Privacy Information

Nordic Infrastructure Lab operates nordic-infra-lab.com. For questions about how we handle your personal data, contact us at [email protected].

Contact inquiries: When you contact us via email or the contact form on this site, we collect your name, email address, and the content of your message. This data is used solely to respond to your inquiry.

Engagement data: During authorized security or infrastructure engagements, we may process technical data about your systems as defined in the engagement scope agreement.

Website usage: This site does not use tracking cookies or third-party analytics. We do not collect behavioral data about visitors.

Contact inquiries are processed on the basis of legitimate interest (responding to your request). Engagement data is processed on the basis of contract performance (the scope agreement). We do not process personal data on the basis of consent for any purpose that requires an opt-in.

Contact inquiry data is retained for up to 24 months from the date of the last communication, after which it is deleted.

Engagement data is retained for the duration specified in the scope agreement, or for a maximum of 12 months after engagement completion, whichever is shorter, unless a longer retention period is required by law.

We do not sell, rent, or share personal data with third parties for marketing purposes. We may share data with service providers who assist in operating this site (such as hosting providers), subject to appropriate data processing agreements. We will disclose data if required to do so by law or in response to a valid legal process.

Under GDPR, you have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion of your data (subject to legal retention obligations), object to processing, and request restriction of processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority.

This site uses only technically necessary cookies required for basic site functionality. We do not use tracking, advertising, or analytics cookies. No consent is required for technically necessary cookies under GDPR.

We may update this privacy information from time to time. The date at the top of this page reflects the most recent revision. Continued use of this site after a revision constitutes acceptance of the updated policy.