What information does Lumira Link Oy collect?

We collect data through your active interaction with the site and through automated tracking: Contact Enquiries (name, email, company, message content), Newsletter & Marketing (email address if you opt-in), and Automated Data via Cookies (IP address, browser type, operating system, and pages visited).

What is the legal basis for processing personal data?

We process your data based on: Consent (for marketing cookies and newsletter subscriptions), Legitimate Interest (for website security, analytics to improve our site, and responding to business inquiries), and Contractual Necessity (if you are a potential partner requesting a proposal or demo).

How does Lumira Link Oy use cookies?

Our website uses cookies to enhance user experience. Strictly Necessary cookies are required for the site to function. Analytics cookies help us understand site traffic and are only activated if you click Accept on our cookie banner. Marketing cookies may include LinkedIn or Meta pixels for ad retargeting, subject to your explicit consent. You can withdraw or change your cookie preferences at any time via the Cookie Settings icon in the footer.

Does Lumira Link Oy share or transfer data internationally?

We do not sell website visitor data. We share data only with trusted service providers: our website is hosted on secure servers within the European Union, and we may use third-party CRM/Email tools to manage business inquiries. If data is processed outside the EEA, we ensure Standard Contractual Clauses (SCCs) are in place to guarantee a European level of protection.

How long does Lumira Link Oy retain personal data?

Business contact data from inquiries is kept for 2 years after the last contact. Marketing data is retained until you unsubscribe. Analytics data has standard retention of 14–26 months depending on the tool. Job applications are kept for 1 year after the position is filled, unless you consent to us keeping your CV on file.

What rights do I have under GDPR?

Under the GDPR, you have the right to access, rectify, or erase your personal data. You may also object to processing or request data portability. To exercise these rights, email privacy@lumiralink.com. If you believe we are mishandling your data, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutettu).

Website Privacy Policy

Lumira Link Oy

Last Updated: October 2026

Lumira Link Oy, based in Kotka, Finland ("Lumira", "we", "us"), respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, and protect personal information when you visit our website. We are committed to compliance with the EU General Data Protection Regulation (GDPR) and the Finnish Data Protection Act (Tietosuojalaki).

1. Data Controller

Lumira Link Oy is the Data Controller responsible for the personal data processed through this website.

Company: Lumira Link Oy
Email: privacy@lumiralink.com
Address: Juha Vainion katu 2, 48100 Kotka, Finland

For any privacy-related questions or requests, please contact us using the email address above.

2. Information We Collect

We collect personal information through your direct interactions with our website and through essential automated technical processes.

The types of information we may collect include:

Contact Enquiries: When you submit a "Contact Us" or "Demo Request" form, we collect your name, email address, company name, and any information you include in your message.
Newsletter & Marketing: When you voluntarily subscribe to our newsletter or marketing communications, we collect your email address.
Automated Technical Data: When you browse our website, our hosting and security infrastructure processes technical data such as your IP address, browser type, operating system, and request headers strictly to ensure secure and stable delivery of the website.

3. Legal Basis for Processing

We process personal data only when we have a valid legal basis under Article 6 of the GDPR:

Consent (Art. 6(1)(a) GDPR): For newsletter subscriptions and direct marketing communications when you voluntarily opt in.
Legitimate Interest (Art. 6(1)(f) GDPR): For maintaining website security, preventing abuse and DDoS attacks, ensuring network stability, and responding to incoming business enquiries.
Contractual Necessity (Art. 6(1)(b) GDPR): When processing information is necessary in connection with a proposal, demo request, or steps taken prior to entering into a business contract.

4. Cookies & Technical Storage

Our website does not use marketing, advertising, profiling, or third-party analytics cookies. We do not track you across other websites.

We only use strictly necessary technical cookies required for website security, load balancing, and network traffic management. Because these cookies are strictly necessary to deliver the website requested by you, they are exempt from prior consent requirements under the ePrivacy Directive and Finnish law.

Cookie Name

Provider

Purpose

Expiry

__cfuvid

Cloudflare / Webflow

Used to apply rate-limiting rules and prevent automated abuse/attacks across shared IP addresses. It does not track users across sites.

Session

You can configure your browser to block or alert you about cookies; however, blocking essential security cookies may impact website availability and security.

5. Data Sharing & International Transfers

We do not sell, rent, or trade personal data collected from website visitors.

We share information only with trusted third-party service providers necessary to operate our website and manage business communications:

Website Hosting & Security Providers: Our website is built and hosted via Webflow and protected by Cloudflare reverse-proxy infrastructure.
CRM & Email Service Providers: We may use third-party platforms to securely store incoming business enquiries and manage voluntary newsletter subscriptions.
International Data Transfers: If personal data is processed outside the European Economic Area (EEA), we ensure appropriate safeguards are implemented—specifically EU Standard Contractual Clauses (SCCs)—to protect your information in accordance with European data protection requirements.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or to comply with legal obligations:

Business Enquiries: Contact information is retained for up to 2 years after our last active communication.
Marketing Subscriptions: Email addresses are retained until you unsubscribe or withdraw your consent.
Technical Logs: Server security and rate-limiting logs are retained for short technical periods (typically 30 days or less) before automatic deletion.

7. Your Privacy Rights

Under Chapter III of the GDPR, you have the following rights regarding your personal data:

Access: Request confirmation of and access to personal data we hold about you.
Rectification: Request correction of inaccurate or incomplete personal information.
Erasure: Request deletion of your personal data where grounds apply under Art. 17 GDPR.
Restriction: Request restriction of processing under certain circumstances.
Object: Object to data processing based on legitimate interests.
Data Portability: Request the transfer of your data to yourself or a third party in a structured, machine-readable format.
Withdraw Consent: Withdraw consent at any time for processing based on consent (such as newsletters) without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at:

privacy@lumiralink.com

If you believe our processing of your personal data violates applicable data protection legislation, you have the right to lodge a complaint with the Finnish supervisory authority:

Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto)

Website: tietosuoja.fi

8. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our website, technology, business practices, or statutory requirements. Any revisions will be posted on this page with an updated "Last Updated" date.