PRIVACY POLICY

Päivitetty 11.04.2023

This Privacy Policy sets out our practices regarding the processing of personal data and our practices regarding website visits.

1. Data processor and controller

Nordtreat Oy
Mestarintie 11
FI-01730 Vantaa
Business ID: 2927144-5

Contact person:

Aki Borgentorp
aki.borgentorp@nordtreat.com

2. Whose data do we process?

For the purposes of maintaining customer relationships and marketing our services to businesses, we process data of 

• Our customers
• Our potential customers
• Representatives of our stakeholder organisations
• Users of our products and services

3. What information do we process?

We may process and store the following personal data:

• Name
• Contact details: telephone number, email address and address
• Name of employer
• Job role/title
• Customer feedback and contacts
• Information about your use of our services, such as website browsing and search data, cookies
• Interest and profiling information
• Information about your use of our services, such as website browsing and search data, cookies
• Consents or prohibitions relating to newsletter communications and direct marketing
• Any other information necessary for the purposes for which the register is used
  
  

4. Where do we get the information?

We receive personal data

• From the individual or the client company he or she represents
• In the course of transactions, contracts and the use of our services
• From the company and corporate information system and the commercial register
• From marketing information companies
• Number and address data providers
• Credit reference agencies/registries

5. Purpose and basis of the processing of personal data

We process and store personal data for the purposes of establishing a customer relationship, customer care, customer management and development, customer communication, analysis and statistics.

We also use personal data for the sale, marketing and customer marketing of our products and services. The information may be used to develop our company's business and services.

The processing of personal data is based on the legitimate interest or agreement of the controller in accordance with the General Data Protection Regulation (EU) 2016/679.

6. How long do we keep personal data?

We process personal data for as long as the customer contract for which we need the personal data is in force. After this period, the personal data may be used for marketing, newsletter communications and other purposes mentioned above. We will delete personal data from our register at the individual's own request or when the data is otherwise no longer necessary for our purposes.

You can always opt-out of the use of personal data for direct marketing by using the opt-out option provided in newsletter and marketing communications or by notifying us.

7. Rights concerning the register of personal data

Requests for the rights listed below should be made in person by visiting our offices or by sending a signed request by email to info@nordtreat.com.

For requests, the identity of the person making the request must be verifiable by identification:

• Name
• Personal identification number
• Postal address
• Telephone number
• Information requested

We will always send a reply to the address verified by the Population Information System.

Right of inspection and right to request correction of data

You have the right to check the personal data we hold about you and request that it be corrected or completed.

Right to object

You have the right to object at any time to the processing of your personal data if you believe that we have processed your personal data unlawfully or that we are not entitled to process any personal data.

Direct marketing ban

You have the right to object at any time to us using your personal data for direct marketing. We will never sell or otherwise disclose personal data to other parties for direct marketing purposes without your explicit consent.

Right of withdrawal

Right of appeal

You have the right to complain to the Data Protection Ombudsman if you feel that we are in breach of applicable data protection law when we process your personal data.

8. Disclosures of personal data

As a general rule, we do not disclose personal data to third parties outside our company without your consent.

However, we may disclose personal data to the individual, to the company they represent and to service providers we use for customer relationship management, communications, marketing, direct marketing and surveys. Ownership of the personal data is not transferred to a third party, and the third party does not have the right to use the data for any purpose other than the commissioning of the data by Nordtreat.

We ensure that our service providers comply with data protection legislation. We regularly use the following service providers, among others:

• Blink Helsinki Oy, 0590949-1, Lönnrotinkatu 32 E 53, 00180 Helsinki, marketing agency
• HubSpot Ireland Ltd, IE9849471, One Dockland Central, Guild Street, Dublin 1, Co. Dublin Ireland, marketing system provider

9. Transfer of personal data outside the EU

We do not transfer personal data outside the EU and we ensure that our service providers do not transfer personal data outside the EEA without the written consent of the individual. Exceptions to this are the US-based Google Analytics service and the HubSpot marketing system, which is Privacy Shield certified. No personal data is transferred to other third countries.

10. Principles of register protection

We process personal data in accordance with good data processing practices as defined below, in cooperation with our service provider Blink Helsinki Oy, marketing agency.

• We ensure that access rights to the service are granted only to specifically designated persons in charge of the company, according to the need for use.
• We ensure by contract with the service provider that:
  • The service provider will process personal data through operational, administrative, physical and technical measures in accordance with good security practices.
  • The equipment of the service provider or of the subcontractor used by the service provider where the register is located is secured and protected by a firewall and other necessary technical measures (including anti-malware, other hostile attacks).
  • The service provider keeps up-to-date records of the processing of personal data and restricts access to personal data only to its employees who are duly authorised and trained and have a defined need to process personal data.

11. Visits to our website

We use cookies and online forms on our website to improve our service, communication and user experience. Cookies allow us to analyse and improve the functionality and content of the website.

Cookies

We use cookies on our website. A cookie is a small text file that is sent to and stored on a user's computer. Cookies do not damage your computer or files. Most browsers allow the user to control cookies, for example by disabling cookies completely, accepting each cookie individually and deleting stored cookies from your hard drive. If a person disables cookies completely, they may not be able to use some of the features of our website.

Google Analytics

HubSpot

We use our website as part of the HubSpot marketing system, which uses cookies to collect and store information such as time of visit, pages visited, time spent on each page and IP address. In addition, HubSpot may collect information from completed online forms (e.g. subscriptions, downloads and contact requests) and information from email and newsletter communications with Nordtreat.

We also use HubSpot to send newsletter and direct marketing messages.

An individual has the right to object at any time to us using his or her personal data for direct marketing purposes by using the opt-out option provided in marketing and newsletter communications or by notifying us.