Privacy Policy

We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we process your data.

Contents

  1. Data controller
  2. Data subjects
  3. Legal basis and purpose of processing
  4. Personal data stored
  5. Rights of the data subject
  6. Regular sources of data
  7. Regular disclosures of data
  8. Retention periods
  9. Processors of personal data
  10. Transfers of data outside the EU or EEA
  11. Automated decision-making and profiling
  12. Cookies
  13. Changes to this privacy policy

1. Data controller

Nordo Oy
Business ID: 3589715-3
Postal address: Alatie 5 A 2, 36270 Kangasala, Finland

Contact for data protection matters:

Kari Nieminen
Postal address: as above
Phone: +358 50 491 4583
Email: info@nordo.fi

2. Data subjects

Nordo Oy’s register contains data on:

  • Website visitors
  • Customers who have purchased our services or made enquiries
  • Newsletter subscribers

3. Legal basis and purpose of processing

Legal basis for processing:

  • Contact details are processed on the basis of the customer relationship and invoicing
  • Contact details are processed on the basis of consent (newsletter)
  • Website visitor data is processed on the basis of legitimate interest (website development and analytics)

Purposes of processing:

Personal data is processed only for the following predefined purposes:

  • Managing customer relationships and responding to enquiries
  • Customer communications and newsletters
  • Providing information about our services
  • Ensuring the functionality and development of the website
  • Targeting marketing and advertising

4. Personal data stored

Contact form:

  • Name
  • Email address
  • Message

Newsletter:

  • Email address

Website use:

  • IP address
  • Browser type and version
  • Operating system
  • Pages visited and click behaviour
  • Time and duration of visit
  • Referring website
  • Device type (desktop, mobile, tablet)

Customer register (if a customer relationship is established):

  • Company name
  • Contact person’s name
  • Address
  • Email address
  • Phone number
  • Details of services purchased

5. Rights of the data subject

You have the following rights. Requests to exercise them should be sent to info@nordo.fi.

Right of access
You can check the personal data we hold about you.

Right to rectification
You can request the correction of inaccurate or incomplete data concerning you.

Right to object
You can object to the processing of your personal data if you believe it has been processed unlawfully.

Prohibition of direct marketing
You have the right to prohibit the use of your data for direct marketing. You can unsubscribe from the newsletter via the link at the end of each message.

Right to erasure
You have the right to request the deletion of your data if its processing is no longer necessary. We will handle your request and either delete the data or inform you of the justified reason why it cannot be deleted.

Please note that the controller may have a statutory or other right not to delete the requested data. The controller is obliged to retain accounting records for the period laid down in the Finnish Accounting Act (Chapter 2, Section 10), i.e. 10 years. Accounting-related records therefore cannot be deleted before this period has expired.

Withdrawal of consent
If the processing of your personal data is based solely on consent and not, for example, on a customer relationship, you can withdraw your consent.

Restriction of processing
You have the right to require us to restrict the processing of disputed data until the matter has been resolved.

Right to lodge a complaint
You have the right to lodge a complaint with the Data Protection Ombudsman if you believe that we have breached applicable data protection legislation when processing your personal data.

Contact details of the Data Protection Ombudsman:
tietosuoja.fi/en/contact-information

6. Regular sources of data

Customer data is regularly obtained:

  • Through the contact form
  • Through newsletter subscriptions
  • In connection with website use (cookies and analytics)
  • From customers themselves by email or phone

7. Regular disclosures of data

As a rule, data is not disclosed outside Nordo Oy for marketing purposes. We have ensured that our agreements with service providers take the General Data Protection Regulation (GDPR) into account.

We use the following service providers:

  • WordPress.com – Website maintenance and hosting (data stored within the EU)
  • Google LLC – Google Analytics 4, Google Search Console, Google Ads (USA, transfers under EU-approved mechanisms)
  • Microsoft Corporation – Microsoft Clarity (USA, transfers under EU-approved mechanisms)
  • Cookiebot – Cookie management (EU)
  • Smush (WPMU DEV) – Image optimisation

8. Retention periods

Contact forms: 24 months from submission
Newsletter: Until you unsubscribe (via the link in each message)
Website analytics data:

  • Google Analytics 4: 14 months
  • Microsoft Clarity: 90 days

Customer data: For the duration of the customer relationship plus the period required by accounting legislation (10 years)

9. Processors of personal data

Customer contact details are processed by the founders of Nordo Oy and its accountant. We may also partly outsource the processing of personal data to a third party, in which case we ensure through contractual arrangements that personal data is processed in accordance with applicable data protection legislation and otherwise appropriately.

10. Transfers of data outside the EU or EEA

Personal data may be transferred outside the EU or EEA in the following cases:

Google LLC (USA):

  • Google Analytics 4
  • Google Search Console
  • Google Ads

Microsoft Corporation (USA):

  • Microsoft Clarity

These transfers are based on EU-approved data protection mechanisms (EU-U.S. Data Privacy Framework) and the service providers’ commitment to data protection legislation.

11. Automated decision-making and profiling

We do not use data for automated decision-making or profiling that would produce legal effects concerning you or similarly significantly affect you.

12. Cookies

This website uses cookies to personalise content and ads, to provide social media features and to analyse our traffic.

Cookies are small text files that websites can use to make the user experience more efficient.

By law, we may store cookies on your device if they are strictly necessary for the operation of the website. For all other types of cookies, we need your consent.

This website uses the following cookies:

Necessary cookies:

  • WordPress.com – Session management, login
  • Cookiebot – Storing your cookie consent
  • Polylang – Storing your selected language (pll_language)

Analytics cookies:

  • Google Analytics 4 – Analysing website use
  • Microsoft Clarity – Behavioural analysis, heatmaps

Marketing cookies:

  • Google Ads – Ad targeting and conversion measurement

Managing cookies:

You can manage your cookie settings via the Cookiebot banner that appears when you first visit our website. You can also change your settings in your browser.

Blocking cookies:

Most browsers accept cookies automatically. However, you can change your browser settings to prevent cookies from being stored. Please note that blocking cookies may affect the functionality of the website.

13. Changes to this privacy policy

We reserve the right to update this privacy policy. Changes will be announced on our website. We recommend that you check this privacy policy regularly.

Last updated: 6 November 2026