As the data controller, Nordic Environment Finance Corporation (“Nefco”, “we” or “us”) is fully committed to protecting your individual rights and keeping your personal data safe.
The contact details of the data controller are:
Nordic Environment Finance Corporation
Fabianinkatu 34, FI-00100 Helsinki
P.O. Box 241, FI-00171 Helsinki
Tel. +358 10 618 003
Nefco only processes personal data that is necessary for a specific, explicit and lawful purpose. In practice, we process personal data mainly for the following purposes:
Communicating with our clients, stakeholders and cooperation partners and maintaining business relationships with individuals close to us, which is based on Nefco’s legitimate interest to maintain good business relationships, sending newsletters, marketing our products and services and monitoring the implementation of our purpose.
Carrying out project and client appraisal processes, which is based on Nefco’s legitimate interest to assess the financial strength and eligibility of financing projects or proposals.
Carrying out procurement processes, which is based on Nefco’s legitimate interest to ensure efficient and reliable procurement processes.
Providing, promoting, and developing our products and services, which may include marketing our products and services, sending newsletters and managing the client relationship. Such processing is based on Nefco’s legitimate interest to provide financing in accordance with our purpose to accelerate the green transition by financing the initial scale-up of Nordic green solutions.
Carrying out the recruitment process, which may include assessing your qualifications and suitability for specific job openings, communicating with you and carrying out background checks (for specific positions). Such processing is necessary for preparing to enter into an employment agreement with you, but also for Nefco’s legitimate interest to carry out our recruitment process.
Granting access to Nefco’s premises and keeping track of visitors, which is based on Nefco’s legitimate interest to manage visitors and ensure the safety and security of our premises.
Preventing and investigating misconduct and non-compliance, which is based on Nefco’s legitimate interest to ensure accountability, ethical conduct and compliance with the relevant policies, regulations and governance requirements of Nefco.
Risk management and ensuring the security of services, which is based on Nefco’s legitimate interest to maintain its financial strength so as to be able to continue to fulfil its purpose.
Satisfying statutory obligations and any other official rules and regulations that Nefco determines are required for the performance of its activities and in accordance with our Legal Framework. Such processing is based on Nefco’s legitimate interest to comply with its Legal Framework.
Nefco mainly processes the following information for the purposes mentioned in section 3:
Project and client as well as procurement appraisal information
Information relating to recruitment (for jobseekers)
Information on the use of the Nefco website
Personal data is collected either directly from you, received from our client, potential client, stakeholder or partner organisations, collected with cookies when you use our website or otherwise during the course of Nefco’s business activities.
Nefco will keep your data for as long as they are needed for the purposes for which your data was collected and processed. The maximum retention periods for personal data are as follows:
Further details are available from the Data Protection Officer at firstname.lastname@example.org.
When processing the data for the purposes mentioned above in section 3, Nefco may disclose personal data to certain public authorities and other third parties to satisfy legal obligations that Nefco determines are required for the performance of its activities and in accordance with our Legal Framework.
We have also outsourced the processing of certain personal data to third party service providers, such as the Nordic Investment Bank and external IT service providers. When transferring personal data, Nefco shall ensure that the party receiving the data maintains an adequate level of protection.
Nefco may also transfer data outside of the EU or EEA. When data is transferred outside of the EU or EEA, we ensure a similar level of protection to your personal data by implementing necessary contractual or other safeguards to protect your data.
You as a data subject have rights in respect of personal data we hold about you. You have the following rights:
If you consider that your personal data is not processed in accordance with this Policy, you may file a complaint with the Data Protection Officer.
The personal data is protected by limited and assigned access to protected databases where such data is kept in a secure manner. Destruction of personal data is handled in a secured manner.