Read how Nordic Energy Innovation processes and protects your personal data in accordance with applicable regulations.
Nordic Energy Innovation
Wredenkatu 2, 78250 Varkaus
Phone: +358 40 958 711 | Email: info@cetrium.eu
Data Protection Officer
Email: info@cetrium.eu | Phone: +358 40 958 711
Nordic Energy Innovation does not need to appoint a statutory data protection officer. An EU representative is also not required as the company is based in Finland.
| Purpose | Data Categories | Source | Legal Basis (GDPR Art. 6) |
|---|---|---|---|
| Customer service and inquiry handling | Name, contact details, company information, communication history | Data subject | Legitimate interest 6(1)(f) — you expect a response to your inquiry |
| Quote and contract management | Contact details, project information, contract history | Data subject | Contract 6(1)(b) — performance of contract |
| B2B direct marketing (product updates and news) | Email address, name, interaction history | Data subject | Legitimate interest 6(1)(f); you can withdraw consent at any time |
| Website analytics and performance | Pseudonymized cookie identifiers, visit data | Your device/browser | Consent 6(1)(a) via cookie banner |
| Billing and accounting | Billing information, payment details, accounting records | Customer contract | Legal obligation 6(1)(c) — accounting law |
We use cookies to improve the functionality of our website and analyze user experience. The use of cookies is based on your consent, which you can give or deny through the cookie banner.
| Service | Role | Hosting Region / Safeguards |
|---|---|---|
| Web hosting provider | Processor | EU data centers |
| Email service | Communication | EU data centers; GDPR compliant |
| CRM system | Customer management | EU ↔ US under Standard Contractual Clauses (SCCs) |
| Accounting firm | Bookkeeping | Finland; professional confidentiality obligation |
Some service providers may be located outside the EU. Personal data transfers are based on EU Commission adequacy decisions or Standard Contractual Clauses, supplemented by risk assessments.
| Data Category | Retention Period Trigger | Duration |
|---|---|---|
| Customer data | End of customer relationship | 5 years from end of customer relationship |
| Billing and accounting records | End of financial year | 10 years according to accounting law |
| Marketing consents | Last interaction | 24 months, then deletion |
| Contact requests | Request processing | 18 months |
| Web analytics data | Event timestamp | 26 months |
Longer retention is possible if necessary for the establishment, exercise, or defense of legal claims.
Under GDPR Articles 15-22, you may request:
Send an email to info@cetrium.eu and provide sufficient information to verify your identity. We aim to respond within 30 days of your request.
You may contact the Office of the Data Protection Ombudsman (PO Box 800, 00521 Helsinki, tietosuoja@om.fi, phone 029 566 6700) or your local EU supervisory authority if you believe that the processing of your personal data is not lawful.
We do not use your personal data for automated decision-making or profiling that would have legal or similarly significant effects on you.
Our service is aimed at business professionals. We do not knowingly process personal data of individuals under 16 years of age. If you believe a child has provided personal data, contact us and we will delete the information immediately.
We may update this privacy policy from time to time. Minor editorial changes take effect immediately. If we make material changes — such as new processing purposes, data categories, or service providers — we will publish a prominent notice on our website at least seven (7) days in advance.
We are committed to transparency in our personal data processing activities. If you have questions or concerns about the processing of your personal data, please contact: