Data Controller

Nordautomation Oy (Business ID: 0853293-3).

Contact person for registry matters:

Matti Holvikallio
Hevoshaantie 5
FI-64100 Kristiinankaupunki, Finland

matti.holvikallio@nordautomation.fi

Purposes and legal grounds for processing personal data

We process personal data for the following purposes:

  • Delivery of material (guide) and contact requests: We process the data provided via the form to deliver the requested guide and to respond to contact requests. The legal basis is the performance of a contract, steps prior to entering into a contract, or consent.
  • B2B marketing and customer relationship management: We may contact company representatives who downloaded the guide regarding our services or provide relevant company updates. The legal basis is the legitimate interest of the controller (B2B direct marketing and business development) or consent given by the data subject.
  • Website development and visitor analytics: Analyzing the functionality and user experience of our website. The legal basis is consent given by the data subject (cookies).

Categories of personal data processed

  • Basic personal details: First name, last name, email address, telephone number, company, and job title or role.
  • Technical and usage data (analytics and cookies): IP address, browser and device type, visited pages, duration of the visit, and cookie identifiers (Google Analytics).

Regular sources of data

Personal data is collected directly from the data subjects themselves via the website form or in connection with website use through cookies and similar technologies.

Transfers and recipients of personal data

Data is not disclosed to third parties for their independent use without prior consent. Data may be disclosed to public authorities based on statutory legal obligations.

We use trusted service providers (such as IT and email hosting providers and website hosting platforms) that process data on behalf of Nordautomation Oy in accordance with data processing agreements.

Additionally, the website utilizes the following third-party services:

  • Google Analytics: Website usage analytics.
  • YouTube (Google LLC): Displaying embedded videos on the site.
  • Vimeo (Vimeo, Inc.): Displaying embedded videos on the site.

Data transfers outside the EU or EEA

Some of our service providers (such as Google and Vimeo) operate or maintain servers in the United States.

Data transfers to the United States comply with the EU-U.S. Data Privacy Framework or the Standard Contractual Clauses (SCC) approved by the European Commission, ensuring an adequate level of data protection.

Data retention period

We retain personal data only for as long as necessary to fulfill the purposes set out above:

  • Contact details collected in connection with downloading the guide are retained for the duration of the active customer relationship or communication need, or until the data subject opts out of marketing or requests the erasure of their data.
  • Analytics data is retained according to the retention periods specified in the Google Analytics settings.

Principles of data security

Data is protected using appropriate technical and organizational measures:

  • All personnel processing data are bound by confidentiality obligations.
  • Electronic data is stored in secured databases and servers protected by firewalls, user accounts, and passwords.
  • Only designated employees whose duties require access are permitted to process the data.

Rights of the data subject

Under the EU General Data Protection Regulation (GDPR), the data subject has the following rights:

  • Right of access: The right to obtain confirmation as to whether personal data is being processed, and to inspect their personal data.
  • Right to rectification: The right to demand the rectification of inaccurate or incomplete data.
  • Right to erasure (“right to be forgotten”): The right to request the deletion of personal data where there is no longer a legal ground for processing.
  • Right to restriction of processing: The right to request the restriction of processing under certain circumstances specified by law.
  • Right to object: The right to object to the processing of personal data based on legitimate interest. Direct marketing can be objected to at any time without providing specific grounds.
  • Right to withdraw consent: Where processing is based on consent (such as cookies or newsletters), consent can be withdrawn at any time.
  • Right to data portability: The right to receive the personal data provided by the data subject in a structured, machine-readable format under certain conditions.
  • Right to lodge a complaint: The right to lodge a complaint with a supervisory authority (in Finland, the Office of the Data Protection Ombudsman, www.tietosuoja.fi) if the data subject considers the processing of personal data to be in violation of applicable data protection law.

Requests concerning the exercise of the data subject’s rights should be sent to the email address specified in the Data Controller section.

Cookies

The website uses the following cookies:

  • _ga*: Google Analytics: non-essential, visitor tracking and statistics
  • _ga_*: Google Analytics: non-essential, visitor tracking and statistics
  • moove_gdpr_popup: Cookie choice: essential, storing cookie consent preferences
  • wordpress_test_cookie: Website platform: essential