Privacy Policy

1. Controller

The controller is Mainostoimisto Loud Oy, Business ID 2820137-3, Vantaa, Finland.

For privacy-related matters, you can contact us by email: info@nordkeys.com.

2. What personal data do we collect?

• Name and contact details, such as email address and phone number.
• Company details, such as company name, business ID and business country.
• Accommodation and onboarding details, such as accommodation type names, room or unit counts, selected plan, interface language and current sales channels.
• Additional details provided in messages, such as current website, current system or other onboarding notes.
• Technical information, such as possible log data, IP address, browser, device information and cookie-related data if analytics or other technical services are used.
• Acceptance records for service terms and the data processing agreement, such as acceptance time, accepted version, submitted form details and the URLs of the accepted terms pages.

3. For what purposes is data used?

• Responding to contact requests and demo views.
• Preparing the onboarding of the Nordkeys service.
• Evaluating the suitable plan, features and onboarding scope.
• Managing customer relationships and preparing a possible agreement.
• Maintaining website security, functionality and abuse prevention.

4. Legal basis for processing

Personal data is processed primarily based on the user’s contact request, preparation of a contract, legitimate interest in handling customer service and sales, and, where applicable, legal obligations.

5. Data retention period

Information related to contact requests and demo views is usually stored for as long as needed to handle the request, sales process or possible onboarding.

Information related to customer relationships, invoicing or agreements may be stored longer according to accounting, tax and other legal obligations.

Contact and lead information is generally stored for 12 months unless a customer relationship, contract preparation, accounting, taxation or other legal obligation requires a longer retention period.

6. Recipients and service providers

Data may be processed with trusted service providers, for example in website hosting, email services, form handling, customer management, analytics or payment services.

Service providers currently used or planned may include Google Analytics, Google Ads, reCAPTCHA, Hostinger and Titan. These may be used for website analytics, advertising measurement, form protection, website hosting and email communication.

7. Data transfers outside the EU/EEA

If service providers process data outside the EU/EEA, transfers are carried out using applicable safeguards, such as the European Commission’s standard contractual clauses or other lawful mechanisms.

This section should be updated according to the service providers the company actually uses.

8. Data subject rights

• The right to know whether your personal data is being processed.
• The right to request access to your data.
• The right to request correction of inaccurate data.
• The right to request deletion of data if there is no longer a basis for processing.
• The right to request restriction of processing or object to processing in applicable situations.
• The right to lodge a complaint with a supervisory authority.

9. Security

Personal data is handled carefully and access is limited to people and service providers who have a justified need to process it.

The website uses reasonable technical and organizational safeguards to protect data.

10. Changes to the privacy policy

This privacy policy may be updated when the service, website, tools used or legislation changes.

Last updated: 9 June 2026.