Privacy

Who is responsible

Lumeva Digital Oy, business ID 3588929-2, registered in Helsinki, Finland, is the controller of the personal data described on this page. You can reach us at info@lumevadigital.fi.

What we collect

What you type into the contact form. Your name, your email address, your phone number if you choose to give one, whichever of the four interest boxes you tick, and the message itself. All of it is volunteered. The phone number is the only optional field of the three, and the interest boxes can be left empty.

What the server records when a page is served. Our host logs the usual technical details of a request: the IP address it came from, the browser and operating system it announced, the address requested, and the time. We do not read these routinely. They exist so the site can be kept up and so abuse of the contact form can be stopped.

Nothing else. This site sets no cookies, runs no analytics, and carries no advertising, tracking or social media scripts. There is no visitor profile to build and no consent banner to click, because there is nothing stored on your device to consent to.

Why we are allowed to hold it

For the contact form, Article 6(1)(b) of the GDPR: steps taken at your request before entering into a contract. You asked us to reply, and answering you needs the address you gave.

For the server logs and the spam filtering on the form, Article 6(1)(f), our legitimate interest in keeping the site available and in not having the inbox flooded. The interest is narrow and the data is the minimum the job needs.

We do not send marketing. Your address is used to answer you and for the conversation that follows if there is one. If that ever changes it will be by asking you first, separately, and you will be able to say no without it affecting anything else.

Who else sees it

Three companies process this data on our behalf or receive it because you chose a channel that runs on them. Each is bound to use it only for the service it provides.

Where data reaches the United States, the transfer rests on the European Commission's standard contractual clauses, or on the EU-US Data Privacy Framework where the provider is certified under it.

We do not sell personal data, and we do not hand it to anyone else except where the law requires it of us.

How long we keep it

A message that does not lead anywhere is deleted within 24 months of the last exchange. That window is longer than most enquiries need because a conversation about automating a business often restarts a year later, and a thread we can still read is more use to you than one we deleted on principle.

If a message leads to work, the correspondence becomes part of the client record and is kept for as long as Finnish accounting and contract law requires, which is six years from the end of the accounting year in question.

Server logs are kept for the period our host applies to them, which is short and measured in weeks rather than years.

Your rights

You can ask us to:

• tell you what we hold about you, and give you a copy of it
• correct anything that is wrong
• delete it
• stop or limit what we do with it, or object to it
• hand it to you, or to someone else, in a portable format

Email info@lumevadigital.fi and we will answer within one month. There is no form to fill in and no fee. We may ask you something that confirms the request came from you, because handing a person’s data to somebody else on request is the failure this whole page exists to avoid.

If you are not satisfied with how we handled it, you can complain to the Finnish supervisory authority, the Office of the Data Protection Ombudsman, tietosuoja.fi. You do not have to raise it with us first, though we would rather you did.

Changes to this page

If what we do with your data changes, this page changes with it and the date at the top moves. There is no version history published here, so if a change matters to you, ask and we will tell you what it was.