Last updated: 4.11.2025

This Privacy Policy explains how Tourtila (“we”, “us”, “our”) processes personal data in the context of our business-to-business (B2B) website and services.

If you have any questions, contact us at info@tourtila.com. If applicable, our Data Protection Officer (DPO) can be reached at dpo@tourtila.com

1) Who we process data about

• Business contacts at customers, prospects, suppliers, partners, and website users.
• Job applicants (if you link to careers) — consider a separate notice.

2) What data we collect

• Identity & contact: name, job title, employer, business email, phone.
• Business relationship data: contract details, communications, support tickets.
• Website & device data: IP address, browser/OS, pages viewed, timestamps, cookies or similar identifiers.
• Marketing interactions: email engagement, event/webinar registrations, preferences.
• Sources: you (forms, emails, calls), your colleagues, your public website/LinkedIn, our service providers, and our systems (logs, cookies).

3) Why we use your data (purposes) and our legal bases

• Provide and administer our services (account setup, support, billing) — Contract & Legitimate Interests.
• Operate and secure our website and systems (fraud/abuse prevention, diagnostics, analytics with IP masking where feasible) — Legitimate Interests & Legal Obligations for security.
• B2B sales and marketing (relevant outreach to business contacts, newsletters where permitted, managing preferences) — Legitimate Interests or Consent where required.
• Compliance and record-keeping (invoices, tax, regulatory requests) — Legal Obligations.
• Events and webinars — Legitimate Interests or Consent where required.

You can object at any time to processing based on Legitimate Interests, especially B2B direct marketing (see Section 8).

4) Cookies & similar technologies

We use essential cookies to run the site and optional analytics/marketing cookies to understand usage and improve content.

• Essential cookies: strictly necessary; no consent required.
• Analytics/marketing cookies: used with consent where required.
  Manage or withdraw consent at any time via our [Cookie Banner/Preferences Link]. See our [Cookie Notice] for details (types, providers, lifetimes).

5) Sharing your data

We share data with:

• Service providers (processors): hosting, CRM, marketing automation, analytics, support tools, payment processors — bound by contracts under Art. 28 GDPR.
• Professional advisors and auditors under confidentiality.
• Authorities where required by law.
  We do not sell personal data.

6) International transfers

If we transfer data outside the EEA/UK, we use appropriate safeguards (e.g., EU Standard Contractual Clauses and, where needed, transfer risk assessments and supplementary measures). Details are available on request.

7) Retention

We keep personal data only as long as needed:

• Customer/supplier records: contract term + 3 years.
• Prospect data: 36 months after last meaningful interaction or until you opt out.
• Legal/financial records: as required by law of EU.
  We then delete or irreversibly anonymise the data.

8) Your rights (EEA/UK)

You have the right to:

• Access, rectify, or erase your data.
• Restrict or object to processing (including B2B direct marketing).
• Data portability.
• Withdraw consent at any time (does not affect past lawful processing).
  To exercise rights, email [privacy@[company].com].
  You can also complain to your local supervisory authority: [Your Lead Authority, e.g., Datatilsynet (Denmark)]or your local authority.

9) Security

We apply technical and organisational measures appropriate to risk (access controls, encryption in transit/at rest where applicable, logging, least-privilege, staff training, vendor due diligence, incident response).

10) Automated decisions

We do not make decisions producing legal or similarly significant effects based solely on automated processing. If this changes, we will inform you and explain your rights.

11) Third-party links

Our site may link to third-party sites. Their privacy practices apply to their services; please review their policies.

12) Changes to this policy

We may update this notice from time to time. We will post changes here and adjust the “Last updated” date. Material changes may be communicated by email or on the site.

Tourtila
info@tourtila.com