and Automation Data

When providing services, customers may give us access to technical or business information such as:

• System configuration details

• Integration requirements

• API documentation

• Service-management data

• Workflow information

• Logs and error reports

• Cloud infrastructure details

• Technical documentation

• Connected application data

• Automation rules and routing logic

• Customer support or ticketing metadata

• Monitoring alerts and incident records

The exact information processed depends on the agreed service and project scope.

4. How We Collect Personal Data

We may collect personal data:

• Directly from you

• From your employer or organization

• Through website forms and service enquiries

• During meetings, onboarding, project delivery, and support

• From authorized account administrators

• From applications, platforms, and systems you authorize us to access

• From cookies and similar technologies

• From professional networking platforms and publicly available business sources

• From implementation, referral, or commercial partners where lawful

5. How and Why We Use Personal Data

We may process personal data for the following purposes.

Responding to Enquiries

We use information to respond to questions, understand business requirements, arrange meetings, and prepare proposals.

Legal basis: Steps taken before entering into a contract and our legitimate interest in developing and operating our business.

Providing Cloud, Integration, and Automation Services

We use information to provide, configure, maintain, monitor, and support our services, including managed integrations, workflow automation, API connectivity, cloud infrastructure, service-management integrations, and related technical services.

Legal basis: Performance of a contract and legitimate interests in delivering reliable professional services.

Managing Projects and Customer Relationships

We process information to manage project delivery, communicate with stakeholders, track progress, provide support, and maintain project records.

Legal basis: Performance of a contract and legitimate interests in managing customer relationships.

Billing and Business Administration

We use relevant information to issue invoices, maintain accounting records, manage payments, handle commercial correspondence, and meet financial obligations.

Legal basis: Performance of a contract, legal obligations, and legitimate interests in managing our business.

Security, Monitoring, and Service Improvement

We may process technical and usage information to secure our website and systems, prevent misuse, troubleshoot issues, monitor performance, detect errors, and improve our services.

Legal basis: Legitimate interests in security, service reliability, fraud prevention, and business improvement.

Marketing Communications

Where permitted, we may send information about our services, updates, insights, or business news.

You can unsubscribe or object to marketing communications at any time.

Legal basis: Consent where required or legitimate interests where permitted by applicable law.

Legal Compliance and Disputes

We may process information to comply with legal obligations, protect our rights, maintain evidence, respond to lawful requests, and manage claims or disputes.

Legal basis: Legal obligations and legitimate interests in establishing, exercising, or defending legal rights.

6. Controller and Processor Roles

Our data-protection role depends on the context.

When We Act as Controller

We generally act as controller for information used for:

• Operating our website

• Responding to enquiries

• Business development

• Contract and account administration

• Billing and accounting

• Marketing

• Security and fraud prevention

• Internal operations

• Legal compliance

When We Act as Processor

When we process personal data solely on a customer’s documented instructions during a cloud, integration, automation, infrastructure, monitoring, or support engagement, we may act as a data processor.

In those cases:

• The customer generally determines the purpose of processing

• The customer is responsible for establishing a lawful basis

• The customer is responsible for providing required privacy information

• Processing will be governed by the applicable contract or Data Processing Agreement

7. Integrations, Automation, and Technical Processing

Our services may involve integrations between third-party tools, cloud platforms, service-management systems, ticketing systems, customer-service platforms, APIs, databases, and workflow tools.

Depending on the engagement, we may process technical information to:

• Connect systems

• Route data between applications

• Automate workflows

• Monitor integration performance

• Detect errors or failures

• Maintain logs and audit trails

• Provide technical support

• Improve reliability and service continuity

• Support onboarding, maintenance, and operational improvements

Customers are responsible for ensuring that the data they connect, route, or process through integrations is lawful and properly authorized.

8. Special Categories and Sensitive Information

We do not request sensitive personal data through ordinary website forms.

Customers should avoid providing sensitive information unless it is necessary for an agreed project, legally permitted, and protected by appropriate contractual, organizational, and technical measures.

Projects involving regulated information may require additional agreements, assessments, or safeguards.

9. Sharing Personal Data

We may share personal data with carefully selected recipients where necessary, including:

• Cloud hosting and infrastructure providers

• Communication and collaboration providers

• Integration and automation platforms

• Analytics and website-performance providers

• Project-management and customer-support providers

• Payment, accounting, and invoicing providers

• Professional advisers, auditors, insurers, and legal counsel

• Consultants and subcontractors involved in delivering services

• Public authorities where disclosure is legally required

• A buyer, successor, or transaction partner during a merger, financing, restructuring, or transfer of business assets

Where providers process personal data on our behalf, we require them to protect it and use it only for authorized purposes.

10. International Data Transfers

Some service providers or project tools may process personal data outside the European Economic Area.

Where personal data is transferred internationally, we will use an appropriate lawful transfer mechanism and safeguards where required. These may include:

• An adequacy decision

• Standard contractual clauses

• Contractual, technical, and organizational protections

• Another transfer mechanism permitted by applicable law

Customers may contact us for further information about safeguards relevant to their data.

11. Data Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, accounting, security, contractual, and dispute-handling requirements.

Typical retention periods may include:

Data category	Typical retention approach
General enquiries	Up to 24 months after the last meaningful communication
Marketing records	Until consent is withdrawn, an objection is received, or the record is no longer required
Customer and project administration records	For the contract period and an appropriate period afterward
Contracts, invoices, and accounting records	For the period required under applicable accounting and tax rules
Support and project correspondence	Based on project, contractual, and legal requirements
Website security and technical logs	For a limited period unless required for investigation or security purposes
Integration logs and technical service data	According to customer instructions, contractual terms, and operational requirements
Backups	Deleted through scheduled backup-rotation processes

Where an exact retention period cannot be specified, we consider the nature of the data, the purpose of processing, legal requirements, security needs, and potential claims.

12. Data Security

We use reasonable technical and organizational safeguards designed to protect personal data.

Depending on the nature of the project, these measures may include:

• Access controls

• Authentication measures

• Encryption where appropriate

• Secure development and integration practices

• Logging and monitoring

• Environment separation

• Backup controls

• Confidentiality commitments

• Vendor and subcontractor reviews

• Incident-response procedures

No digital transmission or storage method can guarantee absolute security. Customers are also responsible for maintaining appropriate controls over their accounts, systems, credentials, and users.

13. Cookies and Similar Technologies

Our website may use cookies and similar technologies to:

• Operate essential website functions

• Maintain security

• Remember preferences

• Analyze website performance

• Understand visitor interactions

• Support marketing where consent has been provided

Non-essential cookies will be used only where permitted and, where required, after consent.

Further details should be provided through our Cookie Policy and cookie settings tool.

14. Your Data-Protection Rights

Depending on the applicable law and processing context, you may have the right to:

• Request access to your personal data

• Request correction of inaccurate or incomplete information

• Request deletion of personal data

• Request restriction of processing

• Object to processing based on legitimate interests

• Withdraw consent at any time

• Request data portability where applicable

• Request information about automated processing

• Lodge a complaint with a competent data-protection authority

To exercise your rights, contact:

contact@nordcld.com

We may need to verify your identity before responding.

Where we process information solely on behalf of a customer, we may refer your request to that customer or assist the customer in responding.

15. Complaints

Please contact us first if you have a concern about how we process personal data. We will investigate and attempt to resolve the matter.

You may also have the right to submit a complaint to the competent data-protection authority in Denmark or another authority responsible for the relevant processing.

16. Third-Party Websites and Services

Our website and services may contain links to or integrations with third-party platforms, cloud providers, software tools, APIs, or other services.

Those third parties may process information under their own terms and privacy notices. We are not responsible for processing performed independently by those third parties.

17. Refund and Dispute Policies

Commercial payment terms, renewals, service credits, refunds, cancellations, and dispute procedures are primarily governed by the applicable proposal, order form, statement of work, subscription agreement, service agreement, or another written contract with Nordic Cloud.

If you have a billing, refund, or service-related query, contact us first at contact@nordcld.com and we will review the matter in good faith in line with the relevant contract and any mandatory legal rights that apply.

18. Changes to This Privacy Policy

We may update this Privacy Policy to reflect legal, technical, operational, or business changes.

The updated version will be published on this page with a revised “Last updated” date.

19. Company Contact Information

Nordic Cloud ApS
Trading name: Nordic Cloud
CVR number: 46584279
Registered office address: Lundeborgvej 71, 6000 Kolding, Denmark
Company operational address: Lundeborgvej 71, 6000 Kolding, Denmark
Postal address: Lundeborgvej 71, 6000 Kolding, Denmark
Website: nordcld.com
Email: contact@nordcld.com