Controller
Nordsek Oy, business ID 3537295-5, Taivalmäki 9, 02200 Espoo, Finland, is the controller of personal data processed on this site. Contact us through the contact page for any privacy request.
What we collect and why
Contact form
Your name, email address, the market you select and your message. We use them to answer you. Legal basis: taking steps at your request before or in connection with a contract, and our legitimate interest in answering enquiries. Retained for twelve months after our last reply, then deleted.
Newsletter
Your email address, the date you subscribed and the language of the page you subscribed on. We use them to send the newsletter you asked for. Legal basis: your consent, which you can withdraw at any time through the unsubscribe link in every email. Retained until you unsubscribe.
Comments on guides
The name you enter, your email address, the comment and the time of posting. The name and comment are published after review; the email address is not. Legal basis: our legitimate interest in running a moderated discussion. Retained while the guide is published, or until you ask us to remove your comment.
Technical data
When you load a page, our hosting provider records your IP address, the page requested, the time, and browser information in server logs, and uses them to deliver the page and to detect abuse. Legal basis: our legitimate interest in running a secure service. Logs are retained for a short period set by the hosting provider, typically no more than thirty days.
What we do not do
We do not run advertising trackers or analytics cookies on this site, we do not sell personal data, we do not profile you, and we make no automated decisions with legal effect on you. If you follow a link to a provider or to a country comparison, that site's privacy policy applies from there.
Who receives your data
Processors acting on our instructions: our hosting provider, Vercel Inc., which serves the site and keeps the server logs; and our database provider, Supabase Inc., which stores form submissions, subscriptions and comments. Both are established in the United States; transfers are covered by the European Commission's standard contractual clauses and, where applicable, the EU-US Data Privacy Framework. We disclose data to authorities only where the law requires it.
Your rights
Under the General Data Protection Regulation you may ask for access to your data, correction, deletion, restriction of processing, and a copy in a portable format; you may object to processing based on legitimate interest; and you may withdraw consent at any time without affecting earlier processing. Write to us through the contact page; we answer within one month. You also have the right to complain to the Finnish Data Protection Ombudsman (tietosuoja.fi) or to the supervisory authority of your own country.
Changes
We update this policy when our processing changes. The date at the top is the date of the current version. Material changes are announced on this page.
