Privacy Policy

This policy describes how Oy Norcar Ab (Business ID 2729347-2), Fabriksgatan 7–9, 66900 Nykarleby, collects, uses and protects your personal data. The updated version becomes effective when published at www.norcar.com.

We aim to provide excellent online services to our customers and partners. Norcar respects and safeguards your privacy, and all processing of personal data is carried out in accordance with this policy and applicable laws.

How is data collected and will it be shared?

Personal data is collected through forms on our website, such as contact forms, quotation requests and support cases.
Your personal data is processed by Norcar personnel in relevant roles depending on the nature of your request. The data is handled internally and shared, when necessary, with the appropriate function, department or responsible person within the organisation.

To handle your request and provide our products and services, personal data may be forwarded to Norcar’s local representatives, such as importers or dealers, in the geographic area relevant to your inquiry. If your request relates to a market handled directly by Norcar, the data is processed internally.
Norcar’s local representatives act as independent data controllers for the continued processing of your data in connection with local sales, service and customer contact. They process personal data in accordance with their own privacy policies.

We may also share personal data with third-party providers that supply IT systems, storage, marketing services and support functions. These providers process data on behalf of Norcar and act as data processors in accordance with our instructions and applicable legislation.
Personal data may also be disclosed where required to comply with legal obligations or upon request from competent authorities

What type of information is collected?

We collect information from you when you fill in forms on our website, such as contact forms, quotation requests and job applications.
This information may include:

  • name and contact details (e.g. email address and phone number)
  • information related to your inquiry
  • data submitted in job applications (e.g. CV and cover letter)
  • technical information such as IP address, device information and cookies

We may also categorise data to better understand our customers’ needs, for example based on industry, application area or interest in our products and services (“segments”).

Additionally, technical information is collected automatically through cookies and similar tracking technologies. This may include IP address, device type, browser and how you use our website.
Cookies are used to analyse website performance, improve user experience and enable targeted marketing.

Where cookies are used for analytics and marketing, this only takes place after you have given your consent, which can be provided and withdrawn via our cookie settings.

Why is information collected and how is it used?

We process personal data for the following purposes:

  • managing inquiries, customer communication and support cases
  • offering and marketing our products and services
  • analysing and improving our website and user experience
  • managing recruitment processes and job applications
  • fulfilling legal obligations and handling legal claims

Processing is based on legitimate interest, steps prior to entering into a contract, legal obligation or consent, depending on the purpose. Where consent is required, such as for certain cookies or marketing activities, it is collected separately.

We ensure that personal data is only used for the purposes for which it was collected and is not processed in a manner incompatible with those purposes.

Personal data outside the EU

Personal data is primarily processed within the EU/EEA. In some cases, data may be transferred to or processed in countries outside the EU/EEA, for example when using providers of IT systems, analytics tools or marketing services.

When such transfers occur, appropriate safeguards are ensured in accordance with applicable data protection legislation. This means that transfers are made either to countries recognised by the European Commission as providing an adequate level of protection or by using Standard Contractual Clauses (SCCs) or other approved mechanisms.

You may contact us for more information on the safeguards used in each case.

Data retention

Personal data is stored only as long as necessary for the purposes for which it was collected or as required by law. In general:

  • data related to inquiries is stored as long as necessary to handle the matter and for a reasonable period thereafter
  • data related to customer relationships is stored as long as the relationship exists and thereafter in accordance with legal requirements
  • job application data is stored during the recruitment process and for a limited period thereafter
  • technical and cookie data is stored according to service settings or until consent is withdrawn

When personal data is no longer required, it is securely deleted or anonymised.

Your rights

You have the right to:

  • obtain information about the personal data we process about you and request access
  • request correction of inaccurate or incomplete data
  • request deletion of your personal data (“right to be forgotten”)
  • request restriction of processing
  • object to processing based on legitimate interest
  • request data portability

If processing is based on consent, you can withdraw your consent at any time. You also have the right to lodge a complaint with a supervisory authority. In Finland, this is the Office of the Data Protection "Datambudsmannen".

You can exercise your rights by contacting us at info@norcar.com.