Privacy Policy

1. Data Controller

2. Data Protection Contact

For data protection inquiries, please contact us at: privacy@nordic-valo.com

3. Personal Data We Collect

We collect the following personal data on our website:

3.1 Data Collected Through Contact Form

• Name (required)
• Email address (required)
• Company name (required)
• Phone number (optional)
• Message (required)

3.2 Automatically Collected Technical Data

• IP address
• Browser type and version
• Operating system
• Website visit timestamps
• Pages visited
• Device screen resolution

4. Purposes and Legal Basis for Processing

Purpose	Legal Basis (GDPR)	Retention Period
Responding to inquiries	Legitimate interest (Art. 6.1.f)	2 years
Customer service and support	Contract performance (Art. 6.1.b)	Duration of contract + 3 years
Marketing communications	Consent (Art. 6.1.a)	Until consent withdrawal
Website development	Legitimate interest (Art. 6.1.f)	1 year
Statistics and analytics	Legitimate interest (Art. 6.1.f)	1 year

5. Cookies

Our website uses cookies to improve user experience:

5.1 Essential Cookies

• Session cookies - enable basic website functionality
• Security cookies - protect website from attacks

5.2 Functional Cookies

• Preference cookies - remember user choices
• Language settings - store selected language

5.3 Analytics Cookies

• Google Analytics - website usage tracking (anonymized)
• Performance cookies - website speed optimization

6. Data Sharing and Transfers

6.1 Sharing with Third Parties

We share your personal data only in the following situations:

• Service providers - technical service maintenance (e.g., hosting, email services)
• Legal obligation - authority requests and legal proceedings
• Consent - when you have given explicit consent

6.2 International Data Transfers

Some of our service providers may be located outside the EU/EEA. We ensure that:

• Data transfers are based on EU Commission adequacy decisions
• We use appropriate safeguards (e.g., standard contractual clauses)
• Data is protected at the level required by GDPR

7. Data Security

We protect your personal data with appropriate technical and organizational measures:

• Encryption - HTTPS connection for all data transfers
• Access control - only authorized personnel handle data
• Regular backups - ensuring data availability
• Security monitoring - continuous system surveillance
• Staff training - regular data protection training

8. Your Rights

You have the following rights regarding your personal data:

8.1 Right of Access (Art. 15)

You can request information about what personal data we process about you.

8.2 Right to Rectification (Art. 16)

You can request correction of incorrect or incomplete data.

8.3 Right to Erasure (Art. 17)

You can request deletion of your personal data in certain situations.

8.4 Right to Restrict Processing (Art. 18)

You can request restriction of data processing in certain circumstances.

8.5 Right to Data Portability (Art. 20)

You can request your personal data in machine-readable format.

8.6 Right to Object (Art. 21)

You can object to processing of your data based on legitimate interest.

8.7 Right to Withdraw Consent

You can withdraw your consent at any time.

9. Changes to Privacy Policy

We reserve the right to update this privacy policy as needed. We will notify you of significant changes:

• Prominently on our website
• By email if you have a user account
• Through other appropriate means

10. Supervisory Authority

If you believe that the processing of your personal data is not in accordance with GDPR, you can file a complaint with:

11. Contact Information

For data protection inquiries, please contact: