Nordic PCB

Legal

Privacy Policy

Nordic PCB ApS · Last updated: 17 May 2026

1. Introduction

Nordic PCB ApS ("Nordic PCB", "we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and share personal data when you visit nordicpcb.com, use our quotation portal or otherwise interact with us.

This Privacy Policy applies to personal data we process as a data controller under Regulation (EU) 2016/679 (the "GDPR") and the Danish Data Protection Act.

2. Data Controller

The data controller is:
Nordic PCB ApS
CVR no. 46360397
Horsensgade 7, 4. tv, 2100 København Ø, Denmark
Phone: +45 28 88 88 37
Email: info@nordicpcb.com

For privacy enquiries, contact us at info@nordicpcb.com.

3. Personal Data We Collect

We collect the following categories of personal data:

3.1 Information you provide

  • Contact details (name, email, phone, company name).
  • Account credentials when you register for the quotation portal.
  • Project files you upload, such as Gerber files, bills of materials (BOM) and related design data.
  • Communications you send to us (email correspondence, contact form submissions).
  • Payment and invoicing details, when you place an order.

3.2 Information collected automatically

  • Technical data such as IP address, browser type, device information and operating system.
  • Usage data, including pages visited, time spent and referring URL.
  • Cookies and similar technologies (see our Cookie Policy).

4. Purposes and Legal Basis

We process personal data for the following purposes and on the following legal bases under Article 6 GDPR:

  • To respond to enquiries and provide quotations (Article 6(1)(b) – steps prior to entering a contract).
  • To perform contracts with you, including processing orders, coordinating with suppliers, invoicing and delivery (Article 6(1)(b)).
  • To comply with legal obligations, such as accounting and tax requirements (Article 6(1)(c)).
  • To operate, maintain and improve our website and services, including security and fraud prevention (Article 6(1)(f) – legitimate interest).
  • To send transactional and service-related communications (Article 6(1)(b) and (f)).
  • To send marketing communications where you have consented or where permitted by law (Article 6(1)(a) or (f)).

5. How We Share Personal Data

We share personal data only as necessary to operate our services and as described below.

5.1 Suppliers and manufacturing partners

To fulfil quote requests and orders, we share relevant technical specifications and project files with selected ISO-certified European manufacturers and component distributors. We share only what is necessary for them to provide a quote or fulfil an order. Suppliers are subject to confidentiality undertakings and non-circumvention obligations.

5.2 Data processors

We use the following third-party processors to operate our services:

  • Vercel Inc. (USA) – website hosting and serverless infrastructure.
  • Cloudflare, Inc. (USA) – DNS, CDN and security services.
  • Resend (USA) – transactional email delivery.
  • UploadThing (USA) – file upload infrastructure for Gerber files and bills of materials.
  • Google Ireland Limited / Google LLC (Ireland / USA) – Google Workspace for our business email accounts.
  • Lovable AB (Sweden, EU) – development and deployment platform.

Each processor handles personal data on our behalf under a data processing agreement that meets the requirements of Article 28 GDPR.

5.3 Authorities and legal requirements

We may disclose personal data when required by law, regulation, court order or to protect our rights, property or safety, or that of others.

6. International Data Transfers

Some of our processors are located outside the European Economic Area (EEA), in particular in the United States. Where personal data is transferred outside the EEA, we rely on appropriate safeguards as required by Chapter V GDPR, including the European Commission's Standard Contractual Clauses or, where applicable, the EU–US Data Privacy Framework. You may request a copy of the safeguards in place by contacting us at info@nordicpcb.com.

7. Data Retention

We retain personal data only for as long as necessary for the purposes set out in this Privacy Policy, including:

  • Quote requests that do not result in an order: up to 24 months from the last interaction.
  • Order data and related communications: as required by Danish accounting law (currently 5 years from the end of the relevant financial year).
  • Account data: for as long as your account is active, and for a reasonable period thereafter.
  • Project files (Gerber files, BOMs): deleted or anonymised within 24 months of the last related order, unless retention is required by law or by an ongoing dispute.
  • Marketing data: until you withdraw consent or object to processing.

8. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration or disclosure. These include encryption in transit (TLS), access controls, secure infrastructure and contractual safeguards with our processors. No method of transmission or storage is completely secure. While we take reasonable measures, we cannot guarantee absolute security.

9. Your Rights

Subject to applicable law, you have the following rights regarding your personal data:

  • Right of access – to obtain confirmation of, and a copy of, the personal data we hold about you.
  • Right to rectification – to have inaccurate personal data corrected.
  • Right to erasure – to have your personal data deleted in certain circumstances.
  • Right to restriction – to restrict processing in certain circumstances.
  • Right to data portability – to receive your data in a structured, commonly used and machine-readable format.
  • Right to object – to object to processing based on legitimate interests or for direct marketing.
  • Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

To exercise your rights, contact us at info@nordicpcb.com. We will respond within one month, although this may be extended for complex requests. You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet, www.datatilsynet.dk) or your local supervisory authority.

10. Cookies

For information about how we use cookies and similar technologies, please see our Cookie Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or other reasons. The "Last updated" date at the top of this page indicates when the policy was most recently revised.

12. Contact

If you have any questions about this Privacy Policy or our handling of your personal data, please contact us:
Nordic PCB ApS
CVR no. 46360397
Horsensgade 7, 4. tv, 2100 København Ø, Denmark
Phone: +45 28 88 88 37
Email: info@nordicpcb.com