Privacy policy
Last updated: 3 October 2026
1. Controller
NordElev OÜ, registry code 17388250, VAT EE103003302, Tuukri tn 19-315, 10120 Tallinn, Estonia. Email: [email]@nordelev.com
2. What data we process
- Contact requests: name, phone number or email, the description of your building or request, page language, time of submission.
- Technical data: IP address and browser information, processed by our hosting provider and spam protection when you visit the site or send the form.
- Analytics (only with your consent): pseudonymous usage data such as pages visited, device type and approximate location (country/city), collected by Google Analytics.
3. Purposes and legal bases
- Answering your request and preparing an offer — Art. 6(1)(b) GDPR (steps prior to a contract).
- Protecting the website and the form against spam and abuse — Art. 6(1)(f) GDPR (legitimate interest in security).
- Website analytics — Art. 6(1)(a) GDPR (your consent, which you can withdraw at any time).
4. Recipients and processors
- Vercel Inc. (USA) — website hosting.
- Resend (USA) — delivery of form messages by email.
- Cloudflare, Inc. (USA) — Turnstile spam protection.
- Google Ireland Limited — Google Analytics, only with your consent.
Transfers to the USA are based on the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.
5. Retention
- Contact requests: up to 24 months after our last contact, unless a contract follows; then according to statutory retention periods.
- Analytics data: up to 14 months.
- Consent choice: stored in your browser for 12 months.
6. Cookies
| Name | Purpose | Duration | Type |
|---|
nordelev_consent | stores your cookie choice | 12 months | necessary |
_ga, _ga_* | Google Analytics — distinguishing visitors | up to 14 months | analytics, only with consent |
Cloudflare Turnstile processes technical signals to detect bots; it is not used for advertising.
7. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interest. You can withdraw your consent at any time via "Cookie settings" — this does not affect processing carried out before withdrawal. To exercise your rights, write to [email]@nordelev.com.
8. Complaints
You can lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, www.aki.ee, or with the supervisory authority in your country of residence.
9. Automated decisions
We do not use automated decision-making or profiling.
10. Changes
We may update this policy. The current version is always available on this page.