Privacy
How we use what you send.
This notice covers information submitted through Start on the Nordic Rain website. It also covers the records Nordic Rain keeps when an organization accepts a Nordic Rain Order Form. This notice also covers Nordic Rain commercial accounts for invited organizations.
What we receive
Nordic Rain receives information you submit voluntarily through the Start form: name, email, optional company or organization, a description of the project idea, and an optional website or reference URL.
How it is used
Information submitted through Start is used to review and respond to project inquiries.
Storage
Inquiries may be stored so Nordic Rain can review and reply. Email may be used to communicate with you about that inquiry.
Abuse prevention
For abuse prevention, the system may store a one-way hashed network identifier. Raw IP addresses are not stored by Nordic Rain through this form.
Legal acceptance records
When an organization accepts a Nordic Rain Order Form, Nordic Rain keeps a record of that acceptance: the organization's legal details as stated in the Order Form, the name, business email address and role of the person who accepted on the organization's behalf and their statement that they are authorized to bind the organization, how it was accepted (in a signed-in account, by electronic signature or by email), a reference to the signature or email where applicable, which Order Form and legal terms were accepted, any payment reference, when the Order Form was issued, when it was accepted and when Nordic Rain recorded the acceptance. For acceptance in an account, a one-way hashed network identifier is also kept. These records are not changed after they are made.
Why acceptance records are kept
Nordic Rain keeps acceptance records for these purposes and on these legal bases under the GDPR. Where the person who accepts is themselves a party to the agreement, or the processing is necessary for steps they asked for before entering into it, to conclude and perform that agreement (Article 6(1)(b)). Where a legal obligation applies to Nordic Rain, such as bookkeeping or record-retention duties, to comply with it to the extent the record falls under that obligation (Article 6(1)(c)). Otherwise, and in particular where the person accepts on behalf of an organization that is the customer, Nordic Rain's legitimate interests in documenting who accepted on the customer's behalf and with what stated authority, administering the commercial relationship, establishing the existence and terms of the agreement, and establishing, exercising or defending legal claims (Article 6(1)(f)). You can object to processing based on legitimate interests on grounds relating to your particular situation.
How long acceptance records are kept
Acceptance records are kept for as long as they are needed for the contractual relationship with the customer. After that, they are kept for as long as applicable statutory limitation periods, bookkeeping and accounting requirements and the periods in which legal claims can be made require. They are then deleted or anonymized, unless another legal obligation or an active legal claim requires them to be kept longer.
Commercial accounts
Nordic Rain is the controller of the account data it processes to operate commercial accounts for invited organizations: your name, email address, a canonical account identifier, the sign-in methods you use, sign-in and security events, active sessions, organization membership and role, organization legal and billing contact details, records of legal acceptance, support records and the state of the commercial account. An organization, not the person who signs in, is the contracting customer.
Signing in
You can sign in with Google or with your email address. If you continue with Google, Nordic Rain receives your Google account identifier, name and verified email address from Google; your Google password is never shared with Nordic Rain. If you continue with email, Nordic Rain sends a single-use sign-in link and one-time code that expire after 15 minutes. Nordic Rain does not store account passwords. Sign-in links, codes and session identifiers are stored only in one-way hashed form, and sessions expire after 14 days or when you sign out.
Account email
Sign-in, invitation and account emails are sent from support@nordicrain.dk through Google Workspace, which Nordic Rain uses for its own account and email processing.
Security records
To protect accounts, Nordic Rain records sign-in and account security events with a one-way hashed network identifier. Raw IP addresses are not stored in these records.
Services built on Achahbi Fabric
Account sign-in is separate from data processed through Achahbi Fabric tasks. Customer data processed through Achahbi Fabric is covered by the customer's agreement with Nordic Rain, including its data processing terms.