Privacy policy

Who we are

Nordic Eco Water Solutions AS ("NEWS", "we", "us") is the data controller for personal data processed through this website. You can reach us at contact@nordicews.com or by post at Cort Adelers gate 17, Oslo, Norway.

What data we collect

• Contact form details you submit: name, email address, and optionally organisation, country, enquiry type and the content of your message.
• Investor access details: the email address used to request access, and technical metadata such as the request time and IP address, used to protect the access process from abuse.
• Administrator accounts: email address and authentication data for team members who publish website content.
• Optional analytics data about page views and device type, collected only if you accept analytics cookies.

Why we process it and on what basis

• To answer your enquiry — legitimate interest in responding to people who contact us, and your consent given when submitting the form.
• To operate secure access to investor materials — legitimate interest in protecting confidential information.
• To operate and secure the website, including administrator sign-in — legitimate interest in running our own services.
• To understand how the site is used — your consent, given through the cookie banner.

How long we keep it

Contact enquiries are kept for up to 24 months after our last correspondence with you. One-time investor access codes expire within minutes and are stored only in hashed form. Analytics data is retained in aggregated form. We delete data earlier when it is no longer needed or when you ask us to.

Who processes data on our behalf

We use service providers for website hosting, database storage and mapping. They act on our instructions under data processing agreements and may not use your data for their own purposes. Where data is transferred outside the EEA, we rely on the European Commission's standard contractual clauses.

How we protect data

Data is stored in access-controlled databases with row-level access rules, encrypted in transit over HTTPS, and reachable only by team members who need it for their work. Investor access codes are never stored in readable form.

Your rights

• Access a copy of the personal data we hold about you.
• Correct data that is inaccurate or incomplete.
• Ask us to delete your data, or restrict how we use it.
• Object to processing based on our legitimate interests.
• Withdraw consent at any time, without affecting processing already carried out.
• Lodge a complaint with your national data protection authority — in Norway, Datatilsynet.

To exercise any of these rights, write to contact@nordicews.com. We respond within 30 days.

Changes to this policy

We update this page when our processing changes. The date at the top always reflects the current version.