Privacy Policy

Effective Date: March 26, 2026

Last Updated: March 26, 2026

This Privacy Policy explains how Nordvia Supply ("we," "us," or "our") collects, uses, stores, shares, and otherwise processes personal data when you visit or use nordvia-supply.com (the "Site"), contact us, request information, create an account, place orders, or otherwise interact with us.

We are committed to handling personal data in accordance with applicable data protection laws, including, where applicable, the General Data Protection Regulation ("GDPR") and other applicable national data protection laws.

1. Controller

The controller responsible for the processing of personal data under this Privacy Policy is:

Nordvia Supply
Email: [email protected]
Website: nordvia-supply.com

If a specific contracting entity, branch, affiliate, or local representative of Nordvia Supply is identified in a quotation, order confirmation, contract, invoice, or local site notice, that entity may be the controller for the relevant processing activities.

2. Scope of This Policy

This Privacy Policy applies to personal data processed through the Site and in connection with our commercial activities, including customer communication, quotation handling, order processing, account management, supplier or business contact management, marketing, compliance, fraud prevention, and related business operations.

Our Site and services are primarily intended for business customers. However, this Privacy Policy also applies where we process personal data relating to individual users, representatives, employees, contact persons, or other natural persons connected with our business relationships.

3. What Personal Data We Collect

Depending on how you interact with us, we may collect and process the following categories of personal data:

identity data, such as name, title, job position, company affiliation, and account username;
contact data, such as email address, telephone number, billing address, shipping address, and country;
business transaction data, such as quotation requests, order details, invoice details, delivery information, payment status, and communication records;
account and authentication data, such as login credentials, account preferences, and security-related information;
technical and usage data, such as IP address, browser type, device information, operating system, referral source, pages visited, timestamps, and interaction logs;
marketing and communication preferences, such as newsletter preferences, inquiry history, and consent records where applicable;
compliance and verification data, where necessary, such as information relevant to fraud prevention, sanctions screening, export controls, and legal compliance.

4. How We Collect Personal Data

We may collect personal data:

directly from you when you contact us, submit forms, request quotations, create an account, place orders, or communicate with us;
automatically through the Site and related technologies, such as cookies, server logs, and analytics tools, where applicable;
from your employer, colleagues, business partners, distributors, service providers, or other third parties involved in a business relationship;
from publicly available sources, trade registers, sanctions lists, or other lawful sources where necessary for business verification and compliance purposes.

5. Purposes of Processing

We may process personal data for the following purposes:

to operate, maintain, secure, and improve the Site;
to respond to inquiries, provide customer support, and communicate with you;
to prepare quotations, process orders, manage deliveries, issue invoices, and administer business relationships;
to create and manage customer or business accounts;
to verify identity, authority, creditworthiness, and business legitimacy where necessary;
to prevent fraud, abuse, unauthorized activity, and security incidents;
to comply with legal, tax, accounting, customs, trade, sanctions, and regulatory obligations;
to send business-related updates, service messages, and, where permitted, marketing communications;
to analyze Site usage and improve user experience, product offering, and commercial operations;
to establish, exercise, or defend legal claims.

6. Legal Bases for Processing

Under applicable data protection law, we rely on one or more legal bases for processing personal data. Depending on the circumstances, these may include:

processing necessary to take steps at your request prior to entering into a contract or to perform a contract;
processing necessary for compliance with a legal obligation to which we are subject;
processing necessary for our legitimate interests or those of a third party, provided such interests are not overridden by your fundamental rights and freedoms;
your consent, where consent is required by law.

Where we rely on consent, you may withdraw that consent at any time with effect for the future. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

7. Legitimate Interests

Where we rely on legitimate interests, those interests may include operating and securing our business, managing customer and supplier relationships, responding to business inquiries, preventing fraud, improving our Site and services, enforcing our terms, and supporting internal administration and reporting.

8. Cookies and Similar Technologies

The Site may use cookies, pixels, local storage, and similar technologies to enable core site functionality, remember preferences, improve performance, measure traffic, and support analytics or marketing activities.

Some cookies are strictly necessary for the operation of the Site, while others may be optional and used only with the required legal basis, including consent where applicable.

You can manage cookies through your browser settings and, where available, through our cookie banner or preference center. Disabling certain cookies may affect the availability or functionality of parts of the Site.

9. Recipients of Personal Data

We may share personal data, where necessary and lawful, with the following categories of recipients:

our affiliates, branches, and group companies;
IT service providers, hosting providers, cloud infrastructure providers, and website service providers;
payment service providers, banks, and financial institutions;
shipping providers, logistics providers, customs agents, and fulfillment partners;
customer service providers, CRM providers, communication platforms, and marketing service providers;
professional advisers, including lawyers, auditors, consultants, and insurers;
public authorities, courts, regulators, tax authorities, or law enforcement authorities where required by law or necessary for legal compliance or claims handling;
business counterparties involved in a transaction, restructuring, financing, or sale of assets, subject to appropriate safeguards where required.

10. International Data Transfers

Because we may operate internationally or use international service providers, personal data may be transferred to countries outside the European Economic Area ("EEA") or outside the country where the data was originally collected.

Where such transfers are made and applicable law requires safeguards, we will implement appropriate transfer mechanisms, such as adequacy decisions, standard contractual clauses, or other legally recognized safeguards.

11. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including for contractual performance, account administration, customer support, compliance with legal obligations, dispute resolution, record keeping, and enforcement of our rights.

Retention periods may vary depending on the category of data, the nature of the relationship, applicable limitation periods, tax and accounting requirements, legal obligations, and operational necessity.

12. Data Security

We implement reasonable technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, unauthorized access, and other unlawful forms of processing.

However, no method of transmission over the internet or method of electronic storage is completely secure. Therefore, we cannot guarantee absolute security.

13. Your Rights

Subject to applicable law and depending on the circumstances, you may have the right to:

request access to your personal data;
request rectification of inaccurate or incomplete personal data;
request erasure of your personal data;
request restriction of processing;
object to certain processing activities, including processing based on legitimate interests and, where applicable, direct marketing;
request data portability where legally applicable;
withdraw consent where processing is based on consent;
lodge a complaint with a competent supervisory authority.

Some of these rights are not absolute and may be subject to legal limitations or conditions.

14. How to Exercise Your Rights

To exercise your rights or to ask questions about our processing of personal data, please contact us at: [email protected].

We may request reasonable information to verify your identity and to clarify the scope of your request before responding.

15. Complaints

If you believe that your personal data has been processed in violation of applicable law, you may have the right to lodge a complaint with the competent data protection supervisory authority, in particular in the jurisdiction of your habitual residence, place of work, or the place of the alleged infringement, where such rights are provided by law.

16. Marketing Communications

We may send business-related communications and, where permitted by law, promotional or marketing communications about our products, services, updates, or events.

Where required by law, we will obtain the necessary consent before sending such communications. You can unsubscribe from marketing emails at any time by using the unsubscribe link in the email or by contacting us at [email protected].

17. Third-Party Websites

The Site may contain links to third-party websites or services. We are not responsible for the privacy practices, security, or content of third-party websites or services. We recommend reviewing their privacy notices separately.

18. Children

Our Site and services are not directed to children, and we do not knowingly collect personal data directly from children through the Site in the ordinary course of our business.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any updated version will be posted on this page together with a revised "Last Updated" date.

To the extent permitted by law, the updated Privacy Policy becomes effective when published on the Site, unless a different effective date is stated.

20. Contact

If you have any questions about this Privacy Policy or our handling of personal data, please contact:

Nordvia Supply
Email: [email protected]
Website: nordvia-supply.com