Privacy Notice

Controller

Nordlake Oy (Finnish Business ID 3175406-7), Matsompintie 67, 62200 Kauhava, Finland. Privacy matters: roope@nordlake.ai.

What data I process and where it comes from

B2B outreach: the name, role and work email address of company decision-makers, together with basic company information (industry, financials). This data is collected from public sources: official company registers (the Finnish YTJ/PRH, Norwegian Brønnøysundregistrene, UK Companies House, Swedish Bolagsverket), company websites and other public sources. I do not buy contact lists and I never sell data.

Website and contact form: whatever you submit through the form (name, email, message). The site uses no marketing cookies and no tracking pixels.

Why, and on what legal basis

The purpose is business-to-business communication and offering my services. The legal basis is legitimate interest (Article 6(1)(f) GDPR): a targeted, one-off approach to a decision-maker in their professional role. My messages are not a mailing list — if you do not reply or you decline, the contact ends there.

Retention

Outreach data is kept for at most 24 months from the last contact, unless a customer relationship develops. Opt-outs ("no thanks") are kept permanently on a suppression list so the opt-out is honoured for good.

Helpdesk service (WhatsApp)

In Nordlake's helpdesk service I process, on behalf of client companies, the messages sent to their WhatsApp number: the sender's phone number and name, message content and attachments, and the contact details of the client's on-call staff. For this data the client company is the controller and Nordlake Oy the processor. The data is used only to handle tickets and send alerts, it is stored on a server located in the EU, and it is never shared with third parties or used for any other purpose. Messages are delivered through Meta's WhatsApp Business Platform. Data is deleted at the client's request or when the contract ends — deletion requests to roope@nordlake.ai.

Processors and transfers

I use ordinary technical service providers for email delivery and website hosting. Some providers may process data outside the EU/EEA, in which case transfers are protected with the EU Standard Contractual Clauses.

Your rights

You have the right to access your data, request rectification or erasure, restrict processing, and object to direct marketing at any time — the fastest way is to reply "no thanks" to any of my messages, and I will delete your data without delay. You may also lodge a complaint with your local data protection authority (in Finland: tietosuoja.fi).