Legal

Privacy statement

This site sets no tracking cookies and the platform stores no government ID numbers. Below is what we do keep, why, for how long, and what you can do about it.

Who we are

Nordic Settlers is a product of Crypted AS, a company registered in Norway. We decide what happens to your data. Under the GDPR that makes us the controller.

Crypted AS

Norge
org.nr

Questions about your data go to [email protected]. That address reaches the two of us, not a customer service department.

This website

This site sets no tracking cookies. There is no cookie banner either, because there is nothing to accept. That is not a statement of principle, it is simply how the site is built.

We do want to know which pages get read, so we know what to keep up to date. We measure that with Umami, which we run on our own server. Umami counts page views without setting a cookie and without following you to other sites. No profile is built about you and nothing goes to an advertising network. If the measurement is not configured, the script is not shipped at all, so there is nothing in the page to switch off.

One thing is stored in your browser: your choice of the light or dark theme. It sits in localStorage under the name ns-theme. It is not a cookie, it is never sent to our server with a request, and it does not leave your device. Clear your browser data and it is gone, and the site goes back to following your system setting.

The platform

The platform lives at app.nordicsettlers.com, with its own login. What is in there is in there because your timeline needs it. Nothing is kept because it might come in handy one day.

This is what we keep:

  • Your email address. It is how you log in and how we send you the reminders.
  • The names of the adults in the household. So the timeline can say who does what, and so you are not looking at a list of ‘person 1’ and ‘person 2’.
  • For children: the month and year of birth. Not the exact date. Month and year are enough to work out the application deadlines for barnehage and school, so we do not ask for more.
  • The date you plan to move. Almost the whole timeline hangs off it. If it shifts, everything else shifts with it.
  • The kommune you are moving to, if you already know it. Where you arrange things, and how long it takes, differs per kommune.
  • A short description of your situation: employment, your own business or study. That decides which steps you do and do not see.
  • Expiry dates of documents you want to be reminded about, such as a passport or a driving licence. The date only, so a nudge can arrive in time.

And this is what we do not keep:

  • no Dutch burgerservicenummer;
  • no D-number and no fødselsnummer;
  • no passport number or document number;
  • no copies or scans of documents, of anything at all;
  • no bank details, and no card numbers.

That is not a promise for later, it is how the thing is built: there is no field to put them in. We have no use for those numbers either. You enter them yourself at Skatteetaten, at UDI and at your gemeente, not with us. And data you do not hold cannot leak. That is the safest way to store it.

Payment runs through a payment provider, not through us. We see whether a purchase went through, which product it was and what the amount was. Your card number or your bank account number never passes our hands.

The free checklist

If you ask for the free checklist, you hand over two things: your email address and the language you want it in. We ask for no more and we keep no more. No name, no company, no ‘when are you moving’.

It works with double confirmation. First you get one email with one link in it. If you do not click it, we send nothing and the sign-up disappears again. That way nobody can put you on a list using your address.

At the bottom of every email there is an unsubscribe link that works in one click: no logging in, no reason to give, no screen asking whether you are sure. Your address stays on the list until you unsubscribe. We do not sell addresses, we do not trade them and we do not pass them to anyone else to do something with.

Where it is kept

This site, the platform and the mailing list all run inside the European Economic Area. Norway is part of it: it is not an EU member state, but the GDPR applies there through the EEA Agreement and Datatilsynet supervises it. No data goes to countries outside the EEA.

The GDPR wants us to say, per type of data, on what ground we process it. In our case there are three.

  • Performance of the contract. Everything in the platform. You bought access to a timeline built around your situation. Without that data there is no timeline and the purchase gives you nothing.
  • Consent. The mailing list. You give that consent by clicking the confirmation link, and you withdraw it by unsubscribing. Nothing else is needed.
  • Legitimate interest. The aggregated, cookie-free visitor numbers. We want to know which pages get read so we check and update the right things. Because no cookie is set and no profile is created, the intrusion on your side is small.

How long we keep it

  • Your account and your timeline: for as long as you have access. Ask us to delete it and we delete it. Your timeline goes with it and we cannot bring it back, so download whatever you want to keep first.
  • The mailing list: until you unsubscribe. After that we take your address off the list.
  • Visitor numbers: as totals per page only. There is no row per visitor that we could keep or tie back to you.
  • Invoices and bookkeeping: for as long as Norwegian accounting rules require. That is longer than the rest and we cannot get around it. A deletion request therefore does not cover the bookkeeping.

Your rights

The GDPR gives you a number of rights. They apply whether or not you bought anything, so also if you are only on the mailing list.

  • Access. You may ask what we hold about you.
  • Rectification. If something is wrong, we correct it.
  • Erasure. You may ask us to throw it away.
  • Portability. You may have your data in a readable file to take elsewhere.
  • Objection. You may object to processing that rests on our legitimate interest.
  • Withdrawing consent. For the mailing list that is the unsubscribe link. An email works too.

Write to [email protected] and say which right you mean. It costs you nothing. We answer within a month; if it is more complicated than usual, we tell you within that month how much longer it will take and why. To stop someone else requesting your data, we send the answer to the email address in your account or on the list.

Complaining to a regulator

If you think we are getting it wrong, tell us first. That is usually the quickest route. But you do not have to wait for us and you do not need our permission: you can go straight to a regulator. To Datatilsynet, because we are based in Norway, or to the Autoriteit Persoonsgegevens if you live in the Netherlands. Either is fine.

Changes to this statement

If something changes about what we keep, why we keep it or where it sits, we update this page and put a new date underneath. If it is something material, such as a new category of data or a new party handling it, we also email everyone with an account. We do not quietly edit this statement to justify something after the fact.

What you buy and on what terms is on another page: the terms and conditions.

Last updated: .