Privacy Policy

1. Data Controller

Nordlate Oy
Helmipöllönkuja 15 A 5
90540 Oulu, Finland
Business ID: 3598078-2
Email: [email protected]

2. Scope

This policy covers the nordlate.com website.

3. Data We Collect

The nordlate.com website is a simple informational site. We collect minimal data:

• Analytics data: We use Cloudflare Web Analytics, a privacy-first measurement tool, to understand how the website is used. It provides aggregate statistics such as pages visited, referrers, browser type, and country. It uses no cookies, no localStorage, and no fingerprinting, and cannot identify or track individual visitors.
• Consent-based website analytics: If you accept analytics cookies, we also use Google Analytics 4 to understand visits and navigation. Google may process page URLs and titles, referrers, approximate location, and browser and device information together with a pseudonymous browser identifier. We do not send names, email addresses, or other information intended to identify you directly.
• Contact information: If you email us, we store your email address and message content to respond to your inquiry.

4. Cookies

Google Analytics remains disabled unless you choose “Allow all” in the cookie banner. If accepted, Google Analytics sets the first-party cookie _ga to distinguish browsers and a _ga_<measurement-id> cookie to maintain session state. We configure both cookies to expire 12 months after they are first set and do not enable Google Signals or advertising personalization.

Your consent choice is stored in this browser's localStorage for up to 12 months so the site can remember it. This is necessary to apply your choice and is not used for tracking. You can accept, reject, or withdraw analytics consent at any time through “Cookie settings” in the footer. Withdrawing consent stops further Analytics collection and removes accessible Google Analytics cookies from this site.

Cloudflare Web Analytics remains cookieless. No analytics data is used for targeted advertising or tracking across other websites.

5. Legal Basis

We process personal data based on:

• Legitimate interest: Operating, securing, and improving the website using aggregate, cookieless analytics, and responding to general contact inquiries.
• Pre-contractual measures: Handling inquiries related to engaging our services.
• Consent: Running Google Analytics and storing its analytics cookies after you accept them. You may withdraw consent at any time.

6. Data Retention

Analytics data is aggregate and contains no personal profiles. Email correspondence is retained as long as necessary to handle your inquiry and for potential follow-up. Google Analytics cookies and the stored consent choice expire after no more than 12 months under our website configuration. Analytics event data is retained according to the retention settings of our Google Analytics property.

7. Data Sharing and International Transfers

We do not sell your personal data. We use the following third-party providers, which may process data outside the European Economic Area:

• Cloudflare (hosting, content delivery, and cookieless web analytics) — Cloudflare Inc. is certified under the EU-US Data Privacy Framework.
• Google Analytics (consent-based website measurement) — provided by Google Ireland Limited. Google may process data outside the EEA using approved transfer safeguards.

These providers act as data processors under appropriate agreements, including Standard Contractual Clauses where applicable.

8. Your Rights

Under the GDPR, you have the right to:

• Access, correct, or delete your personal data
• Object to or restrict certain processing
• Data portability — receive your data in a structured, machine-readable format
• Withdraw consent at any time for any consent-based processing, without affecting the lawfulness of processing carried out before withdrawal

To exercise these rights, contact us at [email protected].

If you believe we have not handled your data appropriately, you have the right to lodge a complaint with a supervisory authority. In Finland, this is the Office of the Data Protection Ombudsman (tietosuoja.fi).

9. Changes to This Policy

We may update this policy to reflect changes in our practices or legal requirements. Updates will be posted on this page.