Privacy Policy
NordOps Consulting SL respects your privacy. This page describes what personal data we collect, why we collect it, and how we handle it.
Data controller
NordOps Consulting SL
Registered office: Plaza de la Constitución 16, 4A, 29640 Fuengirola, Málaga, Spain
Email: contact@nordopsconsulting.com
NordOps Consulting SL is registered in the Commercial Registry of Málaga under Tax ID (CIF) B27664671. Its full identifying details are set out in the Legal Notice section below.
What we collect
- Information you submit through our contact form — name, email, company name, company size band, and the message you write.
- Any further email correspondence you send us.
- The messages you write in the website chat, if you use it.
Why we collect it
To respond to your enquiry, schedule the discovery call you request, and — if a business relationship follows — deliver the services you contract us for. We do not use this data for marketing or share it with third parties for advertising.
Analytics
We measure aggregate site usage — which pages are read, where readers arrive from, how long visits last — so we can improve the content. We do not identify individual visitors, build profiles, or use analytics for advertising.
Tools and recipients. We use two tools. Umami is an open-source analytics tool that NordOps Consulting hosts on its own server in Falkenstein, Germany; its data is collected, stored and read entirely on infrastructure we control. Metricool, provided by Metricool Software, S.L. (Madrid, Spain), shows our website traffic next to our social media statistics; it acts as our data processor and stores its data on servers within the European Union. Nothing is transferred outside the EEA.
Data processed. Page address, referring page, browser, operating system, device type, screen size, browser language, and country. Your IP address is used only momentarily to derive the country and to compute an anonymous daily visitor hash; it is never written to storage, and the hash cannot be reversed or linked across days.
Data sent to Metricool. On each page view your browser requests a small image from Metricool. The request carries the page address, the referring page and the size of your browser window, and, like any request on the internet, your IP address and browser type.
No cookies. Neither tool sets cookies or stores an identifier on your device, so there is nothing to consent to and nothing to withdraw. See the Cookie Policy below.
Legal basis: legitimate interests (GDPR Article 6(1)(f)). Understanding how our own website is used is a legitimate interest, and because the measurement is cookieless, stays inside the EU, and involves no profiling or advertising, the impact on your privacy is minimal. You may object at any time — see “Your rights” below.
Retention. Aggregated statistics are retained indefinitely. Umami stores no personal data, so there is nothing tied to you to delete there; Metricool keeps its data under its data-processing terms with NordOps Consulting.
Opting out. The analytics opt-out page stops your browser being counted by both tools.
Website chat
If you write in the website chat, an artificial intelligence assistant answers your questions using NordOps Consulting’s information. The content of your messages and the conversation are processed in order to answer you and, if you ask, to put you in touch with a person from our team.
Provider. The chat is provided by LINKPRO AI, S.L. (DM Handled, CIF B93832897, Marbella, Spain) as NordOps Consulting’s data processor. Its sub-processors are Hetzner Online GmbH (hosting, in Germany and Finland), Anthropic PBC (which writes the replies, in the United States) and Sendinblue SAS / Brevo (which delivers our notification emails, in the EU). Data sent to Anthropic is not used to train its models. Because Anthropic is in the United States, the standard contractual clauses approved by the European Commission apply (GDPR Article 46). The full list is published at dmhandled.com/legal/subprocessors.
What is stored. The chat stores nothing on your device until you send it a message. Then it keeps only an identifier that continues your conversation, in your browser’s local storage, with no cookies. The chat loads with each page, so the chat service receives your browser’s IP address in order to display it.
Legal basis. Loading the chat: our legitimate interest in offering it (GDPR Article 6(1)(f)). The conversation: your request for information (GDPR Article 6(1)(b)).
Retention. Conversations are kept for as long as needed to deal with your enquiry, and you can ask us to delete them at any time by writing to contact@nordopsconsulting.com. If you ask to be contacted, our team is alerted by email with your name, how you want to be contacted and what you wrote.
Legal basis for processing
Under GDPR Article 6, every processing activity must have a legal basis. The bases we rely on are as follows:
- Contact form and discovery call requests — Contract performance (Article 6(1)(b)). The data is necessary to respond to the enquiry you initiated.
- Email correspondence with prospects and clients — Contract performance (Article 6(1)(b)) prior to engagement; legitimate interests (Article 6(1)(f)) for follow-up communications post-engagement.
- Analytics — Legitimate interests (Article 6(1)(f)). Cookieless measurement on our own infrastructure and through Metricool inside the EU, with no profiling.
- Website chat — Legitimate interests (Article 6(1)(f)) for loading the chat; your request for information (Article 6(1)(b)) for the conversation.
- Storage of tax-related communications and invoices — Legal obligation (Article 6(1)(c)). Spanish tax law requires retention of business records for at least four years.
- Security and abuse prevention, e.g. blocking spam contact-form submissions — Legitimate interests (Article 6(1)(f)).
How long we keep it
Contact data is retained for as long as necessary to respond to your enquiry and for any subsequent commercial relationship. Where no commercial relationship is established, contact data is deleted within twelve months of last contact. Analytics retention is described in the Analytics section above.
Your rights under GDPR
Under the General Data Protection Regulation (GDPR) you have the right to access, rectify, erase, port, restrict, and object to processing of your personal data. Where we rely on legitimate interests — as we do for analytics — you have the right to object under Article 21, and we will stop that processing for you. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out beforehand.
To exercise any of these rights, email contact@nordopsconsulting.com.
You also have the right to lodge a complaint with the Spanish data protection authority (Agencia Española de Protección de Datos). The authority’s main site is aepd.es; complaints can be filed directly via AEPD’s online complaint form.