Your Privacy Matters to Us

Privacy Policy (GDPR) | NorDan Vinduer Limited | Last updated: 03 03 2026

NorDan Vinduer Limited respects your privacy and is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR).

1. Who We Are

NorDan Vinduer Limited (“we,” “our,” “us”) is the data controller responsible for your personal data under this Privacy Policy.

We operate in Ireland and are part of the NorDan Group, an international group of companies specialising in the manufacture and supply of windows and doors. NorDan Vinduer Limited supplies and fits windows and doors for residential and commercial customers across Ireland, including associated design, installation, warranty, and after‑sales services.

As part of our business, we collect and process personal data relating to customers, suppliers, contractors, and website users to deliver our products and services, manage installations and long‑term warranties, provide customer support, and comply with our legal and regulatory obligations.

While we are part of the wider NorDan Group and may share limited personal data within the group where necessary to support these activities, NorDan Vinduer Limited remains responsible for ensuring that personal data processed in Ireland is handled in accordance with GDPR.

2. What Personal Data We Collect

In most cases, we collect personal data directly from you, for example when you place an order, contact us, or use our website. We collect and process only the personal data that is necessary and relevant to operate our business and to supply our products and services.

In most cases, the personal data we request is required to allow us to provide our products and services or to meet legal or contractual obligations. If you choose not to provide certain information, we may be unable to process your enquiry, order, or request. Depending on how you interact with us, this may include:

Identification and contact details
Such as your name, postal address, email address, and telephone number.

Order and transaction information
Including quotations, orders, invoices, payment information, and records relating to the supply and installation of windows and doors.

Project and installation details
Such as site addresses, technical specifications, installation records, and information required to manage projects, after‑sales support, and long‑term product warranties.

Customer communications
Records of correspondence with us by email, phone, or other channels in relation to enquiries, orders, complaints, or support requests.

Website and technical data
When you visit our website, we may collect limited technical information such as IP address, browser type, and device information, primarily to ensure website functionality and security and, where permitted, to support analytics.

3. Legal Basis for Processing

We process data based on contractual necessity, legal obligations, legitimate interests, and consent (for marketing only). Where we rely on consent, you may withdraw your consent at any time by using the unsubscribe option in our communications or by contacting us using the details below. Legitimate interests: to operate and improve our business (including scheduling installations, managing customer accounts and service requests, improving service quality, preventing fraud, and ensuring the security of our systems and website). We always balance these interests against your rights.

4. How We Use and Share Data

Data is used to manage orders, installations, warranties, payments, and customer communications and marketing. We may share personal data with categories of recipients such as installation partners/contractors, delivery/logistics providers, payment and banking providers, IT and hosting providers, and professional advisers where necessary (e.g., auditors, legal advisers). All such sharing is limited to what is necessary and protected by appropriate contractual and security measures. We do not use personal data for automated decision‑making or profiling that produces legal or similarly significant effects.
We do not carry out automated decision‑making, including profiling, that produces legal or similarly significant effects.

5. Data Storage and Security

We apply appropriate technical and organisational measures to protect personal data across the systems and applications we use to support our business operations. This includes controls to ensure that personal data is processed lawfully, securely, and only by authorised personnel for legitimate business purposes.

Personal data is stored within the European Union or in jurisdictions recognised as providing an adequate level of data protection. Where we use third‑party systems or service providers to process or store personal data on our behalf, we ensure that appropriate contractual arrangements are in place, including data processing agreements and, where applicable, approved standard contractual clauses.

Where personal data is transferred outside the European Economic Area, we ensure that appropriate safeguards are implemented in accordance with GDPR to protect the rights of individuals. We regularly review our systems, suppliers, and security measures to ensure ongoing compliance with data protection requirements. Further information about these safeguards can be requested by contacting us.

6. Data Retention

We retain personal data only for as long as necessary only for the purposes for which it was collected and in accordance with the principles of the General Data Protection Regulation (GDPR).

We retain your personal data only while our contract with you is active and during any subsequent after-sales support.
However, certain customer records, such as order details, installation records, and our long‑term product warranty information may need to be retained for longer periods. We are subject to legal, regulatory, and contractual obligations that require records to be available for extended periods (for example, for product liability, building works, or consumer protection purposes). Where this applies, relevant records may be retained for up to 20–30 years, but only where there is a clear legal or legitimate business need to do so. We do not retain personal data longer than necessary, and retained data is securely stored and access is restricted.

When personal data is no longer required, it is securely deleted or anonymised in accordance with our GDPR data retention procedures.

7. Cookies

Our website uses essential cookies and optional analytics cookies, subject to consent via our cookie banner or click here.

8. Your GDPR Rights

Our website uses essential cookies and optional analytics cookies, subject to consent via our cookie banner or click here.

9. Data Protection Contact

Email: gdpr@nordan.no

10. Policy Updates

Our policy may be updated from time to time. The latest version will always be published on our website.