Privacy policy

Nordem Solutions Oy (Business ID 0898083-2)
Friitalantie 11, 28400 Ulvila, Finland

For privacy matters, contact [tietosuoja@nordemsolutions.com]. Contact person: [First name Last name].

Contact form

When you send a message through the site’s form, we store the name, email address and message you give us and, if you choose, your organisation, phone number and topic. We also store the time of sending, the language of the site and the page the message was sent from.

We use this information to reply to you and for related correspondence, such as preparing a quotation. The legal basis is our legitimate interest in answering enquiries and, where relevant, steps taken at your request before entering into a contract (Article 6(1)(f) and (b) of the General Data Protection Regulation, GDPR). We need the mandatory fields to be able to reply.

Messages are stored in the site’s content management system, which only the Nordem employees who handle them can access, and a notification is sent to Nordem’s email. The notification email contains your message and contact details. To prevent spam, the sender’s IP address is used for at most ten minutes to limit how many messages can be sent. The IP address is not stored with the message.

To protect the form against spam we use Cloudflare Turnstile. When you open a page with the form, Turnstile checks technical data in the background, such as your IP address and browser details, to make sure the form is used by a person and not an automated program. The service is provided by Cloudflare, Inc. The legal basis is our legitimate interest in protecting the form against misuse (Article 6(1)(f) GDPR).

We keep enquiries and their notifications for as long as needed to deal with them, and for no more than [24 months]. The content management system deletes older messages automatically. If an enquiry leads to a customer relationship, the information is processed as part of managing that relationship.

Job applications

If you send an open application or ask about a vacancy through the form, we use the information you give us for recruitment. The legal basis is steps taken at your request before entering into an employment contract and our legitimate interest in assessing applicants (Article 6(1)(b) and (f) GDPR). We keep applications for [6 months] after the recruitment closes.

Analytics (Google Analytics)

If you consent, we use Google Analytics 4 to understand how the site is used and to improve it. Using cookies, the service collects information such as the pages viewed, visit length, referring site, device, browser and approximate location at country or city level. Google Analytics 4 does not store IP addresses. We do not combine analytics data with other data or use it for advertising.

The legal basis is your consent (Article 6(1)(a) GDPR and section 205 of the Finnish Act on Electronic Communications Services). Google Analytics only loads after you accept analytics cookies. You can withdraw your consent at any time in the cookie settings, and the analytics cookies are then removed from your browser.

The service is provided by Google Ireland Limited. Data may be transferred to Google LLC in the United States. Google LLC is certified under the EU–US Data Privacy Framework, and the European Commission’s Standard Contractual Clauses also apply. Analytics data is kept for [14 months].

Cookies

The site uses one necessary cookie that remembers your cookie choices. Other cookies are only used with your consent. All cookies are listed under Cookies below.

Records of consent

So that we can demonstrate consent when needed, we keep a record of each cookie choice that contains neither your name nor your IP address: a random identifier (the same one is in your own cookie), your choice per cookie group, and the time and language. Records are deleted automatically after 24 months. To prevent misuse, the server keeps your IP address in memory for up to ten minutes; it is not stored in the record. The legal basis is our obligation to demonstrate consent (Article 7(1) and Article 6(1)(c) GDPR).

Running the website

The servers that deliver the site process technical data on every visit, such as the IP address, time, requested page and browser details. This data is only used to deliver the site and keep it secure, and it is deleted within [30 days]. The legal basis is our legitimate interest in keeping the site running and secure. The servers for the site and its content management system are run by Scene Group Oy.

The site does not load fonts, images or other files from third-party servers, apart from the contact form’s spam protection (Cloudflare Turnstile) and services that only load with your consent.

We do not sell or rent personal data. We use service providers that process data only on our behalf: Scene Group Oy (servers for the site and the content management system), [email service], Cloudflare (spam protection for the contact form) and, with your consent, Google (analytics). Data may be disclosed to authorities where the law requires it.

Data may only be transferred outside the EU and EEA in connection with Google Analytics and Cloudflare Turnstile. Google LLC and Cloudflare, Inc. are certified under the EU–US Data Privacy Framework, and the European Commission’s Standard Contractual Clauses also apply.

You have the right to

• know what data we process about you (Article 15)
• have inaccurate data corrected (Article 16)
• have your data erased (Article 17)
• have processing restricted (Article 18)
• object to processing based on legitimate interest (Article 21)
• receive the data you have given us in a machine-readable format (Article 20)
• withdraw your consent at any time (Article 7). Withdrawal does not affect the lawfulness of processing carried out before it.

Send your request to [tietosuoja@nordemsolutions.com]. We reply within one month. If you believe the processing of your personal data breaks data protection law, you can lodge a complaint with the Office of the Data Protection Ombudsman in Finland (tietosuoja.fi).

The site and its form use an encrypted connection (HTTPS). The content management system requires personal accounts, and only the Nordem employees who need enquiries for their work can access them. [Add: backups and two-factor authentication.]

We update this policy when the site or the law changes. Last updated 28 October 2026.