Privacy notice
This notice explains how NxtStride Finland Oy handles personal data on nxtstride.com and in the Federation Strategy Diagnostic.
Controller
NxtStride Finland Oy, Business ID 3456649-1, Fastarbyvägen 89, 10520 Tenhola, Finland. Privacy enquiries and rights requests: dpo@nxtstride.com.
Federation Strategy Diagnostic
You can complete the diagnostic without providing personal information. Answers remain in your browser unless, after viewing the result, you provide your email address and explicitly consent to saving the profile.
When you choose to save a result, we process your email address, question responses, calculated profile, framework version, consent record, limited campaign attribution and technical security information. We use this data to provide your private result, understand interest in a future Board-Level Assessment, contact you about that request and improve the evolving framework.
The diagnostic is an automated strategic interpretation. It is not certification and does not produce legal or similarly significant effects.
Legal bases and retention
Diagnostic storage is based on your consent. You may withdraw consent at any time by contacting us. Identified diagnostic records are retained for up to 36 months unless you request deletion sooner or continued retention is required by law. Private result links may expire earlier.
Analytics and local storage
Essential browser storage preserves assessment progress and consent choices. Optional Firebase/Google Analytics loads only after you accept analytics. Analytics events are designed not to include your email, private result token or raw answers. You can change your choice using “Privacy & cookie settings” in the footer.
Recipients and transfers
We use Google Firebase and Google Cloud for hosting, functions, database and optional analytics, and SendGrid for operational email notifications. These providers may process data outside the European Economic Area under applicable transfer safeguards. Access within NxtStride is limited to people who need it for the stated purposes.
Your rights
Subject to applicable law, you may request access, correction, deletion, restriction, portability or withdrawal of consent, and may object where processing relies on legitimate interests. You may lodge a complaint with the Finnish Data Protection Ombudsman.
Review status
This operational draft must receive final legal review before production diagnostic data collection is enabled. Last updated: 27 August 2026.