privacy policy
Version of 17 August 2026 · This English text is a convenience translation; the German version is authoritative. This notice applies to the website nordoffice.app. The privacy notice of your own instance applies to the nordOFFICE application itself.
1. Controller
digitalNORD GmbH
Zeppelinring 35A
24146 Kiel
Germany
Contact details and authorised representatives are given in the Legal notice.
2. Principles: no cookies, no third parties
This website sets no cookies and loads no third-party resources (no fonts, scripts or images from other providers). All content is delivered from our own servers. We analyse the use of the website solely with the self-hosted, cookie-free software Umami (see section 5).
3. Hosting and server logs
The website is operated on our own server in Germany. When pages are called up, the web server processes the following data in log files for technical reasons (server logs):
- the IP address of the requesting device
- the date and time of access
- the page or file requested, the volume of data transferred and the HTTP status code
- technical details of the browser (user agent, referrer)
Processing takes place in order to ensure trouble-free operation and to defend against attacks (legal basis: Art. 6 (1) (f) GDPR — legitimate interest in the secure and stable operation of the website).
The log files are deleted automatically after [retention period, e.g. 7 days] unless they are needed for longer to investigate a specific security incident.
4. Price retrieval when a page is loaded
When you call up pages showing prices, your browser loads the current module catalogue (prices and available apps) from our own nordOFFICE instance at dnord.nordoffice.app. For technical reasons your IP address is transmitted to that server in the process. Both systems are operated by the same controller (digitalNORD GmbH); the server is located in Germany. No cookies are set and no profiles are created (legal basis: Art. 6 (1) (f) GDPR — legitimate interest in displaying current prices).
5. Audience measurement (Umami)
For statistical analysis of how this website is used, we employ the open-source software Umami , which we host ourselves on our own server in Germany (um.dnord.de). Umami works without cookies and stores nothing in your browser. It records the page visited, the referring page, browser and device type, screen size, language and country of origin. The IP address is used only to form a salted hash value that changes daily and is not stored; recognising a visitor beyond that day or profiling individuals is therefore not possible. No data is passed on to third parties. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in anonymous audience measurement to improve our offering). Your browser’s “Do Not Track” setting is respected; in that case nothing is recorded.
6. Demo form
You can request free demo access through the demo form. In doing so we process the data you provide:
- first name and surname
- company (optional)
- E-mail address
The data is transmitted to our own nordOFFICE instance (dnord.nordoffice.app, server in Germany) and processed there in order to provide you with demo access and to send you accompanying emails about the trial.
Sign-up uses the double opt-in procedure: you first receive a confirmation email; only after you click the confirmation link is the demo access set up and the accompanying communication started.
Legal bases: Art. 6 (1) (a) GDPR (your consent to the accompanying emails) and Art. 6 (1) (b) GDPR (provision of the demo access you requested).
You may withdraw your consent at any time — every email contains an unsubscribe link with which you can stop further mailings with one click. Withdrawal does not affect the lawfulness of processing carried out up to that point.
After the demo period ends or after you unsubscribe, the data is deleted unless statutory retention obligations require otherwise.
7. Your rights as a data subject
Under the GDPR you have the following rights:
- Access to the data processed about you (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR)
- Withdrawal of consent given, with effect for the future (Art. 7 (3) GDPR)
To exercise your rights an informal message to the contact details given in the Legal notice is sufficient.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR) — for instance the authority responsible for your place of residence or for the controller's registered office.
8. Changes to this notice
We adapt this privacy notice when the website or the legal situation changes. The version published here at the time applies.