Effective Date: April 2026 Version: 1.0
This Privacy Policy explains how Nordex Food A/S (“Nordex Food” or “the Company”) collects, processes, stores and protects the personal data of business partner representatives (“Users”) who use the Sütdiyarı Partner Portal (“the Portal”). The Portal is accessible exclusively to approved business partners, and access to the system is conditional on acceptance of this Policy and the Terms of Use.
The data controller processing personal data within the scope of the Portal is:
| Name | Nordex Food A/S |
| Brand | Sütdiyarı |
| Address | Nordre Ringgade 2 DK-9330 Dronninglund, Denmark |
| sutdiyari@sutdiyari.com |
The Sütdiyarı Partner Portal is a fully closed system. Access is granted exclusively to approved business partner representatives of Nordex Food. Users who have not logged in cannot access any content.
During registration, the user is required to provide the following information:
Upon completion of registration, the account is automatically activated and the user gains access to the Portal. Nordex Food reserves the right to block or permanently close any account without prior notice if deemed necessary.
By completing the registration form and accepting this Privacy Policy, the user acknowledges that they have read and understood this Policy and agrees to the processing of their personal data in accordance with the legal bases described herein. The user also confirms that:
• they accept the Portal Terms of Use,
• the information provided is accurate and up to date.
Data collected during the user’s registration and as part of account management:
Technical and behavioural data collected automatically while the user is using the Portal:
The Portal may use cookies and similar technologies for the following purposes:
With the exception of strictly necessary cookies relating to session management, users may manage their cookie preferences via the Portal’s cookie management panel.
Nordex Food processes the personal data it collects for the purposes and on the legal bases set out below:
| Purpose of Processing | Data Category | Legal Basis |
| Providing Portal access and authentication | Registration and account data | Performance of contract |
| Verifying approved business partner status | Registration data, corporate data | Legitimate interest |
| Portal security and prevention of unauthorised access | Session data, technical data | Legitimate interest, legal obligation |
| Monitoring material usage and compliance with Terms of Use | Navigation and interaction data | Legitimate interest, performance of contract |
| Improving Portal content, functionality and user experience | Navigation data, technical data | Legitimate interest |
| Monitoring correct and appropriate use of brand materials | Interaction data | Legitimate interest |
| Communicating with users about Portal updates, changes and announcements | Registration data, e-mail | Performance of contract |
| Fulfilling legal obligations and protecting rights | All relevant data | Legal obligation |
Nordex Food does not sell, rent or share personal data with third parties for commercial purposes. Data may be transferred only in the following circumstances and to the extent necessary:
All third-party service providers are bound by a data processing agreement under which they may process personal data only in accordance with Nordex Food’s instructions and in compliance with applicable confidentiality and security standards.
The technical infrastructure of the Portal is primarily hosted within the European Economic Area (EEA). Personal data is generally processed within the EEA. In the event that personal data is transferred outside the EEA, such transfers will only take place where appropriate safeguards are in place in accordance with applicable data protection laws, including the use of standard contractual clauses or other approved mechanisms. Nordex Food ensures that all service providers process personal data in compliance with applicable data protection requirements and maintain an appropriate level of security.
Personal data is retained for as long as the processing purpose persists and thereafter for the retention periods specified below:
Upon expiry of the relevant period, data is permanently deleted or anonymised.
Users have the following rights in relation to their personal data:
To exercise these rights, you may submit a written request to sutdiyari@sutdiyari.com. Requests will be responded to within 30 calendar days. Identity verification may be requested.
You also have the right to lodge a complaint with the data protection authority in your country. In Denmark, this authority is Datatilsynet (www.datatilsynet.dk).
Nordex Food applies technical and administrative security measures to protect personal data against unauthorised access, loss or destruction, including:
In the event of a security breach, Nordex Food will, where required, notify the relevant individuals and competent authorities within the timeframes prescribed by the GDPR.
A user account may be closed and Portal access terminated in the following circumstances:
Upon account closure, active personal data is deleted or anonymised; data that must be retained due to legal obligations continues to be held securely for the required period.
Nordex Food reserves the right to monitor material download, viewing and sharing activities conducted via the Portal at the business partner level for the purpose of protecting the values and reputation of the Sütdiyarı brand. This monitoring is carried out for the purposes of:
Individual usage data is not shared with third parties except for the purpose of legal compliance or a security investigation.
Nordex Food may update this Privacy Policy at any time. In the event of material changes, users will be notified via the Portal or by e-mail at least 14 days before the updated policy takes effect. Continued use of the Portal after the updated policy has been published constitutes acceptance of the new policy.
This Privacy Policy has been prepared and shall be applied in accordance with the laws of Denmark and the provisions of the European Union General Data Protection Regulation (GDPR) – EU Regulation 2016/679. Disputes shall be subject to the jurisdiction of the Danish courts.
For questions, requests or complaints regarding this Privacy Policy:
| Organisation | Nordex Food A/S – Sütdiyarı Brand Team |
| sutdiyari@sutdiyari.com |
Consent Statement: By completing the registration form and logging in to the Portal, you declare that you have read and understood this Privacy Policy and that you consent to the processing of your personal data as described herein.