Privacy Policy

This is the privacy policy and data protection statement of Norsko Oy in accordance with the Finnish Personal Data Act (Sections 10 and 24) and the EU General Data Protection Regulation (GDPR). Created on May 5, 2025. Last updated on May 5, 2025.

1. Data Controller

Norsko Oy
Englandsgatan 1,
07920 Loviisa
Business ID: 2770847-1

2. Contact Person Responsible for the Register

Rami
rami@norskomarine.com
0503081188

3. Name of the Register

Customer register of Norsko Oy.

4. Purpose of Processing Personal Data

The customer register of Norsko Oy is used for maintaining, developing, and communicating with customer relationships.
The data is not used for automated decision-making or profiling.

5. Data Content of the Register

The register may contain the following information:

  • Name
  • Phone number
  • Address information
  • Vehicle information
  • Details of ordered services

Data is retained as long as deemed necessary for the customer relationship.

6. Regular Sources of Information

Information stored in the register is obtained from the customer via, for example, website forms, emails, phone calls, social media platforms, contracts, customer meetings, and other situations where the customer provides their information. Data may also be collected from publicly available sources within legal limits.

7. Regular Disclosures of Data and Transfer Outside the EU or EEA

Data is not disclosed outside the EU or EEA. Data may be published only if agreed upon with the customer.

8. Principles of Register Protection

The register is handled with care, and data processed through information systems is properly secured. When data is stored on Internet servers, appropriate physical and digital security measures are taken. The controller ensures that stored data, server access rights, and other information critical to personal data security are handled confidentially and only by employees whose job description includes such duties.

9. Right of Access and Right to Request Correction

Every person in the register has the right to check their stored data and request correction of any incorrect or incomplete information. If a person wishes to check their data or request a correction, the request must be sent in writing to the data controller. The data controller may request proof of identity if necessary. The data controller will respond within the time frame set by the GDPR (typically within one month).

10. Other Rights Related to the Processing of Personal Data

Individuals in the register have the right to request the deletion of their personal data (“right to be forgotten”). They also have other rights under the GDPR, such as restricting the processing of personal data in certain situations. Requests must be submitted in writing to the data controller. The data controller may request proof of identity if necessary and will respond within the time frame set by the GDPR (typically within one month).