NordVerk AB logo

Privacy Policy

Your privacy matters to us. Below we explain what personal data we process, why, for how long, and the rights you have under GDPR.

Last updated: 2026-05-20

This privacy policy explains how NordVerk AB processes your personal data when you visit nordverkab.se or contact us through the site. We comply with the EU General Data Protection Regulation (GDPR, 2016/679), the Swedish Data Protection Act (2018:218), and the Swedish Electronic Communications Act (2022:482).

1. Data controller

NordVerk AB is the data controller for the processing of personal data on this website. You can reach us at:

2. What data we collect

We only process data you provide to us or that is generated automatically when you visit the site.

2.1 Data you submit via contact form or email

  • Name
  • Email address
  • Phone number (optional)
  • Postcode or area (so we can provide an accurate quote)
  • Selected service and free-text message

2.2 Data collected automatically

  • IP address (truncated as soon as possible)
  • Browser type, operating system, and language
  • Pages visited, timestamps, and referring URL
  • Any technical error messages

We do not collect sensitive personal data (such as data about health, religion, or political opinions). We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.

3. Purposes and legal bases

We process personal data for the following purposes, relying on the legal bases set out in Article 6 GDPR.

  • Answering enquiries and providing quotes. Legal basis: Article 6(1)(b) (pre-contractual measures) or legitimate interest (6(1)(f)) in responding to business enquiries.
  • Planning and delivering garden services. Legal basis: Article 6(1)(b) (performance of a contract).
  • Statistics and improving the website through Google Analytics 4 and Microsoft Clarity. Legal basis: Article 6(1)(a) (consent). You may withdraw consent at any time via Cookie settings in the footer.
  • Operation, security, and troubleshooting (logs, firewall, abuse protection). Legal basis: legitimate interest (6(1)(f)) in keeping the service safe and functional.
  • Complying with legal obligations such as bookkeeping or responding to lawful authority requests. Legal basis: Article 6(1)(c) (legal obligation), including the Swedish Bookkeeping Act (1999:1078).

4. How long we keep your data

  • Enquiries that do not lead to a contract: deleted no later than 12 months after the last contact.
  • Customer and assignment data: retained for the duration of the customer relationship and as required by law.
  • Accounting records (invoices, receipts): 7 years under the Swedish Bookkeeping Act.
  • Analytics data (Google Analytics): default retention of 14 months, after which it is anonymised or deleted.
  • Microsoft Clarity: session data is deleted within 13 months.
  • Server and security logs: up to 90 days.

5. Who we share data with

We never sell your data. To operate the website and our business we use the following processors, each bound by a data processing agreement (DPA):

  • Vercel Inc. (USA) for hosting and CDN of nordverkab.se.
  • Google Ireland Ltd. / Google LLC (Ireland / USA) for Google Analytics 4 and Google Search Console.
  • Microsoft Ireland Operations Ltd. / Microsoft Corporation (Ireland / USA) for Microsoft Clarity, anonymised UX analytics.
  • Pexels GmbH (Germany) delivers photography via the Pexels CDN.
  • Our email provider receives messages from the contact form.

We may also disclose data to Swedish authorities (such as the Tax Agency or the police) when required by law.

6. International transfers

Some of our processors are based in the USA or have group companies there. When personal data is transferred outside the EU/EEA we apply safeguards under Articles 44 to 49 GDPR, mainly:

  • The European Commission's Standard Contractual Clauses (SCC, 2021/914).
  • The EU-US Data Privacy Framework where the recipient is certified.
  • Technical measures such as TLS encryption, pseudonymisation, and IP anonymisation.

7. Cookies and tracking

We use cookies and similar technologies in accordance with Chapter 6, Section 18 of the Swedish Electronic Communications Act. A cookie banner is shown when you visit the site, and no non-essential cookies or tracking scripts load before you give your consent.

We group cookies into three categories:

  • Necessary (always on): for example your language preference and the storage of your cookie choice. Required for the site to function and do not need consent.
  • Statistics (consent required): Google Analytics 4 (anonymised IP) and Microsoft Clarity. Help us understand how the site is used and improve content.
  • Marketing (consent required): currently not in use. The category is reserved should we add ad measurement in the future.

Google Search Console operates server-side and does not place cookies on your device. It is part of Google's processing and is mentioned here for transparency.

You can change your choice at any time via the Cookie settings link in the footer, or by clearing cookies in your browser.

8. Your rights

Under GDPR you have the right to:

  • Be informed about and access your personal data (Art. 15).
  • Have incorrect or incomplete data corrected (Art. 16).
  • Request erasure when the data is no longer needed (Art. 17, with some exceptions such as accounting).
  • Request restriction of processing (Art. 18).
  • Receive your data in a structured format or have it transferred to another controller (data portability, Art. 20).
  • Object to processing based on legitimate interests (Art. 21).
  • Withdraw consent at any time, without affecting the lawfulness of processing before the withdrawal.

Send your request to info@nordverkab.se. We respond within one month.

You also have the right to lodge a complaint with the supervisory authority: the Swedish Authority for Privacy Protection (IMY), Box 8114, 104 20 Stockholm, email imy@imy.se.

9. Security

We protect your data with technical and organisational measures, including TLS encryption, access control, regular security updates, and agreements with all data processors.

10. Changes to this policy

We may update this policy following changes to our business or to applicable law. The latest version is always published on this page and the date of the update is shown at the top.

11. Contact us

Questions about how we process your personal data? Get in touch: