Legal
Privacy Policy
This notice explains how Nord Space ApS processes personal data when you use nord-space.com, contact us, request a quote, use the expert finder or apply to join the consultant network.
Last updated 18 August 2026
1. Data controller
Nord Space ApS, CVR 41845287, Hørmarken 8, 3450 Allerød, Denmark, is the data controller for the processing described here. For any privacy question or to exercise your rights, write to contact@nord-space.com.
2. What we collect and why
We only collect data that you give us, plus basic technical data needed to serve the site.
| Context | Data | Purpose and legal basis |
|---|---|---|
| Contact form | Name, company, email, phone (optional), message | Answering your enquiry. Legal basis: steps prior to entering a contract, and our legitimate interest in responding to business enquiries (GDPR art. 6(1)(b) and (f)). |
| Quote request | Name, company, work email, phone (optional), requested consultant or team, scope description, start date, duration, workload | Preparing and delivering a quotation and staffing proposal. Legal basis: pre-contractual steps and performance of a contract (art. 6(1)(b)). |
| Expert finder | Your answers about discipline, mission type, project phase, timing and requirement text | Matching your requirement to consultants. The answers stay in your browser (session storage) unless you submit a quote request. Legal basis: legitimate interest in providing the matching service (art. 6(1)(f)). |
| Consultant application | Name, email, phone, location, disciplines, experience, rate expectations, availability, links and any CV document you upload | Assessing your application and, if relevant, presenting you to clients. Legal basis: pre-contractual steps (art. 6(1)(b)) and your consent for keeping your profile on file (art. 6(1)(a)). |
| Team sign-in | Email, authentication session | Securing the administration area. Legal basis: legitimate interest in protecting our systems (art. 6(1)(f)). |
| Server logs and cookies | IP address, browser type, pages requested, consent choice | Operating and securing the site (art. 6(1)(f)). Analytics and marketing cookies are only used with your consent (art. 6(1)(a)) - see our Cookie Policy. |
We do not ask for special categories of personal data. Please do not include health, political, religious or similar sensitive information in free-text fields or CV documents.
3. Confidentiality of consultant profiles
Some consultants in our network are listed anonymously. We only disclose a consultant's identity, full CV or client history to a client after the consultant has agreed, and normally under a non-disclosure agreement.
4. Who we share data with
We do not sell personal data. We share it only with processors and partners that need it to deliver our services:
- Hosting, database and file storage providers that run this website and our secure back office.
- Email delivery providers used to send transactional and notification emails.
- Clients and consultants involved in a specific engagement, limited to what is necessary to evaluate or perform it, and with the consultant's agreement.
- Advisers and authorities where we are legally required to disclose information.
All processors act under a data processing agreement and may only process data on our documented instructions.
5. International transfers
Our infrastructure is operated within the EU/EEA wherever possible. If a provider processes data outside the EU/EEA, the transfer is covered by an adequacy decision or by the European Commission's Standard Contractual Clauses together with supplementary safeguards. You can ask us for a copy of the safeguards in place.
6. How long we keep data
- Contact messages: up to 24 months after the last correspondence.
- Quote requests: up to 3 years after the request, or for the duration of the engagement plus the statutory bookkeeping period of 5 years where an engagement follows.
- Expert finder answers: kept in your browser only, and cleared when you close the tab or clear the prefill.
- Consultant applications and CVs: up to 24 months from the last activity, then deleted unless you ask us to keep your profile active.
- Server logs: normally up to 12 months.
- Cookie consent record: 12 months, or until you change your choice.
7. Security
Data is stored in access-controlled systems with encryption in transit, row-level access rules in our database and a private storage bucket for uploaded CVs that only authorised Nord Space team members can open. Access is limited to staff who need it.
8. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you and receive a copy.
- Have inaccurate data corrected and incomplete data completed.
- Have your data erased where we no longer have a valid basis for keeping it.
- Restrict or object to processing based on our legitimate interests.
- Receive data you provided in a portable, machine-readable format.
- Withdraw consent at any time, without affecting processing carried out before withdrawal.
Write to contact@nord-space.com and we will respond within one month. If you are unhappy with how we handle your data, you may complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, datatilsynet.dk.
9. Changes to this notice
We may update this notice as our services change. The current version is always published on this page with the date of the latest revision (18 August 2026).