Privacy policy – Nordma.domains

1. Data controller

Nordma AS, org. no. 936 400 930, Buskerudveien 215c, 3027 Drammen, Norway, is the data controller for personal data processed in Nordma.domains. Contact: info@nordma.com.

2. What we process and why

• Account data (email, password hash, login and security events) – to provide the account (contract).
• Login history (time, IP address, the approximate country and internet provider derived from it via RIPEstat, device and browser) – to keep your account secure and show you your sign-ins (legitimate interest).
• Profile and billing data – to invoice and meet bookkeeping obligations (legal obligation).
• Wallet and transaction data – to provide the service and meet bookkeeping obligations.
• Domain registrant data – sent to the relevant registry (e.g. NASK, Norid) as required to register a domain.
• Marketing email – only with your consent, which you can withdraw at any time.

3. Processors and recipients

[To be completed: hosting provider, email provider, payment provider, registries and registrar partners.]

4. Retention

[To be completed: account data until deletion; bookkeeping records for the period required by Norwegian law.] Login history is kept for 180 days.

5. Your rights

You can access, export, correct and delete your data from your account, and object to or restrict processing. You may complain to Datatilsynet or to the supervisory authority in your country.

6. Cookies

We only use strictly necessary cookies (for example, the login session).