1. Who we are
Nordpix ("we", "us", "our") operates the nordpix.eu platform. All data is processed and stored on infrastructure located within the European Union.
2. Data we collect
We collect only what is necessary to operate the platform:
- Account data — name and email address, provided via FjordID authentication.
- Purchase data — license and print order details, including amount and date, required for invoicing.
- Upload metadata — for photographers: photo titles, descriptions, EXIF data and location tags you submit.
- Analytics — anonymised page view data via Umami (self-hosted, no cookies, no cross-site tracking).
We do not use advertising trackers, third-party analytics, or sell your data.
3. Legal basis (GDPR)
- Contract — processing your purchase and delivering licensed files.
- Legal obligation — retaining invoices for tax purposes (7 years under Norwegian/EU law).
- Legitimate interest — anonymised analytics to improve the platform.
4. Data storage
All data is stored on Hetzner servers in Germany (EU). Media files are stored in Hetzner Object Storage (Nuremberg, Germany). Authentication is handled by FjordID, a self-hosted Keycloak instance on the same infrastructure.
No data is transferred outside the European Union.
5. Data retention
- Account data — retained while your account is active, deleted within 30 days of account deletion.
- Invoice and purchase records — retained for 7 years (legal obligation).
- Uploaded media — retained until you delete it from your account.
- Analytics data — anonymised, retained for 12 months.
6. Your rights
Under the GDPR you have the right to:
- Access a copy of your data
- Correct inaccurate data
- Request deletion ("right to be forgotten")
- Data portability
- Object to processing
To exercise these rights, contact us at privacy@nordpix.eu.
7. Cookies
We use one functional cookie for your login session (FjordID / Keycloak). No advertising or analytics cookies are set. Our analytics tool (Umami) is cookieless.
8. Contact
Questions about this policy: privacy@nordpix.eu