Privacy Policy

Last updated: 27 July 2026

1. Who is responsible for your data?

Data controller: TNG - The Nordic Group Oy

Business ID: 3376554-4
Address: Pursimiehenkatu 29-31, 00150 Helsinki, Finland
Email: info@thenordicgroup.io
Phone: +358 44 380 9040

2. When does this policy apply?

This policy applies to personal data processed through our public website, enquiries, meeting bookings and related business communications. A separate notice may apply if we process personal data for another specific purpose.

3. What personal data do we process?

Depending on how you interact with us, we may process:

• Contact and business information: name, work email address, phone number, company, role and other details you provide.
• Meeting information: selected meeting time, time zone, booking details and information you add to a Calendly form or invitation.
• Communications: messages, questions, call notes and other information exchanged with our team.
• Technical information: IP address, browser and device information, requested pages, timestamps, referral information and security logs generated when the website is delivered.
• Website usage information: aggregated page views and, where you have consented, analytics events such as article views and interactions with calls to action or the booking module.

Please do not send sensitive personal data unless it is necessary and we have agreed to receive it.

4. How do we collect personal data?

We collect information directly from you when you email or call us, book a meeting, or otherwise communicate with us. Technical and usage information is collected when you use the website. We may also receive business contact details from your employer or from publicly available professional sources when relevant to a business conversation.

5. Why do we process personal data?

Responding to enquiries and arranging meetings

We use your information to answer questions, arrange calls and take steps requested before entering into a contract. The legal basis is taking pre-contractual steps, performing a contract, or our legitimate interest in managing business enquiries, depending on the situation.

Operating and securing the website

We process limited technical information to deliver the website, prevent misuse, diagnose errors and maintain security. The legal basis is our legitimate interest in providing a reliable and secure website.

Understanding website performance

We use Plausible Analytics to understand aggregated website traffic without using cookies or persistent identifiers. To the extent any information is personal data, our legal basis is our legitimate interest in improving the website while minimising privacy impact.

Google Analytics 4 is used on our article pages to measure content performance and booking-related interactions. Analytics storage is denied by default. Where required, Google Analytics cookies and full analytics measurement are activated only after consent. If consent is denied, Google Consent Mode may still send limited cookieless measurement signals to Google. Our legal basis for cookie-based analytics is your consent.

Managing business relationships and legal obligations

We may retain relevant communications and transaction records to manage our relationship, establish or defend legal claims, and meet accounting or other legal obligations. The legal basis is our legitimate interest or compliance with a legal obligation.

6. Scheduling through Calendly

Our website contains an embedded Calendly booking tool. When you use it, Calendly processes the details needed to arrange the meeting. Calendly may also use necessary, functional or performance technologies through the embedded service and provides its own cookie controls. You can review the Calendly Privacy Notice.

7. Service providers and recipients

We disclose personal data only where necessary. Providers that may process data for us include:

• Webflow, for website hosting, delivery and related infrastructure.
• Plausible Insights OÜ, for privacy-friendly, aggregated website analytics hosted in the European Union.
• Google, for consent-based Google Analytics measurement on article pages.
• Calendly, for meeting scheduling and the embedded booking experience.
• Professional advisers and public authorities where disclosure is required by law or necessary to protect our rights.

These providers process information under their own privacy terms and, where applicable, data processing agreements with us.

8. Transfers outside the EEA

Plausible states that its analytics data is processed and stored in the European Union. Some other providers, including Webflow, Google and Calendly, may process information outside the European Economic Area. Where required, transfers are protected through an adequacy decision, the European Commission's Standard Contractual Clauses or another lawful transfer mechanism.

9. How long do we keep personal data?

We keep personal data only for as long as needed for the purpose for which it was collected and to meet applicable legal requirements. Enquiry and meeting information is normally retained while the conversation or business relationship remains relevant. Records needed for accounting, contractual or legal purposes may be kept for the periods required by law.

Analytics information is retained according to our settings with each provider. Google Analytics user-level and event-level retention is configurable, and aggregated reports may be retained for longer. We review retention needs and delete or anonymise information when it is no longer required.

10. Your rights

Subject to the conditions in applicable data protection law, you may have the right to:

• access your personal data;
• correct inaccurate or incomplete data;
• request deletion or restriction of processing;
• object to processing based on legitimate interests;
• receive data you provided in a portable format where applicable; and
• withdraw consent at any time without affecting earlier lawful processing.

To exercise a right, contact info@thenordicgroup.io. We may need to verify your identity. You may also lodge a complaint with the Office of the Data Protection Ombudsman in Finland or another competent supervisory authority.

11. Security

We use reasonable technical and organisational safeguards designed to protect personal data against unauthorised access, alteration, loss or disclosure. No online service can be guaranteed to be completely secure.

12. Automated decision-making

We do not use the personal data covered by this policy to make decisions based solely on automated processing that produce legal or similarly significant effects.

13. Changes to this policy

We may update this policy when our services, providers or legal obligations change. The latest version is published on this page with its update date.

14. Contact us