Privacy Policy

1. Introduction

Nordera Holding Ltd ("Nordera", "we", "our", "us") is committed to protecting the privacy of individuals who interact with us through this website. This Privacy Policy explains how we collect, use, store, and protect personal information in accordance with the General Data Protection Regulation (GDPR) and applicable Maltese data protection law.

By using this website and submitting information through our contact forms, you agree to the practices described in this policy.

2. Data Controller

The data controller for the purposes of this policy is:

Nordera Holding Ltd
The Core, Triq il-Wied
Ta' l-Imsida, Msida MSD 9021
Malta
Email: contact@norderaholding.com

3. What Information We Collect

We collect only the information that is necessary to respond to your enquiry. This may include:

• Your name and email address
• Company or organisation name
• Country of operation
• The content of your enquiry or message
• Enquiry type and sector (if provided)

We may also collect limited technical data such as browser type and page access time for website security and performance monitoring. This data is anonymised and not linked to individuals.

4. How We Use Your Information

We use the information you provide solely to:

• Assess and respond to your enquiry
• Follow up on correspondence where relevant
• Comply with any applicable legal obligations

We do not use your personal information for marketing purposes. We will not add you to any mailing list or contact you for purposes other than responding to your enquiry without your explicit consent.

5. Legal Basis for Processing

We process your personal information on the following legal bases:

• Consent — you provide this at the point of form submission
• Legitimate interests — in assessing and responding to business enquiries directed to us

6. Cookies and Tracking

This website uses only technically essential cookies and local browser storage necessary for its operation. We do not use advertising cookies, social media tracking pixels, analytics cookies, or any form of cross-site tracking.

When you visit this website, a cookie preference record is stored in your browser's local storage to remember your consent choice. This is not transmitted to any server and does not identify you personally.

You have the right to reject non-essential cookies at any time by clicking "Reject" on the cookie notice or by clearing your browser's local storage.

7. International Data Transfers

Nordera Holding Ltd is registered in Malta, a member state of the European Union. Any personal data you submit through this website is processed within the EU/EEA. Our email delivery service (Brevo) is operated by Sendinblue SAS, a French company subject to GDPR. No personal data is transferred to third countries without appropriate safeguards.

8. Automated Decision Making

We do not use automated decision-making or profiling in relation to the personal data we collect through this website.

9. Supervisory Authority

You have the right to lodge a complaint with a supervisory authority. In Malta, the relevant authority is the Information and Data Protection Commissioner (IDPC): idpc.org.mt. You may also contact the supervisory authority in your country of residence.

10. Information Sharing

Your personal information is never sold, rented, or transferred to third parties for commercial purposes. We do not share your information with external parties except where required by law or by a court of competent jurisdiction.

11. Data Retention

We retain personal data submitted through our contact forms for a maximum of 24 months from the date of submission, after which it is securely deleted. Where an ongoing business relationship exists, we retain information only for as long as is necessary for that relationship and as required by applicable law.

12. Data Security

We apply appropriate technical and organisational measures to protect personal information against unauthorised access, loss, or disclosure. All data transmitted through this website is encrypted in transit using industry-standard protocols.

13. Your Rights

Under GDPR, you have the following rights with respect to your personal data:

• The right to access the information we hold about you
• The right to correction of inaccurate information
• The right to deletion of your information
• The right to object to processing
• The right to data portability
• The right to withdraw consent at any time

To exercise any of these rights, please contact us at contact@norderaholding.com. We will respond to all such requests within 30 days.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected by an updated effective date at the top of this page. Continued use of this website following any update constitutes your acceptance of the revised policy.

15. Contact

For any questions or concerns regarding this Privacy Policy, please contact us at: contact@norderaholding.com