Privacy notice

This notice explains how we process personal data in accordance with the EU General Data Protection Regulation (GDPR, 2016/679) when you contact us or do business with us.

1. Controller

Oy AjoRanta Group Ab (secondary business name NORVARDA)
Business ID 2062687-9
Rytäniementie 19 as 2, 48310 Kotka, Finland
Contact: Matti Nikkola, matti.nikkola@norvarda.com

2. Data we process

We process the name, organisation, position and contact details of enquirers and representatives of client and partner organisations, the content of enquiries and correspondence, and identification data required for export control and sanctions compliance.

3. Purposes and legal bases

• Responding to enquiries and preparing offers – pre-contractual steps and legitimate interest
• Managing client and partner relationships, non-disclosure agreements and deliveries – contract
• Export control, licensing procedures, sanctions screening and accounting – legal obligation

4. Sources of data

We obtain data from you, from the organisation you represent and from public sources such as sanctions lists.

5. Disclosures and transfers

Where necessary, data may be disclosed to manufacturers in our partner network in order to prepare an offer or carry out a delivery, and to authorities in connection with licensing procedures. We do not sell data or use it for marketing without your consent. If data is transferred outside the EU/EEA, the transfer is based on a European Commission adequacy decision or on standard contractual clauses approved by the Commission.

6. Processors

Email and website services are provided by Domainkeskus Oy (Business ID 1607767-8), which processes data on our behalf.

7. Retention

Enquiries are kept for no more than 24 months after the last contact unless they lead to a client relationship. Contract, export control and accounting records are kept for the period required by law.

8. Cookies and log data

This website does not use cookies or any analytics or tracking tools. Technical server logs may contain IP addresses; they are processed to ensure the operation and security of the service in accordance with the service provider’s practices.

9. Your rights

You have the right to access your data, to request its rectification or erasure, to restrict its processing and to object to processing. Please send requests to the email address above. You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).

10. Security

Access to the data is limited to persons who need it for their duties. Data is handled confidentially and, where appropriate, under non-disclosure agreements.

Updated 24 September 2026