Legal
Nordista OÜ · Last updated: March 2026
| Who | Detail |
|---|---|
| Controller | Nordista OÜ, Estonia |
| Contact | privacy@nordista.ee |
| Data collected | Name, email, role, employer, quiz scores, login time |
| Third party | Klaviyo, Inc. (email platform, USA) |
| Marketing emails | Only with your consent — opt out any time |
| Cookies | One session cookie — strictly necessary, no tracking |
| Your rights | Access, correction, deletion, portability, objection |
This platform (Nordista IQ) is operated by Nordista OÜ, a company registered in Estonia. We are the data controller for the personal data processed through this platform.
Contact for privacy matters:
Nordista OÜ
Email: privacy@nordista.ee
Nordista IQ is a B2B platform for sales team training. Accounts are created by your employer's administrator — there is no public self-registration.
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email, username, role, employer | Account creation and platform access | Contract (Art. 6(1)(b)) |
| Quiz scores, answers, game streaks, points | Tracking product knowledge progress and performance | Legitimate interests (Art. 6(1)(f)) — employer's interest in sales team training outcomes |
| Login timestamps | Security and access logging | Legitimate interests (Art. 6(1)(f)) |
| Email address, language, country | Sending weekly performance summary emails | Consent (Art. 6(1)(a)) — only if you have opted in |
We do not collect special categories of data (health, biometric, financial, etc.). We do not make any automated decisions that have a legal or similarly significant effect on you — leaderboards and quiz scores are informational only.
We use Klaviyo, Inc. (a US-based company) to send weekly performance summary emails to users who have opted in. When you consent to marketing emails, the following data is transferred to Klaviyo: your name, email address, role, language, employer country, and current points balance.
Klaviyo stores this data on servers in the United States. The transfer is made under Standard Contractual Clauses (SCCs) and the EU–US Data Privacy Framework, which provide appropriate safeguards under Art. 46 GDPR. We have a Data Processing Agreement in place with Klaviyo. You can read Klaviyo's own privacy information at klaviyo.com/legal/privacy-notice.
Data is only sent to Klaviyo for users who have given consent. If you withdraw consent, your data is removed from Klaviyo's mailing list within 48 hours. Klaviyo retains data for the duration of our contract and deletes it within 90 days of termination.
No other third parties receive your personal data. Our platform is hosted in the EU on Zone Media OÜ infrastructure.
| Data | Kept for |
|---|---|
| Account data (name, email, role) | Duration of your employer's contract + 30 days |
| Quiz scores and game history | Duration of contract + 12 months |
| Login timestamps | 90 days from the login event |
| Email consent records | Duration of account + 3 years (accountability requirement) |
When a company's contract ends, all associated employee data is deleted or anonymised within 30 days.
This platform uses one cookie: a session cookie that keeps you logged in during your visit. It contains only a random session identifier — no personal data, no tracking, no advertising. It expires after 24 hours or when you log out.
This cookie is strictly necessary for the platform to work. Under the EU ePrivacy Directive, strictly necessary cookies do not require your consent. We do not use any analytics, advertising, or third-party tracking cookies.
Under GDPR you have the following rights. To exercise any of them, email privacy@nordista.ee. We will respond within one month.
If you believe we are not handling your data lawfully, you have the right to lodge a complaint with your national data protection authority:
We always encourage you to contact us first at privacy@nordista.ee — most issues can be resolved directly and quickly.
If we make material changes, we will update the date at the top of this page. Continued use of the platform after a change constitutes acceptance. For significant changes affecting your rights, we will notify you by email (if consent is active).