Privacy Policy

How this policy applies

Welcome to NordicEstab.dk. We are committed to protecting the privacy of our clients and website visitors. This Privacy Policy outlines how we collect, use, store and protect your personal data in compliance with the General Data Protection Regulation (GDPR) and the Danish Data Protection Act.

This policy explains how NordicEstab processes personal data; visiting the website does not itself constitute consent. Where consent is required—for example, for analytics or advertising technologies—we request it through the cookie settings before those technologies are activated.

Data Controller

The data controller responsible for processing your personal data is:

• NordicEstab ApS
• Flæsketorvet 68, 1., 1711 København V, Denmark
• CVR no. 44239248
• Email: info@nordicestab.dk
• Telephone: +45 26 39 62 77

Personal Data We Collect

NordicEstab ApS, Flæsketorvet 68, 1., 1711 København V, Denmark (“we,” “our,” or “us”) is committed to protecting your privacy. This policy explains how we collect, use and safeguard your personal data when you visit our website or use our services.

Data you provide to us

• Contact information: Name, email address and phone number.
• Company and business information: Details required for company registration, such as legal name, address, CVR number—and, for a sole proprietorship, information that can be personal data—and financial information.
• Identification data: Information necessary for official registrations with Danish authorities, which may include names, addresses and other personal identifiers.

Data we collect automatically

• Technical data: IP address, browser type and version, device information and operating system.
• Usage data:If analytics or marketing consent is given, we may collect pseudonymous technical and usage data, including pages viewed, referrer, browser and device information, approximate location and interaction events. Necessary technical logs may be processed separately to operate and secure the website.

Purposes and Legal Basis for Processing

• To provide our services: We process personal data to fulfil contractual obligations, such as registering your company, handling accounting and managing payroll. Legal basis: Article 6(1)(b) GDPR, performance of a contract.
• To communicate with you: We use contact information to respond to enquiries, provide client support and send important service-related information. Legal basis: Article 6(1)(b) GDPR, performance of a contract, or Article 6(1)(f) GDPR, legitimate interests such as managing client relationships.
• For marketing purposes: With your consent, we may send newsletters or promotional materials about our services. Legal basis: Article 6(1)(a) GDPR, consent. You may withdraw consent at any time.
• For website analytics and improvement:Optional website analytics are currently disabled. If NordicEstab enables analytics later, it will be activated only after a consent mechanism allows the visitor to make the relevant choice.Legal basis:If analytics is enabled later, the intended legal basis is Article 6(1)(a) GDPR, consent. Consent will be optional and withdrawable.
• To comply with legal obligations: We process and store certain data as required by Danish law, including bookkeeping and tax rules. Legal basis: Article 6(1)(c) GDPR, compliance with a legal obligation.

Opt-Out of Communications

If you no longer wish to receive emails or marketing communications from us, you can click “unsubscribe” in any email we send or contact us at info@nordicestab.dk to request removal.

Data Processors and Recipients

We may share your personal data with the following categories of recipients:

• Danish public authorities: We transmit personal data to relevant public bodies, such as the Danish Business Authority (Erhvervsstyrelsen) and the Danish Tax Agency (Skattestyrelsen), as part of the services we provide.
• Third-party service providers: We use processors such as IT hosting providers, payment processors and accounting software providers. These providers process data on our behalf and in accordance with our instructions.
• Google Ads:Google Ads and advertising tags are currently disabled. If marketing technologies are enabled later, they will not receive online identifiers or interaction data before the required consent.

Use of Cookies

Necessary technologies required for basic website operation remain active. Optional analytics and marketing technologies are currently disabled. If they are introduced later, this policy and the website’s consent controls will be updated before activation.

• Essential cookies: Necessary for the website’s basic functionality.
• Performance and analytics cookies:Google Analytics 4 is currently disabled. If analytics is enabled later, it will be used only after the relevant consent and the policy will describe the data, purpose and withdrawal method.
• Marketing cookies:Google Ads and other marketing technologies are currently disabled. They will not be activated until an appropriate consent mechanism and updated disclosure are in place.

Data Security

We apply technical and organisational measures designed to protect personal data, taking account of the nature, scope, context and risks of the processing. The measures are reviewed as practices and risks change. No method of transmission or storage is completely secure.

Your Data Protection Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right to access: Request access to the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: In certain circumstances, request deletion of your personal data.
• Right to restriction of processing: Request that we limit processing of your personal data.
• Right to data portability: Receive your data in a structured, commonly used format and have it transmitted to another controller.
• Right to object: Object to processing based on legitimate interests or for direct-marketing purposes.
• Right to withdraw consent:Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal. The available withdrawal method will be stated wherever consent-based processing is offered.

To exercise any of these rights, contact us using the controller details above.