1. Data controller
The operator of IPTV Nordic is the data controller. Contact details for data-protection questions are on the contact page.
2. Data that may be processed
Depending on the customer journey, this may include name, contact details, selected device, support message, plan selection, transaction reference and technical troubleshooting details. The site stores the chosen Nordic market and the analytics-consent choice in local browser storage.
3. Purposes and legal bases
Data may be needed to answer an enquiry, take steps requested before a contract, deliver and support a contract, comply with accounting or legal duties, protect security and handle complaints. Each production system must document its exact legal basis before collection begins.
4. Recipients and international transfers
Hosting and communication providers receive only what is needed for their role. If optional analytics is accepted and configured, Google Analytics and Microsoft Clarity process website-usage information under their respective terms. Any transfer outside the EEA requires a valid transfer mechanism and appropriate safeguards.
5. Retention
Enquiry data should be removed when no longer needed, while contract and transaction records may need longer retention for legal or accounting purposes. Retention periods follow those legal and accounting requirements.
6. Your rights
Depending on the circumstances, you may request access, correction, erasure, restriction, portability or object to processing. You may also complain to the competent data-protection authority. Requests are verified securely and answered within the applicable time limits.
7. Optional analytics and consent
Google Analytics and Microsoft Clarity are disabled unless their public project IDs have been configured and the visitor actively accepts optional analytics. The choice can be changed through Cookie settings in the footer. Rejecting or withdrawing consent prevents future optional tracking and removes known analytics cookies from this domain.
8. Security and children
Access controls, encryption in transit, supplier review and data minimisation should protect personal data. The service is not designed to collect data directly from children; a verified adult account holder should handle the relationship.