Privacy Policy 19.4.2021

Registry description

According to the data protection regulation, the data controller is obliged to inform the data subjects in a clear manner. This document fulfills the information obligation.

1. Data controller

Lykke & Lys Oy

Contact Information:

Aaltosenkatu 31-33
33500 Tampere

2. Data subjects

Lykke & Lys Oy maintains a register that includes personal customers as well as customer companies and their contact persons' details.

3. Purpose of processing personal data

Personal data is processed based on the data subject's customer relationship. Personal data is processed only for the predefined purpose, which is to manage customer relationships and billing.

4. Personal data stored in the register

The customer register contains the following information:

  • Customer's or customer company's name

  • Billing address

  • Contact person's phone number and email

5. Data subject's rights

The data subject has the following rights, and requests to exercise these rights should be made to

5.1 Right to inspection

The data subject can check the personal data we have stored.

5.2 Right to correction

The data subject can request correction of inaccurate or incomplete data.

5.3 Right to object

The data subject can object to the processing of personal data if they believe that the data has been processed unlawfully.

5.4 Prohibition of direct marketing

The data subject has the right to refuse the use of data for direct marketing.

5.5 Right to erase

The data subject has the right to request the deletion of data if the processing of the data is no longer necessary. We process the deletion request, after which we either delete the data or provide a justified reason why the data cannot be deleted. It should be noted that the controller may have a statutory or other right not to delete the requested information .The registrar is obliged to keep the accounting material in accordance with the period (10 years) defined in the Accounting Act (Chapter 2, Section 10). For this reason, accounting-related material cannot be deleted before the deadline expires.

5.6 Right to withdraw consent:

If the processing of personal data is based solely on consent, and not, for example, on customer or membership, the data subject may withdraw consent.

5.7 The registered person can appeal the decision to the data protection authority

The registered person has the right to demand that we limit the processing of disputed data until the matter is resolved.

5.8 Right of appeal

The registered person has the right to file a complaint with the data protection authority if he/she feels that we violate the current data protection legislation when processing personal data.

Contact information of the data protection authority:

6. Sources of information according to the regulation

Customer data is typically obtained from:

  • the customer themselves when the customer relationship is established

  • the customer themselves via the online form

7. Statutory disclosures of information

Data is not disclosed for marketing purposes outside Lykke & Lys Oy. We have ensured that all our service providers comply with data protection legislation. We regularly use the following service providers:

  • Holvi Payment Services Oy

8. Processing period

Personal data is generally processed for as long as the customer relationship is valid.

9. Data processors

Only the data controller processes the customer register.

10. Transfer of data outside the EU

Personal data is not transferred outside the EU or the European economic area.

11. Automated Decision Making and Profiling

We do not use data for automated decision-making or profiling.