Impressum

Owner

Luota Oy
Mannerheiminaukio 1A
00100 Helsinki,

Finland

Contact

Phone: +358503560442
Email: landingpage@lumidb.com

Registration

Company registration number: 3396773-6
VAT Number: FI33967736

Privacy notice for websites and cookies

Luota Oy respects your privacy and is committed to protecting your personal data. This Website and Cookie Privacy Notice (“Privacy Notice”) will inform you as to how we process your personal data on our website and through cookies set on our website.
The Privacy Notice does not address, and we are not responsible for, the privacy practices of any third parties. Luota Oy disclaims all responsibility for the processing carried out by third parties, also in cases where our services include hyperlinks or other links to third-party websites or services. Privacy and security are important for us, and we process all personal data with due care and in accordance with applicable laws and regulations.

  1. WHO IS DATA CONTROLLER?

  2. WHAT ARE COOKIES?

  3. WHAT COOKIES DO WE USE?

  4. WHICH THIRD PARTIES DO WE USE?

  5. INFORMATION WE COLLECT AND HOW WE COLLECT IT

  6. THE PURPOSES AND THE LEGAL BASIS

  7. SHARING OF INFORMATION COLLECTED

  8. WHERE DO WE STORE YOUR PERSONAL DATA?

  9. DATA RETENTION

  10. HOW TO EXERCISE YOUR DATA PROTECTION RIGHTS?

  11. CHANGES TO THIS PRIVACY NOTICE

  1. WHO IS DATA CONTROLLER?

The data controller for the processing described in this notice is:

  • Luota Oy (later “we” or Luota Oy)

If you have questions regarding this privacy notice, please contact us by emailing landingpage@lumidb.com.

  1. WHAT ARE COOKIES?

Cookies are small text files stored on your terminal equipment, such as a computers, tablets, or smartphones, when you browse websites. Cookies contain character strings that enable functions to be performed and contain information on how you have interacted with websites. The purpose of cookies is not to harm your device, nor do they read other information from your equipment’s hard drive or spread viruses. Data can be stored in cookies while you use online services or visit websites, and in between visits.

Cookies and similar technologies provide various functionalities common to modern websites. Cookies are used widely in both public-sector and commercial websites. They are a key component of safe, efficient, and user-friendly functioning of services based on electronic communication.

Cookies have different functionalities, and these functionalities also determine whether they are regarded as necessary or non-necessary (voluntary) cookies. Necessary cookies are cookies that are necessary for our website or services to function. These cookies are automatically activated and do not require your consent. Other cookies are not necessary for the website or service to function and require your consent to be activated.

You can also choose to give your consent only to some voluntary cookies or to withdraw all or some of your consents.

  1. WHAT COOKIES DO WE USE?
Necessary cookies

These cookies are necessary for the operation of our website and enable the basic functionality and security features of our website. You can set your browser to block these cookies, but please note that the website may not work as expected if these cookies are blocked.

Necessary cookies we use:

Name

Vendor

Purpose

Domain

Expiry

Name

__cf_bm

Vendor

Vimeo

Purpose

This cookie, set by Cloudflare, is used to support Cloudflare Bot Management.

Domain

vimeo.com

Expiry

1 day

Name

_cfuvid

Vendor

Vimeo

Purpose

Calendly sets this cookie to track users across sessions to optimize user experience by maintaining session consistency and providing personalized services

Domain

vimeo.com

Expiry

Session

Name

_cfuvid

Vendor

Vimeo

Purpose

Calendly sets this cookie to track users across sessions to optimize user experience by maintaining session consistency and providing personalized services

Domain

vimeo.com

Expiry

Session

Name

_cfuvid

Vendor

Vimeo

Purpose

Calendly sets this cookie to track users across sessions to optimize user experience by maintaining session consistency and providing personalized services

Domain

vimeo.com

Expiry

Session

Targeted cookies

We use these cookies to collect information about how you use our websites to better target advertising to you and to better match your interests. We may share the information used by these cookies with other parties who help manage the advertisements displayed on the websites - see Section 4 "Which third parties do we use?" for more information.

Targeted cookies we use:

Name

Vendor

Purpose

Domain

Expiry

Name

_ga_*

Vendor

Google

Purpose

Google Analytics sets this cookie to store and count page views.

Domain

lumidb.com

Expiry

2 years

Name

_ga

Vendor

Google

Purpose

The _ga cookie, installed by Google Analytics, calculates visitor, session and campaign data and also keeps track of site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognize unique visitors.

Domain

lumidb.com

Expiry

2 years

Name

_ga

Vendor

Google

Purpose

The _ga cookie, installed by Google Analytics, calculates visitor, session and campaign data and also keeps track of site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognize unique visitors.

Domain

lumidb.com

Expiry

2 years

Name

_ga

Vendor

Google

Purpose

The _ga cookie, installed by Google Analytics, calculates visitor, session and campaign data and also keeps track of site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognize unique visitors.

Domain

lumidb.com

Expiry

2 years

Social media cookies

We use these cookies when you share information by clicking social media links on our website or when you interact with our content on or through a social media site. These cookies collect information about how you interact with these social media sites. Such information is, for example, information about whether you have a user account in the social media service or whether you have logged into the service while interacting with the content on the website. Such information may be used in targeted advertising.

Social media cookies we use:

N/A

  1. WHICH THIRD PARTIES DO WE USE?

When you use our website, third-party cookies, which we do not control, may be stored in your browser. Such cookies may be stored when the website you are visiting uses third-party analytics or marketing automation or embeds content displayed on the website through a third-party website. Consult the privacy and cookie statements of such third parties to find out how these third parties use cookies.

Name

Vendor

Purpose

Domain

Expiry

Name

_ga_*

Vendor

Google

Purpose

Google Analytics sets this cookie to store and count page views.

Domain

lumidb.com

Expiry

2 years

Name

_ga

Vendor

Google

Purpose

The _ga cookie, installed by Google Analytics, calculates visitor, session and campaign data and also keeps track of site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognize unique visitors.

Domain

lumidb.com

Expiry

2 years

Name

player

Vendor

Vimeo

Purpose

Vimeo uses this cookie to save the user's preferences when playing embedded videos from Vimeo

Domain

vimeo.com

Expiry

1 year

Name

vuid

Vendor

Vimeo

Purpose

Vimeo installs this cookie to collect tracking information by setting a unique ID to embed videos to the website.

Domain

vimeo.com

Expiry

2 years

Name

sync_active

Vendor

Vimeo

Purpose

This cookie is set by Vimeo and contains data on the visitor's video-content preferences, so that the website remembers parameters such as preferred volume or video quality.

Domain

player.vimeo.com

Expiry

1 never

You can read more about the cookies set by third parties and their privacy policies at their own websites.

Vendor

Privacy notice

Vendor

Google

Privacy notice

https://policies.google.com/technologies/partner-sites

Vendor

Vimeo

Privacy notice

https://vimeo.com/privacy

  1. INFORMATION WE COLLECT AND HOW WE COLLECT IT

In the following, we will tell you which types of personal data we may collect about you and how we collect it. In section 6, we have in a table explained the purposes for which we process your personal data and the lawful bases we rely on. We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

  1. Identity Data includes your surname and last name

  2. Contact Data includes your email or other online contact information, telephone number and address.

  3. Consent data includes data on consents you have given for cookies or electronic marketing when you sign-up for our email list.

  4. Technical Data includes User’s IP address, browser type and version, preferred language, geographical location using IP address, operating system and computer platform, the full Uniform Resource Locator (URL) clickstream to, though, and from our services, including date and time; and areas of our services you have visited. Technical data also includes data on necessary cookies, which are expected by you, such as remembering preferences.

  5. Cookie data includes data on non-necessary cookies. We need your consent for processing these cookies. Please see more specific descriptions of the cookies we use in section 3.

The identity (A), contact (B), and consent (C) data is provided directly by you through the website. The technical (D) and cookies (E) data is collected directly from your use of our website and interaction within it.

  1. THE PURPOSES AND THE LAWFUL BASIS

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

  1. Where you have given your consent cf. GDPR Article 6 (1) (a).

  2. To take steps prior to enter into a contract at your request or to perform a contract with you cf. Article 6(1)(b) GDPR.

  3. Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests cf. GDPR Article 6 (1) (f).

We have set out below, a description of all the ways we plan to use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate. 

Purpose/Activity

Type of data

Lawful basis for processing including basis of legitimate interest

Purpose/
Activity

Purpose/ Activity

To operate our website including keeping our site safe and secure and offering you information on our services as well as to offer you the possibility to:

  • contact us and give feedback and receive responses to your inquiries

Type of data

(D) Technical

Lawful basis for processing including basis of legitimate interest

Processing is necessary for the performance of a contract with you.

Purpose/
Activity

Purpose/ Activity

For performance of a contract with you we may process your personal data to carry out our obligations arising from any contracts entered into between you and us and to provide you with the information, products and services that you request from us

Type of data

(A) Identity

(B) Contact

(A) Identity, (B) Contact

(A) Identity, (B) Contact

Lawful basis for processing including basis of legitimate interest

Processing is necessary for the performance of a contract with you.

Purpose/
Activity

Purpose/ Activity

For quality improvement and trend analysis we may process your personal data to improve our site to ensure that content is presented in the most effective manner for you and for your computer

Type of data

(D) Technical

(E) Cookie

(D) Technical, (E) Cookie

(D) Technical, (E) Cookie

Lawful basis for processing including basis of legitimate interest

With your consent.

Purpose/
Activity

Purpose/ Activity

For statistical and analytical purposes we may gather Technical and Cookie Data and anonymous and aggregate data to generate reports and statistics. We may use statistics and reports for sales and marketing purposes.

Type of data

(D) Technical

(E) Cookie

(D) Technical, (E) Cookie

(D) Technical, (E) Cookie

Lawful basis for processing including basis of legitimate interest

With your consent.

Purpose/Activity

Purpose/
Activity

For direct marketing we may provide you with information about our goods and services.

Type of data

(A) Identity

(B) Contact

(A) Identity, (B) Contact

(A) Identity, (B) Contact

Lawful basis for processing including basis of legitimate interest

We have a legitimate interest to offer our products to you.

  1. SHARING OF INFORMATION COLLECTED

We do not disclose personal data to other controllers unless one of the following circumstances applies:

  • when required by law we may disclose your personal data to public authorities such as tax authorities, and law enforcement authorities;

  • we may assign your personal data, to any person or entity that acquires all or substantially all our business, stock or assets, or with whom we merge;

  • when it is necessary for the purposes listed in section 6;

  • when we have your explicit consent for sharing the data outside Luota Oy’s organization for other reasons than those mentioned above;

  • when we believe in good faith that disclosure is necessary to establish or exercise our legal rights or defend against legal claims, protect your safety or the safety of others, investigate fraud, or respond to a government request.

We may share information, including personal information, with our trusted third-party service providers that we use to provide services to us and process your data on our behalf and under our instruction. These third-party service providers may have access to or process your personal information for the purpose of providing these services for us. We do not permit our third-party service providers to use the personal data that we share with them for any other purpose than in connection with the services they provide to us. These third-party service providers may include IT service providers; analytics and search engine providers that assist us in the improvement and optimisation of our site; hosting service providers; cyber security service providers; and marketing service providers.

  1. WHERE DO WE STORE YOUR PERSONAL DATA?

The data that we collect from you may be transferred to and stored at a destination outside the European Economic Area (“EEA”). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. Such staff may be engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services. However, to ensure that your personal data receive an adequate level of protection, we have ascertained that sufficient safety measures have been implemented to allow for the transfer, including where the European Commission have deemed the country to provide an adequate level of protection for personal data, or by use of specific safeguards such as contracts approved by the European Commission (Standard Contractual Clauses) which give personal data essentially equivalent protection as it has in the EEA. If you require further information about our data processors established outside the EEA and the safety measures in place to allow for the transfer of personal data, you can request it from us by sending your request to us using the contact details in section 1.

  1. DATA RETENTION

Luota Oy does not store personal data longer than is legally permitted and necessary for the purposes of providing the services or the relevant parts thereof. The storage period depends on the nature of the information and the purposes of processing.

Retention times per data group:

Identity Data
2 years after last interaction

Contact Data
2 years after last interaction

Consent Data
Until consent is withdrawn, but max. 3 years.

Technical Data
1 year after last interaction

Cookie Data
We use both session-specific cookies and persistent cookies. You can find the retention times of all cookies in section 3.

  • Session-specific cookies are stored in the memory for the duration of the session and are deleted when the user has closed the browser.

  • Permanent cookies are stored on the hard drive of the user's computer and are kept for a certain period or until the user deletes the cookies.

  1. HOW TO EXERCISE YOUR DATA PROTECTION RIGHTS

You have certain options available to you when it comes to your personal data. Below is a summary of those options, how to exercise them. Please note that some of these options are legal basis -specific, meaning that they can only be used when personal data processing is based on a specific legal basis.

Under certain circumstances, you have the right to:

  • Request to know whether we process your personal data

  • Request to access your personal data. This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.

  • Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.

  • Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it.

  • Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal data for direct marketing purposes.

  • Request the restriction of processing of your personal data. This enables you to ask us to suspend the processing of personal data about you, for example if you want us to establish its accuracy or the reason for processing it.

  • Request the transfer of your personal data to another party (also known as data portability). Please note that you do not have this right when processing is based on legitimate interest.

  • Where our processing is solely based on your specific consent you have the right to with-draw your consent at any time. Such withdrawal will not affect the lawfulness of processing based on consent before its withdrawal.

If you wish to exercise any of the data protection rights that are available to you then please email us using the contact information provided under section 1 of this Privacy Notice and we will action your request in accordance with applicable data protection laws.

You have the right to complain to your local data protection authority if you are unhappy with our data protection practices. In Finland, you can lodge a complaint with the Office of the Data Protection Ombudsman at Notification to the Data Protection Ombudsman.

  1. CHANGES TO THIS PRIVACY NOTICE

This Privacy Notice may be updated from time to time to reflect changing legal, regulatory, or operational requirements. We encourage you to periodically consult our Privacy Notice for the latest information on our privacy practices.

© LumiDB 2024

© LumiDB 2024

© LumiDB 2024