Nurkkala Kodit
FI EN
Request a quote
Privacy

Privacy notice

This notice explains how Nurkkala Kodit Oy processes personal data sent through the website contact form and the website's visitor statistics. It has been prepared in accordance with the EU General Data Protection Regulation (2016/679).

Updated 25 September 2026.

1. Controller

Nurkkala Kodit Oy
Business ID: 3578453‑8

Privacy requests can be sent through the contact form.

2. Personal data processed

We process the data you provide yourself in the contact form:

  • name
  • company
  • email address
  • phone number
  • message content

In addition, the form's spam protection and the server's technical logs process the sender's IP address and technical browser data.

Visitor statistics. The website uses Nettipoika Mittari, a cookieless visitor analytics service. It produces aggregate statistics on how the website is used:

  • page visited and referring page (where the visitor came from)
  • browser, operating system and device type
  • country and region

The IP address is not stored; it is used only to determine country and region. Visitors are counted with an identifier that is regenerated every day, and the random key used to calculate it is deleted after 24 hours. Individual visitors cannot be identified or tracked from one day to the next or across websites.

Visitor statistics are processed and stored exclusively within the EU. The statistics are kept for as long as visitor analytics is in use on the website, after which they are deleted.

3. Purpose and legal basis

The data is used to respond to enquiries, prepare offers and manage customer relationships. Processing is based on the controller's legitimate interest in responding to enquiries addressed to it and, where applicable, on steps taken at the data subject's request prior to entering into a contract.

For spam protection and logs, processing is based on the legitimate interest in protecting the service against misuse.

For visitor statistics, processing is based on the legitimate interest in monitoring and developing the use of the website.

4. Recipients and processors

The data is not sold or disclosed to third parties for marketing purposes. The following service providers, which process data on behalf of the controller, are used to provide the service:

  • Website hosting and security service provider – website hosting, form processing and spam protection
  • Nettipoika Mittari – visitor statistics
  • Email service providers – delivery and storage of form messages

5. Transfers outside the EU and EEA

The website hosting and security service provider may also process data outside the EU and EEA. Transfers are based on the European Commission's standard contractual clauses and the EU–U.S. Data Privacy Framework.

6. Retention period

Contact messages are kept for as long as necessary to respond to the enquiry and manage any resulting customer relationship, but no longer than two years from the last contact, unless the law requires longer retention.

7. Your rights

You have the right to:

  • access your data
  • request correction of inaccurate data
  • request deletion of your data
  • request restriction of processing
  • object to processing based on legitimate interest

If you believe that the processing of your personal data violates data protection law, you can lodge a complaint with the supervisory authority: the Office of the Data Protection Ombudsman.

8. Cookies and visitor tracking

The website does not use tracking or marketing cookies. Nettipoika Mittari, used for visitor statistics, does not use cookies or store data on the visitor's device, so its use does not require separate consent.

Spam protection may use technically necessary data when the form is submitted.