End-Consumer Privacy Notice Addendum for Consent-Based Product Development
Document ID: NC-PRIV-CONS-ADDENDUM
Version: 2026-01-26 (v1.0)
Applies to: End consumers who opt in via partner checkout/booking or the Nordic Charge order-tracking link.
1. Controller
Controller: NCG Danmark ApS (“Nordic Charge”, “NC”)
Address: Torpenvej 32, 3050 Humlebæk, Denmark
Privacy contact: privacy@nordiccharge.com
DPO: Not appointed (not applicable based on current activities)
2. What this notice covers
This notice applies only to consent-based product development and service improvement processing by Nordic Charge. It does not change how your partner processes your data to fulfil your order or installation.
3. Purpose(s) of processing
If you opt in, Nordic Charge will use relevant information about your order, installation, or charger to:
- Develop and test new features relating to EV charger order fulfilment, shipping, installation coordination, and charger provisioning; and
- Perform service improvement and reliability analytics to improve product quality and operational performance.
Nordic Charge does not use this opt-in for marketing.
4. Legal basis
Nordic Charge processes this data on the basis of your consent (GDPR Art. 6(1)(a)).
You can withdraw consent at any time (see Section 9).
5. Categories of personal data (minimised)
Depending on your opt-in and the context, Nordic Charge may process:
- Order/installation context: order reference, status, shipping and installation dates, installation status.
- Device context: charger model and serial number (where relevant to provisioning or supportability).
- Contact and address data: name, email, phone, delivery or installation address (only where necessary for the opted-in development or improvement purpose).
- Support/feedback content: if you contact support about the opted-in features or issues.
Nordic Charge aims to minimise use of direct identifiers and will use aggregated or anonymised outputs where feasible.
6. Sources of data
Nordic Charge receives the relevant data from:
- Your partner (the seller, installer, or partner organisation), and/or
- Systems supporting fulfilment, installation, or provisioning for your order, and/or
- Your interaction with the Nordic Charge order-tracking link (where applicable).
7. Recipients
Access is restricted to authorised Nordic Charge personnel (role-based). Nordic Charge may share data with service providers supporting the above processing, such as:
- Hosting and infrastructure providers
- Support or ticketing providers (if used for opt-in feature support)
- Operational tooling required to run the consent stream
A current list of core sub-processors for this consent stream may be provided to partners on request.
8. International transfers
Nordic Charge’s primary hosting is in the EEA. Some service providers may process data outside the EEA. Where this occurs, Nordic Charge relies on appropriate safeguards (for example, Standard Contractual Clauses) and contractual controls.
9. Retention
- Product-development dataset: retained for up to rolling 24 months from collection or last activity, then deleted or converted into aggregated or anonymised form where feasible.
- Upon withdrawal: data in the product-development dataset will be deleted or anonymised within 30 days (unless retention of a minimal record is required to document compliance).
- Consent evidence metadata: retained for 6 years to demonstrate consent and withdrawal events.
10. Your rights and how to exercise them
You have rights including access, deletion, restriction, objection (where applicable), and the right to withdraw consent at any time. Withdrawal does not affect processing carried out before withdrawal.
How to exercise your rights:
- Use the withdrawal function available on the order-tracking link (if present), or
- Contact privacy@nordiccharge.com with your order reference or tracking token.
11. Complaints
You may lodge a complaint with the Danish Data Protection Authority (Datatilsynet) or your local supervisory authority.
