​

This privacy notice has been prepared in accordance with the EU General Data Protection Regulation (GDPR) and the Finnish Personal Data Act. The notice concerns the customer registers of nollaE Oy, including website contact forms, email communication, the customer relation system, and potential marketing communication.

 

Controller

nollaE Oy

Aurakatu 41 B, 20100 TURKU
p. +358 20 7432 222
info@nollae.fi

Y-tunnus: 2613111-3

​​

Name of the register

​

nollaE Oy customer register

​​

Purpose and Legal Basis for Processing

​

Personal data is processed for the following purposes:

 

• Receiving and responding to inquiries (legal basis: consent)

• Preparing offers and invoicing (legal basis: contract or pre-contractual measures)

• Accounting obligations (legal basis: legal obligation)

• Marketing communication (legal basis: consent)

• Information sharing

 

Marketing communication is sent only to individuals who have given separate consent. Consent can be withdrawn at any time. Data is not used for automated decision-making or profiling. nollaE reserves the right to update this privacy notice at any time, and we recommend reviewing its content regularly.

​

Content of the register

 

The data stored in the register may include:

 

• Name

• Email address

• Phone number

• Company name and business ID

• Billing address

• Communication history (emails, form submissions)

• Offer and invoicing information

• Possible marketing consent

• Other information necessary for providing nollaE’s consulting services

 

Sources of data

​

Data is obtained directly from the individual via the contact form, email, customer relationship, or marketing consent.

 

Disclosure and Transfer of Data

​

Data is processed by nollaE Oy’s personnel. Data is not disclosed for marketing purposes without consent and is not transferred outside the EU or EEA without the explicit permission of the data subject.

​

Data retention period

Personal data is retained only as long as necessary for the purposes of processing:

 

• Contact form data: up to 24 months unless a customer relationship is established

• Offer and invoicing data: at least 6 years and/or in accordance with accounting legislation

• Email communication: up to 3 years unless the customer relationship continues

• Marketing consent: valid as long as consent is active or until withdrawn

 

The data subject may request deletion of their data at any time.

​

Rights of the Data Subject

​

The data subject has the following rights:

 

• Right of access to their data

• Right to rectification and supplementation

• Right to erasure (“right to be forgotten”)

• Right to restriction of processing

• Right to data portability

• Right to object to processing

 

Requests must be submitted in writing to the controller. The controller may request verification of identity and will generally respond within one month.

​​

​

Data security

​

Data is processed carefully and protected with technical and organizational measures. Access to data is restricted only to persons who have the right to do so based on their work tasks.​

​

Cookies and analytics

 

The nollaE Oy website collects analytics to analyze website usage and uses cookies. Website visitors can adjust cookie settings if they wish.