Last updated: 18 September 2026.
This policy explains which personal data is processed when you visit https://www.nordlinglab.org (the website), why, and which rights you have. The website presents the research and teaching of the Nordling Lab at the Department of Mechanical Engineering, National Cheng Kung University, Taiwan. The website has no user accounts, no registration, and no forms that collect personal data.
1. Controller
Nordron AB is the controller of the personal data processed through the website:
Nordron AB
Sågvägen 12
192 51 Sollentuna
Sweden
Email: [email protected]
Nordron AB has not appointed a data protection officer, as it is not required to.
2. What we process, why, and on which legal basis
| Processing | Data | Purpose | Legal basis (GDPR) | Retention |
|---|---|---|---|---|
| Delivering the website | IP address, date and time, requested page, browser and operating system, referring page | Showing the website, keeping it secure, and investigating attacks and errors | Legitimate interest, Article 6(1)(f): operating a secure website | Server logs are deleted by the hosting provider in its routine log rotation, and kept longer only when needed to investigate a specific security incident |
| Content delivery and protection | IP address and technical request data | Delivering the website quickly and blocking malicious traffic | Legitimate interest, Article 6(1)(f) | As set out by Cloudflare for its network logs |
| Storing your cookie choice | Your consent choice per category, in cookies named cmplz_* |
Remembering your choice so that we respect it | Legal obligation, Article 6(1)(c), to obtain and document consent | 365 days, or until you change your choice or delete your cookies |
| Embedded YouTube videos | IP address, device and browser data, cookies set by YouTube | Showing videos of student projects on the website | Consent, Article 6(1)(a); videos load only after you accept marketing cookies | As set by Google for YouTube |
| Website statistics with Google Analytics | Pseudonymous identifier in cookies named _ga and _ga_*, pages visited, approximate location, device and browser data |
Understanding which pages are used, to improve the website | Consent, Article 6(1)(a); Google Analytics runs only after you accept statistics cookies | Cookies up to 2 years; event data in Google Analytics 2 months |
| Emails you send us | Your email address, name, and message | Answering your question | Legitimate interest, Article 6(1)(f): answering enquiries | Up to 5 years after the last message in the conversation, then deleted |
Google Analytics runs only for visitors who accept statistics cookies. For visitors who do not, Google’s consent mode prevents it from setting cookies.
We use Google Search Console to see how the website appears in Google Search. Search Console places nothing on your device and receives no data from your visit to the website.
We do not sell personal data, do not use it for advertising, and do not make automated decisions or profiles about visitors.
3. Recipients
Personal data is disclosed only to the service providers needed for the processing above:
- the hosting provider Misshosting, Sweden, which stores the website and its server logs;
- Cloudflare, Inc., USA, which delivers and protects the website;
- Google Ireland Limited, Ireland, and Google LLC, USA, for YouTube videos and Google Analytics, but only after your consent.
Cloudflare and Google act under their own terms and privacy policies: https://www.cloudflare.com/privacypolicy/ and https://policies.google.com/privacy.
4. Transfers outside the EU/EEA
Cloudflare and Google may process data in the USA and other countries outside the EU/EEA. Where the recipient is certified under the EU–U.S. Data Privacy Framework, the transfer relies on the European Commission’s adequacy decision of 10 July 2023; otherwise it relies on the European Commission’s standard contractual clauses.
5. Cookies
The cookies used on the website, and how to change your choice, are described in the Cookie Policy. You can withdraw your consent at any time through the “Manage consent” button on every page; withdrawal does not affect the lawfulness of processing before it.
6. Your rights
You have the right to:
- access the personal data we hold about you (Article 15);
- have inaccurate data corrected (Article 16);
- have your data erased (Article 17);
- restrict the processing (Article 18);
- receive your data in a portable format (Article 20);
- object to processing based on legitimate interest (Article 21);
- withdraw your consent at any time (Article 7(3)).
Send requests to [email protected]. We answer within one month. Because we do not link server logs or cookie identifiers to names, we may be unable to identify data about you unless you give us additional information, such as the time of your visit and your IP address.
You also have the right to lodge a complaint with a supervisory authority, in particular in the EU country where you live or work, or with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), https://www.imy.se/.
7. Is providing data required?
No. You can use the website without accepting any cookies other than the one that stores your cookie choice. Server logs are created by every visit to any website and are needed to deliver it.
8. Changes
We update this policy when the processing changes, and state the date of the latest change at the top.