Last updated: March 2026
Data Controller
Carl Henric Otterberg Internet Innovation (trading as Nordflow)
Gdańsk, Poland · NIP: 5842875227
Contact: hello@nordflow.studio
Nordflow is a software and AI automation company providing B2B tools and services to sales teams and real estate advisors. We operate as Carl Henric Otterberg Internet Innovation, a sole proprietorship (JDG) registered in Poland.
We collect only the data necessary to provide our services:
Account data: name, email address, company name, VAT number, billing address
Usage data: how you interact with our software and services
Payment data: processed by Stripe - we do not store card details
Communication data: emails and messages you send us
Technical data: IP address, browser type, device information, access logs
Contract performance (Art. 6(1)(b)): to deliver services you have purchased
Legitimate interests (Art. 6(1)(f)): to improve our services, prevent fraud, and communicate about your
account
Legal obligation (Art. 6(1)(c)): to comply with tax and accounting requirements
Consent (Art. 6(1)(a)): for marketing communications where applicable
To provide and maintain our software services
To process payments and issue invoices
To respond to support requests
To send service-related notifications
To comply with legal and tax obligations
To improve and develop our products
We use the following processors who may handle your data:
Stripe: payment processing (stripe.com/privacy)
Email providers: for transactional and service communications
Hosting providers: for running our software infrastructure
All processors are bound by data processing agreements and handle your data only as instructed by us.
We retain personal data for as long as necessary to provide our services and comply with legal obligations. Invoice and accounting data is retained for 5 years as required by Polish tax law. You may request deletion of other data at any time.
Access: request a copy of your personal data
Rectification: correct inaccurate or incomplete data
Erasure: request deletion of your data
Restriction: limit how we process your data
Portability: receive your data in a machine-readable format
Objection: object to processing based on legitimate interests
Withdraw consent: at any time where processing is based on consent
To exercise any of these rights, contact us at hello@nordflow.studio. We will respond within 30 days.
Some third-party providers may process data outside the EEA. Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.
Our website may use essential cookies required for basic functionality. We do not use tracking or advertising cookies without your consent.
You have the right to lodge a complaint with the Polish data protection authority (UODO) at uodo.gov.pl, or with the supervisory authority in your country of residence.
We may update this policy from time to time and will notify you of significant changes by email or website notice.