Privacy Policy

Effective date: September 30, 2026

Nordihaus LLC, 75 E 3rd St, Sheridan, WY 82801, United States · Email: info@nordihaus.de

1. Introduction

This Privacy Policy explains how Nordihaus LLC ("Nordihaus," "we," "us," or "our") collects, uses, shares, and protects personal data when you visit or use our website at https://nordihaus.de/ and the related services we provide through it (together, the "Services").

The Services consist of an online platform that provides German-language information about residential property and land for sale in Sweden. This includes a property search catalog, user accounts, email notifications about new listings, a paid membership ("Nordi+"), AI-assisted informational features, and paid listing packages for property sellers.

This Privacy Policy applies to users in the European Union and the European Economic Area (together, the "EEA"), Switzerland, the United States, and other countries. Where specific rules apply only to users in certain jurisdictions, this is stated in the relevant section.

This Privacy Policy does not apply to third-party websites, platforms, or services that are linked from the Services, such as websites of real estate agents or social media platforms. Those are governed by their own privacy policies.

2. Data Controller

Nordihaus LLC is the controller responsible for the processing of your personal data as described in this Privacy Policy. For any questions or requests relating to your personal data, please contact us at info@nordihaus.de.

3. Personal Data We Collect

3.1 Data You Provide to Us

Account data: your name, email address, login credentials, and account settings when you register for an account.
Search and notification preferences: your search criteria, filters, and settings for email notifications about new listings.
Membership and order data: the plan or package you select, order date, price, billing period, subscription status, and records of cancellation, withdrawal, and refund requests.
Payment-related data: billing name, email address, and limited payment information as described in Section 6.
Communications: the content of emails, contact form messages, support requests, and related correspondence with us.
Listing inquiries: when you contact a seller through the contact form on a listing, your name, email address, and message.
Seller listing data: when you order a listing package, the link to your existing property listing or your description of the property, photos and other materials you provide, and the contact details at which you wish to receive inquiries.
AI feature inputs: questions and other content you submit to AI-assisted features, such as the "Frag Nordi" AI advisor.
Cancellation requests: your name, account email address, type of cancellation, requested cancellation date, and, where required for extraordinary termination, the reason for cancellation.

3.2 Data Collected Automatically

Device and usage data: IP address, browser type and version, operating system, referring URL, pages viewed, date and time of access, and interactions with the Services.
Cookie and similar technology data: information collected through cookies and similar technologies, as described in Section 10 and in our Cookie Policy.

3.3 Data We Receive from Third Parties

Google sign-in: if you register or log in with your Google account, Google provides us with your name, email address, and Google account identifier. We do not receive your Google password. Google processes this data under its own privacy policy.
Payment processors and banks: payment confirmation, transaction status, limited payment details made available by the payment processor, and information about refunds or chargebacks.
Listing sources: property listings on the Services may include information provided by sellers, real estate agents, or other listing sources. Where listing information includes personal data, such as the name or business contact details of a seller or real estate agent, we process it as part of the listing. See Section 8.

3.4 Data We Do Not Intend to Collect

We do not intentionally collect special categories of personal data, such as data concerning health, religious beliefs, or political opinions. Please do not include such information in messages, listing materials, or inputs to AI-assisted features.

4. How We Use Personal Data and Legal Bases

We use personal data for the purposes listed below. For users in the EEA and Switzerland, we also state the legal basis under the General Data Protection Regulation ("GDPR") for each purpose. Swiss users are additionally protected by the Swiss Federal Act on Data Protection ("FADP").

Providing the Services and user accounts: creating and managing accounts, providing the property catalog and search functions, and sending the listing notifications you request. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Memberships, listing packages, and payments: processing orders, payments, renewals, cancellations, withdrawals, and refunds. Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and compliance with legal obligations, including accounting and tax requirements (Art. 6(1)(c) GDPR).
Publishing seller listings and forwarding inquiries: preparing and publishing listings based on the materials a seller provides, and forwarding inquiries from interested parties to the relevant seller. Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and our legitimate interest in enabling communication between interested parties and sellers (Art. 6(1)(f) GDPR).
AI-assisted features: generating location analyses, property analyses, and answers to your questions. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Customer support and service communications: responding to your requests and sending important notices about your account, orders, or changes to the Services. Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and our legitimate interest in communicating with users (Art. 6(1)(f) GDPR).
Security and fraud prevention: protecting the Services, preventing misuse, unauthorized access, and payment fraud. Legal basis: our legitimate interest in operating secure Services (Art. 6(1)(f) GDPR) and, where applicable, legal obligations (Art. 6(1)(c) GDPR).
Analytics and improvement: understanding how the Services are used and improving them. Where this involves non-essential cookies or similar technologies, we do so only with your consent (Art. 6(1)(a) GDPR and applicable ePrivacy rules).
Marketing: marketing cookies and personalized advertising are used only with your consent (Art. 6(1)(a) GDPR). If we send promotional emails, we do so only where permitted by law, including with your consent where required, and you can unsubscribe at any time.
Listing information from third-party sources: providing a comprehensive property catalog. Legal basis: our legitimate interest in providing property information to our users (Art. 6(1)(f) GDPR). Affected individuals may object as described in Section 12.2.
Legal compliance and claims: complying with applicable laws, responding to lawful requests from authorities, and establishing, exercising, or defending legal claims. Legal basis: legal obligations (Art. 6(1)(c) GDPR) and our legitimate interests (Art. 6(1)(f) GDPR).

Where we rely on legitimate interests, we balance those interests against your rights and freedoms. Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Certain personal data, such as your email address, is required to create an account, place an order, or submit an inquiry. Without it, we cannot provide the relevant Services.

5. AI-Assisted Features

The Nordi+ membership includes AI-assisted features, such as location analysis, property analysis, and the "Frag Nordi" AI advisor. These features are provided using third-party AI service providers. To generate a result, the content you submit and the relevant listing information are transmitted to these providers for processing.

Please do not include sensitive personal data or personal data about other individuals in your inputs. AI-generated results are produced automatically, may be inaccurate or incomplete, and are provided for general information only. They do not constitute legal, tax, financial, or real estate advice.

We do not use AI-assisted features to make decisions about you that produce legal effects or similarly significantly affect you within the meaning of Art. 22 GDPR.

6. Payments

Payments for the Services are processed through third-party payment processors and financial institutions. We accept credit and debit cards, processed by Stripe. Bank transfers (ACH or wire) are accepted only where agreed with us in writing.

Stripe: card payment details are entered directly into Stripe's payment interface and processed by Stripe. We do not store full card numbers or card security codes. We receive only limited information, such as payment status, billing details, and partial payment method details made available by Stripe.
ACH and wire transfers (where agreed in writing): these payments are processed through banks and financial institutions. We receive the information needed to identify and reconcile a payment, such as the payer's name, amount, date, and payment reference.

Payment processors and financial institutions may process certain personal data as independent controllers, for example to prevent fraud and to comply with their own legal obligations. Their processing is governed by their own privacy policies. For more information, please see our Payment Security page.

We do not sell personal data for money. We share personal data only as described below:

Service providers: companies that provide services to us, such as hosting and IT infrastructure, email delivery, tag management, analytics, AI services, and customer support tools. These providers process personal data on our behalf and in accordance with our instructions.
Payment processors and financial institutions: Stripe and, where a bank transfer has been agreed, the banks and financial institutions involved, as described in Section 6.
Sellers: when you submit an inquiry through the contact form on a listing, your name, email address, and message are forwarded to the seller of that property. The seller is responsible for their own use of this information.
Public listing content: listing information provided by sellers is publicly visible on the Services, including to users who do not have an account.
Advertising and analytics partners: only where you have consented to the relevant cookies or similar technologies.
Professional advisors: lawyers, accountants, and auditors, who are bound by confidentiality obligations.
Authorities and legal requirements: where required by law, court order, or other legal process, or where necessary to protect our rights, our users, or others.
Business transfers: in connection with a merger, acquisition, reorganization, or sale of all or part of our business, subject to appropriate confidentiality protections.

8. Property Listings and Seller Responsibilities

Sellers who submit listing materials are responsible for ensuring that they have the right to share the information and photos they provide, and that the materials do not contain personal data of other individuals without a valid legal basis. Listing information should include only information the seller wishes to be publicly visible.

Sellers who receive inquiries through the Services may use the inquirer's personal data only to respond to the inquiry and must comply with applicable data protection laws.

A listing is removed from public view when the listing period ends or when the seller informs us that the property has been sold. If a listing on the Services contains personal data about you, such as your name, contact details, or photograph, and you would like it corrected or removed, please contact us at info@nordihaus.de. We will review your request promptly.

9. International Data Transfers

Nordihaus LLC is based in the United States. Personal data collected through the Services is processed in the United States and may also be processed in other countries where our service providers operate. These countries may not provide the same level of data protection as your country of residence.

Where personal data subject to the GDPR or the FADP is transferred to a country that has not been recognized as providing an adequate level of data protection, we rely on appropriate safeguards, such as the Standard Contractual Clauses approved by the European Commission, with the adjustments required under Swiss law where applicable. Where an adequacy decision covers the recipient, we may rely on that decision. You may contact us for more information about the safeguards we use.

10. Cookies and Similar Technologies

We use cookies and similar technologies on our website. They fall into the following categories:

Necessary cookies: required for the basic operation of the website, such as page navigation, access to protected areas, and storing your cookie preferences. These are always active.
Analytics cookies: help us understand how visitors use the website. These are used only with your consent.
Marketing cookies: used to display relevant advertising. These are used only with your consent.

We use Google Tag Manager, a tag management tool provided by Google, to manage the tags on our website. With your consent, we use Google Analytics (Google) and Contentsquare for analytics. You can accept, reject, or change your cookie preferences at any time on our Cookie Settings page at https://nordihaus.de/en/cookie-settings. For more information, please see our Cookie Policy.

11. Data Retention

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. In particular:

Account data: kept while your account is active. After account deletion, the data is deleted or anonymized unless we need to retain it for the reasons listed below.
Order, payment, and accounting records: kept for the periods required by applicable tax and accounting laws, which may be up to 10 years.
Seller listing data: kept for the duration of the listing and afterwards only as long as needed for contractual, accounting, or legal purposes.
Inquiries and communications: kept as long as needed to handle the matter and for any related follow-up, and for the applicable limitation periods for legal claims.
Cancellation, withdrawal, and consent records: kept as long as needed to document that we have handled them in accordance with applicable law.
Technical log data: kept for a limited period, unless needed to investigate a security incident or misuse.

12. Your Privacy Rights

12.1 Users in the EEA and Switzerland

Subject to the conditions and exceptions set out in applicable law, you have the right to:

Access: obtain confirmation of whether we process your personal data and receive a copy of it.
Rectification: have inaccurate or incomplete personal data corrected.
Erasure: have your personal data deleted.
Restriction: have the processing of your personal data restricted.
Data portability: receive personal data you provided to us in a structured, commonly used, and machine-readable format, or have it transmitted to another controller.
Withdrawal of consent: withdraw your consent at any time, with effect for the future.
Complaint: lodge a complaint with a data protection supervisory authority, in particular in the country of your habitual residence, place of work, or place of the alleged infringement. In Switzerland, the competent authority is the Federal Data Protection and Information Commissioner (FDPIC).

12.2 Right to Object

Where we process your personal data on the basis of legitimate interests, you have the right to object at any time, on grounds relating to your particular situation. Where we process your personal data for direct marketing purposes, you have the right to object at any time, and we will then stop processing your personal data for those purposes.

12.3 Users in the United States

Depending on your state of residence, you may have rights under applicable U.S. state privacy laws, such as the right to access, correct, or delete your personal data, to obtain a copy of it, and to opt out of targeted advertising, the sale of personal data, or certain profiling. Whether a particular state law applies to us depends on its applicability requirements. Where such a law applies, we will respond to your request as required by that law.

We do not sell personal data for money. You can opt out of marketing cookies at any time on our Cookie Settings page. Where permitted by applicable law, you may use an authorized agent to submit a request, and you may appeal our decision on your request by replying to our response. We will not discriminate against you for exercising your privacy rights.

12.4 How to Exercise Your Rights

To exercise your rights, please contact us at info@nordihaus.de. We may ask you to provide information to verify your identity before we act on your request. We will respond within one month of receiving a request under the GDPR. This period may be extended by up to two further months where necessary, in which case we will inform you. For requests under other laws, we will respond within the time required by the applicable law. Exercising your rights is free of charge, unless a request is manifestly unfounded or excessive.

If you have an account, you can also update certain information directly in your account profile. You can stop receiving listing notification emails by adjusting your account settings, where available, or by contacting us.

13. Data Security

We use reasonable technical and organizational measures appropriate to the risk to protect personal data against unauthorized access, loss, misuse, or alteration. These measures include encrypted connections (HTTPS) for data transmitted through the website and restricting access to personal data to persons who need it to perform their tasks.

No method of transmission over the internet or of electronic storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account password confidential. If a personal data breach occurs, we will notify affected individuals and authorities where required by law.

14. Children's Privacy

The Services are intended for individuals who are at least 18 years old and are not directed at children. We do not knowingly collect personal data from anyone under 18. If we learn that we have collected personal data from a person under 18, we will delete it. If you believe this has happened, please contact us at info@nordihaus.de.

The Services may contain links to third-party websites, such as websites of real estate agents, and to our profiles on Facebook, Instagram, TikTok, and Pinterest. We are not responsible for the privacy practices of these third parties. When you visit their websites or interact with our profiles on their platforms, their privacy policies apply.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the Services, our practices, or applicable law. The updated version will be published on this page with a revised Effective Date. Where changes are material, we will provide additional notice, such as by email or a notice on the website, where appropriate.

17. Contact Us

If you have any questions about this Privacy Policy or our processing of personal data, please contact us:

Nordihaus LLC
75 E 3rd St, Sheridan, WY 82801, United States
Website: https://nordihaus.de
Email: info@nordihaus.de