Privacy Policy

Last updated: 1 January 2025 — Compliant with GDPR and Finnish Data Protection Act (1050/2018)

This privacy policy describes how Nordic Shelter Oy processes personal data collected via the website nordicshelter.fi, in accordance with the General Data Protection Regulation (GDPR) and the Finnish Data Protection Act (Tietosuojalaki 1050/2018).

1. Data Controller

Nordic Shelter Oy
Hervannan valtaväylä 12 — 33720 Tampere, Finland
Y-tunnus: 2783451-6 | ALV: FI27834516
Email: [email protected] | Tel: +358 3 234 5678

2. What Data Do We Collect?

• Navigation data: IP address, browser type, pages visited (collected automatically).
• Contact data: name, email address, phone number and message submitted via the contact form.
• Cookies: see our Cookie Policy.

3. Purposes and Legal Bases

• Responding to product enquiries and quotation requests (legal basis: performance of a contract — Art. 6(1)(b) GDPR).
• Legal obligations, including invoicing (legal basis: legal obligation — Art. 6(1)(c) GDPR).
• Anonymous website statistics (legal basis: legitimate interests — Art. 6(1)(f) GDPR).
• Newsletter and marketing: only with explicit consent (legal basis: consent — Art. 6(1)(a) GDPR).

4. Retention Periods

Contact data is retained for a maximum of 5 years after the last interaction. Accounting data is retained for 6 years in accordance with Finnish accounting legislation. Navigation data for a maximum of 13 months.

5. Your Rights

Under the GDPR you have the right to: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21). Send your request to [email protected]. You may also lodge a complaint with the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto) at tietosuoja.fi.

6. Cookies

We use strictly necessary cookies (session, cookie consent storage) and, subject to your consent, analytics cookies. See our full Cookie Policy.

Manage Cookie Preferences

7. Third-Party Processors

We may use the following categories of processors: hosting providers (EU-based servers), email service providers and website analytics tools. All processors are bound by data processing agreements and operate within the EU/EEA.

8. Data Transfers Outside the EU

We do not transfer personal data outside the EU/EEA. Should this change, we will ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses).

9. Changes to This Policy

We may update this policy from time to time. The date at the top of the page reflects the date of the most recent revision. Continued use of the website after changes constitutes acceptance of the updated policy.