Last updated: April 2026
Data Controller
The data controller for nornilo.com is:
Nornilo ApS
CVR: 46359347
Badensgade 40, 1
2300 København S
Denmark
Email: [email protected]
What data we collect
Email correspondence
When you contact us by email or through our booking page, we collect your name, email address, and the content of your message. This data is used solely to respond to your enquiry and manage our business relationship with you.
Analytics
We use Plausible Analytics to understand how visitors use our website — which pages are visited and where visitors come from. Plausible is cookieless: it does not use cookies, does not collect personal data, and does not write to your device. No cookie consent is required for Plausible.
Why we collect it
We collect personal data only where we have a legitimate purpose:
- To respond to enquiries you initiate (email, booking)
- To understand how our website is used and improve it (analytics)
- To fulfil contractual obligations if you engage our services
We do not sell personal data. We do not use personal data for automated decision-making.
How long we keep it
- Email enquiries (no engagement follows): 12 months from receipt
- Analytics data: aggregated only — Plausible does not retain personal data
- Client engagement data: for the duration of the engagement plus 5 years, as required by Danish bookkeeping law
Cookies
This website does not use cookies. Plausible Analytics, our only analytics tool, is cookieless and does not write to your device.
Third-party services
We use the following third-party services that may process personal data:
- Plausible Analytics — provides website usage statistics. Cookieless, no personal data collected, data processed in the EU. See plausible.io/privacy.
- Microsoft Bookings — if you use the booking link on this site, you are directed to Microsoft's scheduling service. Microsoft's own privacy policy applies from that point. See microsoft.com/privacy.
Your rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate data
- Erase your data, where there is no legal basis for us to retain it
- Restrict processing of your data in certain circumstances
- Data portability — receive your data in a structured, machine-readable format
- Object to processing based on legitimate interests
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet): www.datatilsynet.dk
Changes to this policy
We may update this policy from time to time. The date at the top of this page reflects the most recent revision. We will notify you of material changes via email if we have an ongoing relationship with you.