Privacy Policy
Last updated: 14 October 2026
Version 1.0
1. About the policy and the data controller
This privacy policy describes how Nordic Nexum processes personal data when you visit nordicnexum.com or contact us about our business and services.
The data controller is:
Nordic Nexum ApS
CVR no.: 46771133
c/o 365 Design Studio
Klostergade 32 B, st.
8000 Aarhus C
Denmark
Email: contact@nordicnexum.com
2. Inquiries and communication
When you contact us by email, we process your email address and the information you share with us. This may, for example, include your name, phone number, company, job title and the content of your inquiry.
The purpose is to answer your questions, discuss possible collaboration and follow up on your inquiry.
As a general rule, the processing is based on our legitimate interest in handling inquiries and communicating with potential customers and business partners, cf. GDPR Article 6(1)(f).
If the inquiry concerns entering into or performing a contract to which you yourself are a party, the processing may take place under GDPR Article 6(1)(b).
Contacting us and providing information is voluntary. However, if we do not receive the necessary contact details or information about your request, we may not be able to respond to it.
Please do not send your CPR number (Danish personal identification number), health information or other sensitive or confidential personal data in an ordinary email.
3. Visiting the website
You can visit the website without creating an account or providing your name and email address.
When you visit, our technical providers may process information such as:
- IP address.
- Browser and device information.
- Time of the visit and pages requested.
- Technical errors as well as operational and security information.
The purpose is to deliver the website, fix errors, ensure stable operation and protect against misuse and security incidents.
The legal basis is our legitimate interest in operating and protecting the website, cf. GDPR Article 6(1)(f).
4. Cookies, browser storage and fonts
The website uses local browser storage to remember your language choice. The information is stored under the name nn-lang in your browser and is used to display the website in the selected language.
The language choice has no fixed expiry date. It changes when you select another language and can be removed by clearing the website's data in your browser. The information is not sent to us as a separate record.
The website's fonts are hosted together with the website. Therefore, no requests are made to Google Fonts to load fonts.
We do not use our own analytics tools or marketing cookies on the website. Hosting and security may involve technical processing as described in section 3.
If we introduce cookies or similar technologies that require consent, we will obtain consent before they are used and provide an option to withdraw it.
5. Providers and recipients
We use external providers to support the website and our communication, including:
- Lovable: Development, hosting and technical operation of the website, including error reporting.
- one.com: Domain and email services.
The providers may process personal data to the extent necessary to deliver their services.
When a provider processes personal data on our behalf as a data processor, the processing must follow our instructions and be covered by a data processing agreement. Providers may also be independent data controllers for certain processing activities for which they themselves determine the purpose.
We may disclose information to public authorities if we are legally obliged to do so. In such cases, the legal basis is GDPR Article 6(1)(c), read in conjunction with the relevant legislation.
We do not sell personal data.
6. Processing outside the EU/EEA
Our providers' use of sub-processors or support may involve processing of personal data outside the EU/EEA.
Such transfers require a valid basis under Chapter V of the GDPR. This may be a relevant adequacy decision from the European Commission or the European Commission's standard contractual clauses, supplemented by additional safeguards where necessary.
You can contact us at contact@nordicnexum.com for information about specific transfers and to obtain a copy of the relevant safeguards.
7. Retention and deletion
We retain personal data for as long as it is necessary for the purpose for which it was collected.
Inquiries and email correspondence
We assess the need for retention based on whether the inquiry has been concluded, whether follow-up has been agreed and whether the correspondence forms part of an ongoing offer or collaboration. Information is deleted when there is no longer a relevant and lawful need for it.
Technical information and error reports
The need for retention is assessed based on the information's importance for operations, troubleshooting and investigation of security incidents. Information must be deleted or anonymised when it is no longer necessary for these purposes.
Language choice
The language choice is stored in your browser as described in section 4.
Information may be retained for longer if necessary to comply with specific legal obligations or to establish, exercise or defend legal claims.
8. Your rights
Under the GDPR, depending on the specific processing, you have the right:
- To access the personal data we process about you.
- To have inaccurate information rectified.
- To have information erased.
- To have the processing restricted.
- To object to processing based on legitimate interests.
- To receive information in a structured, commonly used and machine-readable format and have it transmitted to another data controller when the conditions for data portability are met.
If processing is based on consent, you may withdraw your consent at any time. This does not affect the lawfulness of the processing that took place before the withdrawal.
We do not use information from the website or ordinary inquiries for solely automated decisions, including profiling, which produce legal effects or similarly significantly affect you.
You can exercise your rights by writing to contact@nordicnexum.com.
We will respond to your request without undue delay and, as a general rule, no later than one month after receipt. If the deadline is lawfully extended, you will be informed within the first month, with the reasons.
We may ask for additional information if necessary to confirm your identity.
9. Complaints
If you are dissatisfied with our processing of your personal data, you are welcome to contact us.
You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet):
Datatilsynet
www.datatilsynet.dk
You may also lodge a complaint with the relevant supervisory authority in the EU country where you habitually reside or work, or where the alleged infringement took place.
10. CareerNavo and changes to the policy
Nordic Nexum ApS is also behind CareerNavo. The processing of personal data in connection with CareerNavo is described in the platform's separate privacy policy:
We update this policy when our processing of personal data changes. If we intend to process your information for a new purpose, we will provide you with the necessary information before the processing begins.
The current version is available on the website's Privacy Policy page.
Nordic Nexum ApS
contact@nordicnexum.com