Privacy Policy

1. Who we are

We are the data controller for the personal data described here. We have not appointed a Data Protection Officer, as the criteria in Article 37 GDPR do not apply to us. For any privacy matter, contact us at the address above.

2. What this policy covers

This policy describes how we handle personal data on our website, nordicswift.fi. It does not cover personal data we process when performing a contract with a customer — shipment and forwarding data, for example — nor the websites of other companies we link to.

We process only what is necessary. This site has no user accounts, no shopping basket, no chat, and no profiling used to make decisions about you.

3. The contact form

When you submit the form, we process the details you provide:

• Required: email address, company, message
• Optional: first name, last name, telephone number

Purpose: to answer your enquiry and prepare a quote or engagement where relevant.

Legal basis: Article 6(1)(b) GDPR (steps taken at your request prior to entering a contract) and Article 6(1)(f) GDPR (our legitimate interest in responding to business enquiries).

Providing the details is voluntary, but without an email address we cannot reply to you.

How it is delivered: the form is transmitted by Web3Forms, operated by Web3Creative, which acts as a data processor on our behalf and sends the message to our mailbox. The form includes a hidden anti-spam field (a honeypot), which collects no information about you.

4. Analytics and advertising

We use Google Analytics 4 to understand how the site is used, and Google Ads conversion measurement to see which advertisements lead to enquiries. Both are loaded through Google Tag Manager.

Neither runs until you consent. The site implements Google Consent Mode v2 with every analytics and advertising category denied by default. You can change your choice at any time using the cookie icon at the bottom-left of any page.

Legal basis: your consent, Article 6(1)(a) GDPR, and section 205 of the Finnish Act on Electronic Communications Services.

5. Cookies and browser storage

Only ns-consent-v1 is set without consent. It is strictly necessary: without it we could not remember that you declined. Google's cookies are set only after you consent.

6. Who we share data with

We do not sell or rent personal data. The following processors handle data on our behalf:

We may also disclose data to authorities where the law requires it.

7. Transfers outside the EU

Some processing takes place outside the EU and EEA:

• Web3Creative operates from India. Transfers rely on the European Commission's Standard Contractual Clauses, incorporated into the service's Data Processing Agreement.
• Google may transfer data to the United States. Transfers rely on the EU–US Data Privacy Framework and Standard Contractual Clauses.

8. How long we keep data

9. Your rights

You have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — have inaccurate data corrected
• Erasure — have data deleted where there is no longer a basis to keep it
• Restriction of processing
• Data portability
• Object to processing based on legitimate interest
• Withdraw consent at any time — this does not affect the lawfulness of processing before withdrawal

To exercise any of these, email sales@nordicswift.fi. We reply within one month. We may ask you to verify your identity so that we do not disclose data to the wrong person.

10. Complaints

If you believe we are handling your personal data unlawfully, you may lodge a complaint with the supervisory authority:

If you live in another EU country, you may also complain to your local data protection authority. We would rather you came to us first, though — most things are resolved faster that way.

11. Changes to this policy

We update this policy when the site or the services it uses change. The current version is always on this page, with the revision date shown at the top. We will highlight material changes on the site.