Privacy notice

Controller

Lukoton Experience Oy (Business ID 2656602-9), Höyläämötie 11 B, 00380 Helsinki, Finland.

Questions and requests concerning privacy: info@lukoton.com.

What data we process

When you contact us using the form or by email, we process the information you give us: name, organisation, email address, area of interest and the content of your message, as well as any further correspondence.

A message sent with the form is also saved in our contact register together with the time, page and language, and you receive an automatic confirmation by email. Of your IP address we keep only a daily identifier that stops repeated submissions from the same address.

When you visit the website, the hosting environment records technical log data such as IP address, browser details, the page requested and the time.

Why we use it

We use enquiry data to reply to you and to manage a possible customer or partner relationship. The legal basis is our legitimate interest in responding to enquiries addressed to us and, if things move forward, the preparation or performance of a contract.

Log data is used to keep the website secure and working. The legal basis is our legitimate interest in keeping the website secure.

We do not use your data for automated decision-making or profiling, and we will not add you to a mailing list without your consent.

Cookies and visitor statistics

This website uses no cookies. Fonts, images and the statistics script are served from our own site, and no content is loaded from third parties.

We count visits with Vercel Web Analytics. It records the page viewed, the page you came from, your country, and your browser, operating system and device type. Visitors are counted with an identifier derived from the request that changes every 24 hours, so we cannot identify individual visitors or follow them from one site to another. We also record that the contact form was sent and which topic was chosen, but not what you wrote in it.

We look at the statistics only in aggregate, to improve the website and our communication. The legal basis is our legitimate interest in knowing how the website is used.

Who processes the data

We do not sell or disclose your data to anyone. Only Lukoton employees whose work requires it have access to it.

We use trusted service providers that process data on our behalf: the website is hosted and its visitor statistics provided by Vercel Inc., email is handled by Microsoft (Microsoft 365), form emails are sent through Resend and the contact register database is provided by Neon. Form data is stored within the EU. Where data is transferred outside the EU or EEA, the transfer relies on the European Commission’s standard contractual clauses or another transfer mechanism permitted under the GDPR.

How long we keep it

Enquiries are kept for as long as needed to handle the matter, and no longer than three years after our last contact, unless a customer relationship or a legal obligation requires a longer period.

Server logs are deleted within a short period in line with the hosting provider’s practice.

Your rights

You have the right to access your data, to have it corrected or erased, to restrict its processing and to object to processing based on our legitimate interest. Send your request to info@lukoton.com. We will reply within one month.

If you believe your data is being processed unlawfully, you can lodge a complaint with the Office of the Data Protection Ombudsman in Finland (tietosuoja.fi) or the supervisory authority in your own country.

Changes

We will update this notice if our processing changes. The current version is always on this page.