Privacy Notice
Last updated: 21.9.2026
This privacy notice explains how we collect, process and protect your personal data in accordance with the EU General Data Protection Regulation (GDPR) when you visit our website or contact us.
1. Data Controller and Contact Details
Company name: Lainisalo Oy
Business ID: 0914004-2
Address: Valuraudantie 5-7, 00700 Helsinki
Registry contact: Pertti Lainisalo
Email: pertti.lainisalo@lainisalo.fi
Phone number: +358 400 701 080
2. Purposes of Processing Personal Data
We process your personal data for the following specific purposes:
Customer Service and Enquiries: Responding to enquiries, preparing quotations and managing customer relationships.
Contractual obligations: Processing orders, carrying out projects and delivering services.
Website development and marketing: Analysing the website user experience, tracking visitor statistics and delivering targeted advertising.
Legal obligations: For example, meeting obligations under the Accounting Act.
3. Legal bases for processing (GDPR)
Your data will always be processed on the basis of at least one of the following lawful grounds:
Contract or pre-contractual steps: Information you provide in forms is processed so we can respond to your request for a quote or fulfill our contractual obligations.
Consent: Information collected through cookies and tracking technologies is based on the voluntary consent you give on the website.
Legitimate interest: Maintaining customer relationships, ensuring high-quality service and developing the business.
4. Categories of Data Collected
We collect and process only the information necessary for the intended purpose:
Information provided through forms:
Name, email address and phone number.
Company name and Business ID (if applicable).
The content of your message and your service-related requests.
Technical data collected automatically (with consent):
IP address and technical details of your network connection.
Location information and data about pages visited and site usage.
5. Regular sources of information
Information is collected primarily directly from you when you fill in forms or contact us.
In addition, we collect technical information about site usage using Google Analytics 4 and Duda platform technical log files. Cookie preferences and consent are centrally managed through Termly.
6. Disclosure and Transfer of Data to Third Parties
We work with trusted service providers who support the technical operation, communications and analytics of our website:
Website platform: Duda Inc. (Website hosting and servers are located in Europe).
Cookie management: Termly Inc.
Analytics and advertising: Google Ireland Ltd. (Google Analytics 4, Google Ads) and Meta Platforms (Meta Pixel).
WhatsApp contact: If you use the WhatsApp link on our website, you will be directed to a service provided by Meta Platforms.
Transfers of data outside the EU: Some of our partners (Google, Duda Inc., Termly Inc., Meta) are US-based companies, which means data may technically be processed outside the EU/EEA. We protect your data by ensuring that our service providers are committed to the EU-US Data Privacy Framework or by using standard contractual clauses (SCCs) approved by the European Commission.
7. Use and management of cookies
We use cookies on our website to improve your experience and compile statistics. Cookies are divided into categories:
Essential cookies: Required to ensure the website's basic functionality and security (Duda platform). These cannot be disabled.
Performance and analytics: Help us understand how the website is used (Google Analytics).
Advertising cookies: Help display targeted advertising (Google Ads, Meta Pixel).
We request your consent to cookies using the Termly cookie banner. You can change or withdraw your consent at any time by clicking the "Cookie Settings" link or icon at the bottom of the site.
8. Data retention period
We retain your personal data only for as long as necessary to fulfill the purposes set out in this notice.
Customer and contract data: Stored for the duration of the customer relationship and contract.
Legal obligations: After the agreement ends, information is retained for the period required by law (such as the Accounting Act).
9. Register Protection and Information Security
We carefully protect your personal data in accordance with good information security practices:
All data sent between the website and the user is protected with SSL encryption (HTTPS).
Electronic systems are protected by firewalls, personal user accounts and strong passwords.
We use two-factor authentication (2FA) for our management systems.
Access to information is restricted to those who need it to perform their job duties.
10. Automated decision-making
We do not use your information for automated decision-making or profiling (GDPR Article 22).
11. Your rights as a data subject
Under the GDPR, you have the following rights regarding your personal data:
Right of access: The right to know what information we have stored about you.
Right to rectification: The right to request the correction of inaccurate information.
Right to erasure: The right to request that your data be deleted from our systems (unless we are legally required to retain it).
Right to restrict or object to processing: The right to prohibit the processing of certain information.
Right to withdraw consent: You can withdraw your cookie consent at any time through the website’s cookie settings.
Right to lodge a complaint: You have the right to lodge a complaint with the Data Protection Ombudsman (www.tietosuoja.fi) if you believe we have violated the law.
You can exercise your rights by submitting a written request in any format to the person responsible for registry matters named in section 1.
