Privacy Policy — Nordlytics AB

Last updated: October 2026

1. Who we are

Nordlytics AB ("Nordlytics", "we", "us") is a Swedish limited liability company that operates this website and provides technology consulting services. For the purposes of the EU General Data Protection Regulation (GDPR), Nordlytics AB is the data controller for personal data processed through this website.

Nordlytics AB
Org.no 559323-4874
Neptunigatan 71 Lgh 1508
211 09 Malmö
Sweden
Email: nordlytics@nordlytics.se

2. Personal data we collect

We keep data collection to a minimum:

Contact by email. When you contact us by email, we process the information you choose to provide — typically your name, email address and the contents of your message — in order to respond.
Technical and server data. Our website is served through our hosting provider. When you visit the site, the provider may process technical data such as your IP address, browser type, referring page, and the date and time of your request, in security and traffic logs.
Cookies. This website does not use tracking cookies, advertising cookies or third-party analytics cookies. Only cookies or local storage that are strictly necessary for the technical delivery of the site may be used.

3. Purposes and legal bases

To respond to your enquiries — performance of a contract or steps prior to entering into a contract (GDPR Article 6(1)(b)), or our legitimate interest in communicating with prospective clients (Article 6(1)(f)).
To operate and secure the website (security logging, abuse prevention) — our legitimate interest in maintaining a safe and available service (Article 6(1)(f)).
To comply with legal obligations, such as accounting and tax legislation (Article 6(1)(c)).

We do not use personal data for automated decision-making or profiling, and we do not sell personal data to anyone.

4. Data retention

Email correspondence is retained for as long as needed to handle your enquiry and for up to 24 months thereafter, unless a longer retention is required by law or an ongoing business relationship motivates it.
Technical logs are retained only for the period our hosting provider keeps them for security purposes.

5. Sharing of personal data

We share personal data only with:

Hosting and infrastructure providers (such as Cloudflare, Inc.) that process technical data on our behalf as data processors, under data processing agreements, in order to deliver and secure the website.
Authorities, where we are legally required to disclose information.

Some of these providers may process data outside the EU/EEA. Where that occurs, transfers are safeguarded by the European Commission's Standard Contractual Clauses or an adequacy decision.

6. Your rights

Under the GDPR you have the right to:

access the personal data we process about you;
have inaccurate data rectified;
have your data erased ("right to be forgotten");
restrict or object to processing;
data portability where processing is based on consent or contract;
withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us at nordlytics@nordlytics.se. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY — Integritetsskyddsmyndigheten).

7. Security

We apply appropriate technical and organisational measures to protect personal data, including encrypted transport (HTTPS), access control, and limiting the data we collect in the first place.

8. Children

This website is not directed at children under 16, and we do not knowingly collect personal data from children.

9. Changes to this policy

We may update this policy from time to time. The latest version is always published on this page with its "last updated" date.

10. Contact

For questions about this policy or our processing of personal data, contact nordlytics@nordlytics.se or write to Nordlytics AB, Neptunigatan 71 Lgh 1508, 211 09 Malmö, Sweden.