Privacy Policy
Updated 18 October 2026
1. Controller
Nostamo Oy (business ID 2753666-5), Sarvijaakonkatu 32, 33540 Tampere, Finland, nostamo@nostamo.fi
Privacy contact: Mikko Lintunen, mikko@nostamo.fi, +358 44 9092386
2. What data we process and why
| Situation | Purpose | Legal basis |
|---|---|---|
| Enquiries and quote requests | responding to enquiries, quotes | steps prior to a contract, legitimate interest |
| Clients | delivering our services, invoicing | contract, legal obligation |
| Marketing | B2B direct marketing by email and phone | legitimate interest |
| Job applications | recruitment | steps prior to a contract |
| Website use | site functionality, analytics, advertising | consent (strictly necessary cookies: legitimate interest) |
We typically process names, contact details, company and job title, message content, billing details, application details and website usage data.
We usually receive the data from you. Data may also come from our clients, public sources and business information services. We do not make automated decisions that have legal effects on you.
3. Cookies
Strictly necessary cookies keep the website working and remember your choices. Analytics and marketing cookies (e.g. Google Analytics and Google Ads) are only used with your consent. You can change your choice at any time in the website’s cookie settings.
4. Disclosures and transfers
We use service providers such as Google and email and accounting services. They process data on our behalf. Data may be transferred outside the EU and EEA. Such transfers are based on the EU Standard Contractual Clauses or the EU–US Data Privacy Framework. We disclose data to authorities only when required by law.
5. Retention and security
We keep data for as long as it is needed for its purpose:
- enquiry and marketing data until contact has ended or you object to marketing
- client data for the duration of the client relationship and thereafter for the period required by law
- applications until the recruitment and any related claims have ended
We protect data with appropriate technical and organisational measures. Only those who need the data for their work have access to it.
6. Your rights
You have the right to access your data, to have it rectified or erased, to restrict its processing, to object to processing (including direct marketing), to data portability and to withdraw your consent. Please send requests to mikko@nostamo.fi. You can also lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).
If your data is on one of our clients’ customer lists, please contact that company first.
7. Google APIs and client advertising accounts
We manage our clients’ Google Ads accounts on their behalf. For this we use our internal tool Nostamo Ads Tools, which uses the Google Ads API, Data Manager API, Google Analytics APIs and Tag Manager API.
- Data: data in the client’s advertising and analytics accounts, such as campaigns, ads, reports, audiences and conversions.
- Use: the data is used only to manage and report on that client’s advertising. Only Nostamo employees use the tool.
- Customer lists (Customer Match): at the client’s request, we upload identifiers of the client’s own customers to Google. The identifiers are hashed (SHA-256) before upload. In these cases we act as the client’s processor.
- Storage and security: the data is mainly kept in the client’s own Google accounts. Credentials are stored encrypted and are not shared. Data is deleted when the client relationship ends or the client revokes access. The client can revoke access at any time in their Google account settings.
- Sharing: we do not sell the data or share it with third parties.
Nostamo Ads Tools’ use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Suomenkielinen versio: Tietosuojaseloste