Lanttu.io

Privacy Policy

Introduction

Lanttu Oy’s, hereinafter referred to as Lanttu.io, Privacy Policy helps you understand what personal data we collect, why we collect it, and how we process, protect, retain, transfer, and delete your personal data.

When processing your personal data, we carefully comply with the General Data Protection Regulation (GDPR), other applicable legislation, and recognized data protection practices.

It is important to us that you can trust us to process your personal data carefully, transparently, and with respect for your privacy.

What personal data we process

Lanttu.io processes the following types of personal data relating to you:

Basic personal information, such as your name, telephone number, and email address
User and network traffic data, such as login credentials, username, and IP address
Content uploaded or submitted by you, such as comments, articles, photographs, and videos
Statistics showing how users use the services and content we provide
Public financial information
Information provided through job applications

Lanttu.io does not process sensitive personal data relating to you.

How personal data is collected

Lanttu.io generally collects personal data directly from you or from other individuals connected with our customer.

If a customer works with a partner company to purchase Lanttu.io products or services, we may collect information about you from the partner company.

We also use cookies and other tracking technologies when you use Lanttu.io websites and interact with us by email to improve your experience of our products and websites.

In some cases, we may also collect information about you from other sources. These sources may include third-party data providers, Lanttu.io’s marketing partners, public sources, or third-party social networks.

Why we process personal data

This Lanttu.io Privacy Policy applies when Lanttu.io processes your personal data for various purposes in connection with your interactions with us, including the following:

Providing, purchasing, and delivering services

Processing customer orders, contracts, and payments
Providing services to individuals, including webinars, demonstrations, training sessions, reports, and similar services
Providing products and services to corporate customers
Creating user accounts and delivering services to users

Developing and providing customer support and maintenance

Developing and improving the quality, functionality, and user experience of products, services, and websites
Providing customer support for our products and services
Providing user communities and training, and facilitating interaction between users and Lanttu.io

Information security

Identifying and preventing security threats and misuse, and carrying out maintenance and corrective actions

Marketing

Managing and distributing marketing content
Creating target audiences for marketing relevant products and services

Recruitment

Managing and processing recruitment processes and applications
Analyzing candidate documentation, conducting interviews, and contacting references

Legal basis for processing your personal data

Data protection legislation requires all processing of personal data to be based on one of the legal bases set out in the General Data Protection Regulation. We process your personal data on the following legal bases:

Contract

We process your personal data on the basis of a legally binding contract with you. This usually applies when you apply for a position at Lanttu.io. Processing personal data such as your curriculum vitae, application, and references is necessary so that Lanttu.io can take steps at the request of job applicants before entering into a contract.

Your consent

Lanttu.io may process your personal data based on your consent. You may withdraw your consent at any time.

Legitimate interest

Lanttu.io has a legitimate interest in processing your information for support and improvement purposes, information security, recruitment, or when you are a customer contact or a decision-maker at one of our current or potential customers.

Your personal data is processed from a business perspective in a manner that does not conflict with your rights or freedoms relating to privacy.

Lanttu.io also processes information based on legitimate interest when you register for a webinar, download reports or other content from our website, or use Lanttu.io’s digital tools.

Our legitimate interest is to provide you with relevant content, organize webinars, conduct marketing, and manage and process your request.

See the section “Marketing” for more information about how Lanttu.io processes your information for marketing purposes based on legitimate interest and about your related rights.

Disclosure of personal data

We process your information confidentially and do not sell, rent, or otherwise unnecessarily disclose your personal data to external parties. Lanttu.io may share your personal data with external third parties in the following situations:

Online events, websites, and forums

If you post a message, submit a comment, or engage in similar activity during Lanttu.io online events, on Lanttu.io websites, or on other Lanttu.io forums, anyone with access to those forums may read and use the information. Lanttu.io is not responsible for information that you submit on Lanttu.io websites or such forums.

Business partners

Lanttu.io may share your personal data with its partners when doing so is lawful from a business perspective and complies with applicable data protection legislation.

Authorities

Lanttu.io discloses information to authorities only when required by legislation, a court order, or another equivalent binding obligation.

Transfers of personal data

A transfer of personal data refers to a situation in which the controller provides personal data to a third party for processing on behalf of the controller. For example, assigning a processing activity, such as sending a marketing message, to another company may require personal data to be transferred.

Lanttu.io uses service providers in the processing of personal data, and personal data is transferred to these service providers for the provision of their services. Lanttu.io’s subcontractors and service providers process personal data only to the extent necessary to provide the service. They are contractually required to maintain an adequate level of data protection and ensure that processing is lawful.

The information we collect may be stored and processed partly outside the European Economic Area, for example when a service provider we use is located outside the European Economic Area or stores information there. The service providers we use are contractually committed to ensuring an adequate level of data protection in all processing of your personal data.

Methods used to protect personal data

Lanttu.io protects personal data against loss, unauthorized access, and other misuse by using appropriate technical and organizational safeguards. Our electronic databases are protected through measures including firewalls, passwords, and restricted personal access rights.

Other examples of these safeguards include encryption technologies, backups, and secure equipment facilities.

Internal access to personal data is restricted through policies governing the granting and monitoring of access rights to systems and documents, as well as through electronic and physical access controls. Personal data may only be accessed by employees who are authorized to do so as part of their duties.

Retention periods for personal data

Lanttu.io retains your personal data only for as long as necessary to fulfil our contractual obligations, unless legislation requires us to retain it for a longer period.

When your personal data is processed on another lawful basis, such as legitimate interest, the information is retained for as long as necessary to achieve the purpose of processing. Different retention practices may therefore apply to personal data depending on the type of information and its purpose.

After the retention period has ended, the information is either deleted or anonymized by irreversibly converting it into a form in which an individual can no longer be identified.

Rights of data subjects

Right of access.

You have the right to obtain confirmation from us regarding the personal data relating to you that we process. This allows you to evaluate and verify the lawfulness of the processing. You also have the right to request a copy of the personal data that we process about you.

Right to rectification.

You have the right to request that Lanttu.io rectify inaccurate or incorrect personal data concerning you or complete personal data that is incomplete. If you have a Lanttu.io user account for a Lanttu.io service or website, you can generally correct the information yourself in the relevant service or in the “your account” or “profile” section of the service or website.

Right to erasure.

You have the right to request that Lanttu.io delete personal data concerning you.

Right to data portability.

You have the right to request that we transfer your personal data to you or to a third party in a structured, commonly used, and machine-readable format.

Right to object to the processing of your personal data.

You have the right to object to the processing of personal data concerning you on grounds relating to your particular situation when our processing is based on legitimate interest or is carried out for direct marketing purposes. You also have the right to object to our processing of your personal data when it relates to the performance of a task carried out in the public interest or in the exercise of official authority.

Right to lodge a complaint with a supervisory authority.

You also have the right to lodge a complaint with the data protection authorities regarding the processing of your personal data.

Marketing

When you interact with Lanttu.io, for example by visiting Lanttu.io’s website, downloading content, participating in webinars, or using Lanttu.io’s services, Lanttu.io processes your personal data based on legitimate interest. One purpose for relying on legitimate interest is the processing of information for marketing purposes.

Lanttu.io’s services are used, sold, and marketed for work-related activities. The purpose of creating marketing target audiences is to offer services to companies and individuals whose industry, decision-making position, work duties, or preferences correspond with those of our existing customers.

Lanttu.io processes your personal data to provide you with relevant work-related content through marketing on social media platforms, by email, on websites, or through the Lanttu.io service.

Lanttu.io does not process sensitive personal data. The use of Lanttu.io’s services is not intended to reveal anything about your private life. Your personal data is processed from a business perspective in a manner that we believe does not compromise your rights and freedoms as a private individual. You always have the option to opt out as described below or whenever you receive marketing from Lanttu.io.

Right to opt out of marketing communications

You have the right to opt out of receiving marketing communications and audience-based targeting from Lanttu.io. You can do so in any of the following ways:

(a) by following the opt-out instructions included in marketing communications

(b) by changing the settings in the relevant account management section

You can also select your cookie preferences for a website through our cookie banner. Please note that even if you opt out of receiving marketing communications from Lanttu.io, you may still receive administrative messages from Lanttu.io, such as order confirmations and notifications required for managing your account or the services we provide.

Contacting us and exercising your rights

If you have comments or questions about our Privacy Policy, privacy-related concerns, or wish to review your information or otherwise exercise your rights, please contact us. The contact details of the Data Protection Officer are provided at the end of this Privacy Policy.

We process your requests and complaints confidentially. Our representative will contact you to address your concerns and explore available options for resolving them. We aim to ensure that complaints are resolved appropriately and without undue delay.

Exercising your rights is generally free of charge. In certain exceptional circumstances defined by law, such as when you request multiple copies of your information, we may ask you in advance to pay a fee corresponding to the costs of fulfilling the request.

We respond to all requests without undue delay, and no later than one month after receiving the request. We will also inform you of the actions taken in response to your request.

If we are required to refuse your request for any reason, we will inform you of the refusal and its grounds no later than one month after receiving the request.

If there are numerous requests or the requests are complex, we may occasionally require additional time for processing, up to a maximum of two additional months. In such cases, we will inform you of the need for additional time and the reasons for it no later than one month after the request was made.

Changes

We encourage you to review this Privacy Policy regularly.

If we make significant changes to this Privacy Policy that materially alter our privacy practices, we may also notify you in other ways, such as by email or by publishing a notice on our corporate website before the changes take effect.

The Privacy Policy is reviewed at least annually, and any changes are approved by Lanttu.io’s senior management.

Last updated: 15 July 2026

Controller and contact details

The controller is the entity that determines how and why personal data is processed. Lanttu.io independently determines the purposes and means of processing personal data and is therefore the controller of this personal data.

Controller’s contact details:

Lanttu Oy

Keilaranta 1

02150 Espoo

Business ID 3365966-1

Tel. +358400405090

Data Protection Officer’s contact details:

Tommi Hyyrynen

tommi.hyyrynen@lanttu.io

Tel. 040 525 4211