Privacy and cookies
Register and privacy notice
This page provides information on MK Invest Oy’s privacy notice and use of cookies in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679).
MK Invest Oy
Privacy notice and cookie policy
1. Data Controller
MK Invest Oy / Nordveil Lapland
Business ID: 3362893-7
Ahvenkummuntie 2A1 98100 Kemijärvi
2. Person responsible for registry matters
Kari Mark
+358 40 723 3731
kari@nordveillapland.com
3. Name of the register
MK Invest Oy customer register
4. Content and purpose of the register
Group: Customers
Content: Name, email address, phone number, company name, billing address, and contract and order details.
Purpose: Managing customer relationships, such as processing orders and invoicing, providing information, and marketing the company’s products and services to customers.
Group: Prospective customers and website users
Content: Name, email address, company name and, optionally, other information such as a phone number.
Purpose: Processing contact requests and offering services to prospective customers.
5. Retention period for personal data
Customers’ personal data is retained for the duration of the customer relationship and thereafter only for as long as necessary to comply with the controller’s legal obligations or pursue its legitimate interests.
Personal data stored for marketing purposes is retained for as long as the consent remains valid.
Messages submitted through the website’s contact form are retained for no more than two years unless a longer retention period is justified.
6. Regular sources of personal data
– Information provided through the website’s contact form.
– Information provided by the individual by email or phone.
– Social media platforms, such as Facebook or LinkedIn, through which the individual contacts the company.
– Public sources, such as company websites and Trade Register information.
By providing their personal data, the individual consents to its storage and processing as described in this notice.
7. Regular disclosures of personal data
Personal data is disclosed to third parties only where necessary to provide the services, such as payment services or website functionality.
Personal data is processed in accordance with applicable data protection legislation and data processing agreements.
Personal data is not transferred outside the EU or the EEA unless necessary to provide the service. In such cases, the controller ensures that the transfer meets the applicable legal requirements.
8. Principles of register security
Personal data is stored in information systems accessible only to authorised persons. The systems are protected in accordance with the requirements of applicable data protection legislation.
9. Right of access and rectification
The data subject has the right to access their personal data and request the rectification of inaccurate data. The request must be made in writing, signed and submitted to the contact person for data protection matters referred to in section 2.
10. Erasure of personal data
The data subject has the right to request the erasure of their personal data. Requests for erasure are assessed on a case-by-case basis.
11. Other rights
The data subject has the right to object to the processing of their personal data for direct marketing purposes.
12. Use of Cookies
Our website uses cookies to improve website functionality, analyse website traffic and target marketing. Cookies are user-specific but do not directly identify individual users.
Cookie settings can be managed through the website’s cookie consent tool or by changing the browser settings.
Register and privacy notice updated on July 1, 2026.