Privacy Policy

Data Controller

LC Partners Oy (1992522-2)
Hereinafter referred to as the Company

Person responsible for data protection and/or contact person
Joni Sorvoja
0408461581
joni.sorvoja(at)lcp.fi

Name of the Register

LC Partners Oy Customer and Marketing Register

This privacy policy applies to the processing of personal data related to our website, marketing, customer relationship management, and the products and services we provide.

Personal Data Collected and Data Sources

We collect personal data necessary for managing customer relationships.


We collect personal data from the data subject themselves, as well as from publicly available official registers and other external sources, such as trade registers or similar public business registers. In addition, we collect data from contact form submissions and use it for the purposes related to maintaining customer relationships described above.

Purpose and Legal Basis for Processing Personal Data

Personal data is processed within the limits permitted by applicable legislation for the following purposes:

1. delivery of products and services and conclusion of customer agreements (contract or its preparation)
2. customer relationship management (legitimate interest)
3. service communication and advisory (legitimate interest)
4. testing of online services (legitimate interest)
5. development of products and services (legitimate interest)
6. collection and analysis of user statistics (consent, legitimate interest)
7. improving user experience on our website and other services (consent, legitimate interest)
8. invoicing, credit decisions, and debt collection (legitimate interest)
9. marketing communication (legitimate interest)
10. direct marketing, including electronic direct marketing and telemarketing, as well as planning and measuring advertising and marketing effectiveness and combining and updating personal data for direct marketing purposes (legitimate interest, consent)
11. management of stakeholder relationships, subcontracting, and cooperation with service providers (legitimate interest, contract or its preparation)
12. internal reporting and other administrative measures (compliance with legal obligation)
13. handling warranty and liability matters, complaints, and legal and authority proceedings (legitimate interest)
14. prevention and investigation of misuse, and ensuring data security, personal safety, and property security (legitimate interest)
15. compliance with other legal obligations (e.g. accounting and taxation)
16. and, where processing is based on the data subject’s consent, the data subject may withdraw their consent at any time by notifying the contact person mentioned above.

Processing of personal data may be necessary to pursue the legitimate interests of the Company and the data subject’s customer relationship. The Company has a legitimate interest in processing personal data for marketing, service and customer analytics, and service testing. Profiling may also be used for marketing purposes. The data subject has the right to object to such processing. When processing is based on legitimate interest, we have assessed the benefits and potential impacts on the data subject and concluded that the data subject’s rights and interests do not override the legitimate interest. More information is available upon request.

Processors of Personal Data

Personal data is accessible only to personnel responsible for customer relationship management and marketing.

Recipients of Personal Data

We may use various service providers and other third parties in processing personal data, such as providers of technical solutions or hosting services, or accounting and financial administration service providers. We ensure that all required data protection agreements are in place with these parties.

Personal data may be disclosed to third parties where required by law or authorities, or for investigating misuse and ensuring security. In addition, personal data may be disclosed in connection with legal proceedings or similar processes.

If the Company is involved in a merger, business acquisition, or other corporate arrangement, personal data may be disclosed to parties involved in the arrangement or assisting in it.

More information on recipients is available upon request.

Transfer of Personal Data Outside the EEA

Personal data is not transferred outside the European Union or the European Economic Area unless necessary for the technical implementation of services. In such cases, the level of data protection required by legislation and appropriate safeguards are ensured.

More information is available upon request.

Cookies

We use cookies and similar technologies on our website. A cookie is a small text file stored by the browser on the user’s device. Cookies contain an anonymous unique identifier that allows us to recognize and count different browsers visiting our site.

The purpose of cookies and similar technologies is to analyze and further develop our services to better serve users, as well as to target advertising. Users can manage their consent via the cookie tool available on our website.

Protection of Personal Data

We protect personal data using appropriate technical and organizational measures. Data is stored in databases protected by firewalls, passwords, and other technical security measures.

Databases and their backups are located in locked and secured facilities, and access is restricted to designated personnel only.

Retention and Deletion of Personal Data

Personal data is retained only for as long as necessary for the purposes for which it was collected and processed, for the execution of a contract, or as required by law and regulations. After this, the data is securely deleted.

Rights of the Data Subject

The data subject has the following rights:

1. Right of access to personal data. The data subject has the right to receive confirmation of whether their personal data is being processed, as well as other information required by data protection legislation. The data subject also has the right to receive a copy of their personal data.
2. The data subject may request rectification if the data is incomplete or incorrect.
3. The data subject may request erasure where there is no legal basis for processing under data protection legislation independent of the data subject’s consent.
4. The data subject has the right to restrict processing if the accuracy or lawfulness of the data requires it, or based on the right to object, in which case processing may be limited to storage only. The data subject has the right to object to processing for direct marketing purposes based on the Company’s legitimate interest.
5. The data subject may request transfer of data to another controller. This right generally applies to personal data provided by the data subject in a structured, commonly used, and machine-readable format, where processing is based on consent or a contract and carried out automatically.
6. Right to withdraw consent. If processing is based on consent, the data subject has the right to withdraw their consent at any time. Withdrawal does not affect processing carried out before the withdrawal.

Requests concerning data subject rights must be submitted in writing or by email to:
LC Partners Oy
Request concerning personal data
Joni Sorvoja
0408461581
[joni.sorvoja(at)lcp.fi](mailto:joni.sorvoja(at)lcp.fi)

The identity of the requester may be verified before processing the request. The Company will respond within one month unless there are justified reasons for extension.

The data subject has the right to lodge a complaint with the competent supervisory authority if they believe their personal data has been processed unlawfully.

The contact details of the Finnish Data Protection Authority are available here(https://tietosuoja.fi/yhteystiedot]here[/url)].