PRIVACY POLICY

Updated November 9, 2026

1. Introduction

This Privacy Policy explains how ZJC Consult s.r.o., Company ID 17771650, with its registered office at Plzeňská 3350/18, 150 00 Praha 5-Smíchov, Czech Republic (the “Controller”), processes personal data in connection with the NORDVANDE website, contact forms, questionnaires, and services.

Contact email: info@nordvande.com

We process personal data to operate and secure the website, respond to inquiries, prepare proposals, and provide NORDVANDE services.

2. Categories of personal data processed

We may process the following categories of personal data:

  • first and last name;
  • business email address;
  • telephone number;
  • company name;
  • job title;
  • company identification data;
  • information provided through NORDVANDE contact forms or questionnaires;
  • information shared via email or other communication;
  • information necessary for preparing a proposal or providing services;
  • technical data regarding website visits, such as IP address, device, browser, and cookies, where relevant.

We do not process data from identity documents, personal identification numbers (birth numbers), PEP status, or information regarding personal cryptocurrency wallets unless necessary for a specific service and separately agreed with the client.

The main contact form collects your name, email address, a summary of your situation, the inquiry type, and the stage of your case. Please keep financial documents out of this form.

3. Source of personal data

We typically obtain personal data:

  • directly from you via forms, questionnaires, email, or direct communication;
  • from communications between you and NORDVANDE;
  • from public registers, where relevant for company identification or preparing a collaboration;
  • from professional partners or service providers, where necessary and legally justified.

If you provide us with personal data of other persons, such as employees, advisers, or corporate contacts, you are responsible for ensuring that they are adequately informed about this processing.

4. Why we process personal data

We process personal data primarily for:

  • responding to your message or inquiry;
  • processing contact forms and questionnaires;
  • assessing inquiries and preparing proposals for NORDVANDE services;
  • communicating before, during, and after our collaboration;
  • providing NORDVANDE services;
  • maintaining basic business, accounting, and administrative records;
  • protecting our legal claims;
  • ensuring the security of the website and systems;
  • measuring website traffic, if analytical tools are used;
  • sending commercial communications, where legally permissible or based on consent.

5. Legal basis for processing

Depending on the situation, we process personal data on the basis of:

  • steps taken at your request before entering into a contract, or performance of a contract;
  • legitimate interests, in particular for communication, administration, service preparation, security, and protection of legal claims;
  • legal obligations, in particular accounting, tax, or other statutory requirements;
  • consent, where required, for example for non-essential analytics or marketing cookies.

6. Retention period for personal data

We store personal data only for the period necessary for the relevant purpose.

In general:

  • inquiries that do not result in an engagement are kept only in corporate email for up to 14 calendar days from receipt and are then deleted;
  • data related to services are retained for the duration of the cooperation and subsequently for the period necessary to protect legal claims;
  • accounting and tax data are retained for the period stipulated by law;
  • data processed on the basis of consent are retained until consent is withdrawn or the relevant period expires;
  • analytical data and cookies are retained according to the settings of the specific tool used.

7. To whom personal data may be provided

Personal data may be shared to the extent necessary with:

  • Cloudflare for hosting, Turnstile spam protection, and delivery of form submissions to corporate email;
  • corporate email and other service tool providers, and Google for consented analytics;
  • accounting, tax, legal, compliance, or other professional advisers;
  • professional partners involved in providing NORDVANDE services;
  • public authorities, if required by law.

When we engage a qualified adviser for legal or tax advice, we share only the data needed for the agreed scope of work.

We do not sell personal data to third parties.

8. Data transfers outside the EU

We endeavour to process personal data within the Czech Republic or the European Union. Some providers of technical, cloud, analytical, or communication services may process data outside the EU.

If personal data are transferred outside the EU, we do so only in accordance with the GDPR, for example on the basis of an adequacy decision or standard contractual clauses.

9. Cookies and analytics

The website may use necessary cookies required for basic operation.

We use Google Analytics 4 with your consent to measure visits, traffic sources, approximate locations, devices, page interactions and successful form submissions. We do not send form contents to Google Analytics. Analytics cookies distinguish browsers and maintain sessions. Depending on the cookie and your browser, they can persist for up to two years. You can change your choice or withdraw consent at any time via Cookie preferences in the footer.

If you arrive from a ChatGPT ad and separately opt in on the questionnaire, we share the successful submission event, a random event identifier and the ad-click identifier, if available, with OpenAI. Your browser sends ordinary request metadata, including its IP address. We do not share contact details, answers or documents. This choice is optional and does not affect handling of your inquiry.

On the source-of-funds page, Meta Pixel loads only after separate optional consent. Meta receives a page view and a Lead event only after the server successfully accepts the inquiry, a random event identifier, the page URL and ordinary browser request metadata, including IP address and advertising identifiers. Contact details, answers and documents are not shared. Marketing cookies _fbp and _fbc may persist for up to 90 days. Withdraw consent by clearing the checkbox above the questionnaire. Your choice does not affect inquiry handling. This consent is separate from Google Analytics and ChatGPT ad measurement.

10. Automated decision-making

We do not use personal data for automated decision-making that would have legal effects on you or similarly significantly affect you.

11. Data security

We protect personal data using appropriate technical and organisational measures against unauthorised access, loss, misuse, alteration, or destruction.

Access to personal data is limited to persons who need it for the purposes described in this Privacy Policy.

12. Your rights

Under the GDPR, you may have the right to:

  • request access to your personal data;
  • request rectification of inaccurate or incomplete data;
  • request erasure of personal data, provided the legal conditions are met;
  • request restriction of processing;
  • object to processing based on legitimate interests;
  • withdraw your consent, if processing is based on consent;
  • request data portability, where relevant;
  • lodge a complaint with a supervisory authority.

The supervisory authority in the Czech Republic is the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, Czech Republic.

13. Contact

For questions regarding the processing of personal data or to exercise your rights, contact us at info@nordvande.com.

14. Updates

We may update this Privacy Policy from time to time, particularly if there are changes to the website, tools, services, scope of processing, or legal requirements.