Privacy policy
This policy explains in plain language what data we collect on nordicsite.fi, why we collect it and what rights you have. It is based on the EU General Data Protection Regulation (GDPR, 2016/679) and the Finnish Data Protection Act (1050/2018).
1. Data controller and contact details
The controller of your personal data is NordicSite. For any privacy questions you can contact us by email or phone.
NordicSite (a two-person light-entrepreneur team; invoicing via the UKKO.fi service)
Email: myynti@nordicsite.fi
Phone: +358 46 656 8482
Responsible person: Eelis Sandberg
Postal address: Honkalantie 10, 08700 Lohja, Finland
2. What data we collect
We collect only the data we need to reply to your enquiry and deliver the service. We do not collect data we do not need.
| Data | Where it comes from | Why we need it |
|---|---|---|
| Name or company name | Contact form, email, phone call | So we know who we are replying to and who the demo is for |
| Email address | Contact form, email | Replying and delivering the demo |
| Phone number (optional) | Contact form | We only call if you give us a number |
| Content of your message | Contact form, email | Understanding your needs and preparing a quote |
| Invoicing details (business ID, address) | When ordering | Invoicing via UKKO.fi; accounting-law obligations |
| Technical log data (IP address, browser, timestamp) | Web host server, automatically | Site functionality, security and abuse prevention |
| Your cookie and theme choices | Your browser's local storage | Remembering your choices (see the cookie policy) |
| Anonymous visitor count (page path, referring site name, screen size class, page language) | Sent by your browser to our server after the page has loaded | Improving the site. No IP address, cookie or identifier: an individual visitor cannot be identified or followed from page to page |
We do not collect sensitive data and we do not perform automated decision-making or profiling.
3. Purpose and legal basis of processing
- Replying to enquiries and delivering the demo. Legal basis: steps prior to entering into a contract at your request (GDPR Art. 6(1)(b)) and our legitimate interest in responding to enquiries (Art. 6(1)(f)).
- Delivering the service and invoicing. Legal basis: performance of a contract (Art. 6(1)(b)) and legal obligation, e.g. the Accounting Act (Art. 6(1)(c)).
- Site security and logging. Legal basis: legitimate interest (Art. 6(1)(f)).
- Anonymous visitor statistics without cookies or identifiers. The count contains no personal data, so it does not require consent. Nothing is sent if your browser signals Global Privacy Control or Do Not Track.
- Marketing measurement (Google Ads). Legal basis: your consent (Art. 6(1)(a)), given in the cookie banner. You can withdraw consent at any time.
We do not send electronic direct marketing without your permission. We may send business customers messages related to the customer relationship during the contract.
4. Retention periods
- Enquiries that do not lead to an order: at most 12 months from the last contact, after which messages are deleted.
- Customer relationship data: for the duration of the relationship and 2 years after it ends, to handle any complaints.
- Invoicing and accounting material: for the period required by the Accounting Act (vouchers 6 years from the end of the financial year). Invoicing is handled by UKKO.fi, which keeps the material as its own controller.
- Server logs: according to the web host's practice, typically at most 12 months.
5. Who we share data with (processors)
We never sell or rent your data. We use the following service providers, which process data on our behalf or as their own controller:
| Service | Purpose | Location / transfer |
|---|---|---|
| Our email provider | Receiving and storing messages | EU/EEA or appropriate transfer mechanisms |
| UKKO.fi (light-entrepreneur service) | Invoicing and accounting | Finland. UKKO.fi acts as its own controller for invoicing data. |
| Google Ireland Ltd (Google Ads) | Ad conversion measurement, only with your consent | EU; Google may transfer data to the United States under the EU–US Data Privacy Framework |
| Domainhotelli Oy (domainhotelli.fi) | Web hosting and domain: site hosting, server logging and forwarding contact-form messages to our inbox from our own server | Finland |
If data is transferred outside the EU/EEA, the transfer is based on mechanisms approved by the European Commission (adequacy decision, EU–US Data Privacy Framework or standard contractual clauses).
We may disclose data to authorities where required by law.
6. Cookies and tracking
The site works without tracking cookies. Google Ads measurement cookies are enabled only if you accept them in the cookie banner. Read more in the cookie policy, which also explains how to change your choice.
7. How we protect your data
The site uses an encrypted HTTPS connection. Only the two members of NordicSite have access to the data, and email and other accounts are protected with strong passwords and two-factor authentication wherever possible. We do not keep personal data longer than necessary.
8. Your rights
Under the GDPR you have the right to:
- know whether we process your data and obtain a copy of it (right of access)
- request correction of inaccurate data
- request erasure of your data (“right to be forgotten”), unless the law requires us to keep it
- request restriction of processing
- object to processing based on legitimate interest
- receive the data you provided in a machine-readable format (data portability)
- withdraw your consent at any time (e.g. in the cookie settings) without affecting the lawfulness of earlier processing.
Send requests to myynti@nordicsite.fi. We reply within one month at the latest. We may ask you to verify your identity before fulfilling a request.
If you believe we process your data unlawfully, you have the right to lodge a complaint with the supervisory authority: the Office of the Data Protection Ombudsman, P.O. Box 800, FI-00531 Helsinki, Finland, tietosuoja.fi/en.
9. Changes to this policy
We update this policy when our services or legislation change. The current version is always on this page; the latest update date is shown at the top.