Privacy Policy

Introduction

Lanttu Oy’s (hereinafter Lanttu.io) privacy policy helps you understand what personal information we collect, why we collect it, and how we process, protect, retain, transfer, and delete your personal information. We adhere strictly to the General Data Protection Regulation (GDPR) and other legislation when processing your personal information, and we always strive to follow good data protection practices. It is important to us that you can trust us to handle your personal information carefully, transparently, and with respect for your privacy.

What personal data do we process

• Lanttu.io processes the following types of personal data about you:
  Personal basic information, such as name, phone number, email address
• User and web traffic data, such as login ID, username, and IP address
• Content uploaded or provided by you, such as comments, articles, photos, and videos
• Statistics showing how users use our services and content
• Public financial information
• Information provided through job applications

Lanttu.io does not process sensitive personal data about you.

How are personal data collected

Typically, Lanttu.io collects personal data directly from you or from other individuals in contact with our customer. If a customer is collaborating with a partner company to purchase Lanttu.io products or services, we may collect information about you from the partner company. We also use cookies and other tracking technologies when you use Lanttu.io websites and interact with us by email to improve your experience with our products and websites. In some cases, we may also collect information about you from other sources. These sources may be third-party data collectors, Lanttu.io’s marketing partners, public sources, or third-party social networks.

Why do we process personal data

This Lanttu.io privacy policy applies when Lanttu.io processes your personal data for various purposes when you are interacting with us, such as:

Providing, purchasing, and delivering the service

• Processing customer orders, contracts, and payments
• Providing services personally: webinars, demo sessions, training, reports, etc.
• Offering products and services to corporate customers
• Creating user accounts and delivering services to users

Developing and providing customer support and maintenance

• Improving and enhancing the quality, functionality, and user experience of products, services, and websites
• Customer support for our products and services
• User community and training, as well as interaction between users and Lanttu.io

Information security

• Identifying and preventing security threats and abuses, as well as performing maintenance and error correction measures

Marketing

• Management and distribution of marketing content
• Creation of target groups for marketing relevant products and services

Recruitment

• Management and processing of recruitment processes and applications
• Analysis of candidate-related documentation, conducting interviews, and contacting references

Legal Basis for Processing Your Personal Data

Data protection legislation requires that all processing of personal data is based on one of the legal bases provided for in the General Data Protection Regulation. We process your personal data on the following legal bases:

Contract

We process your personal data based on a legally binding contract with you. This usually occurs when you apply for a job at Lanttu.io. The processing of your personal data, such as your resume, application, and references, is necessary for Lanttu.io to handle job applicants’ requests before entering into a contract.

Your consent

Lanttu.io may process your personal data based on your consent. You can withdraw your consent at any time.

Legitimate interest

Lanttu.io has a legitimate interest when we process your data for support and improvement purposes, cybersecurity, recruitment, or when you are a contact person or manager for current or potential customers. Your personal data is processed from a business perspective in a manner that is not contradictory to your privacy rights or freedoms.

Additionally, Lanttu.io processes data based on legitimate interest when you register for a webinar, download reports or other content from our website, or use Lanttu.io’s digital tools. The legitimate interest is to provide you with relevant content, conduct webinars, market, and manage and process your requests. Refer to the “Marketing” section for more information on how Lanttu.io processes your data for marketing purposes based on legitimate interest and your related rights.

Disclosure of personal data

We handle your information confidentially and do not, for example, sell, rent, or otherwise unnecessarily disclose your personal data to third parties. Lanttu.io may share your personal data with external third parties in the following situations:

Online events, websites, and forums

If you post a message, comment, or engage in similar activities on Lanttu.io’s online events, websites, or other forums, anyone with access to such forums can read and use this information. Lanttu.io is not responsible for any information you post on Lanttu.io’s websites or such forums.

Business partners

Lanttu.io may share your personal data with its partners if it is lawful from a business perspective and in accordance with applicable data protection legislation.

Authorities

Lanttu.io only discloses information to authorities if there is a legal obligation, court order, or similar compelling requirement.

Data transfers

Data transfer refers to a situation in which the data controller provides personal data to a third party for processing on behalf of the data controller itself. For example, sending a marketing message to another company may require transferring personal data. Lanttu.io uses service providers in the processing of personal data, to whom personal data is transferred for the purpose of providing the service. Lanttu.io’s subcontractors or service providers process personal data only to the extent necessary for the provision of the service and are contractually obligated to ensure an adequate level of data protection and compliance with the law.

The data we collect may be stored and processed outside the European Economic Area, for example, when the service provider we use is located or stores data outside the European Economic Area. Our service provider is contractually committed to ensuring that adequate data protection is guaranteed in all processing of your personal data.

Methods of protecting personal data

Lanttu.io protects personal data from loss, unauthorized access, and other misuse through appropriate technical and organizational measures. Our electronic databases are protected by firewalls, passwords, and restricted personal access rights. Other examples of such measures include the use of encryption techniques, backups, and secure equipment facilities.

Access to personal data is internally restricted through practices for granting and monitoring access rights to different systems and documents, as well as electronic and physical access control. Only employees with the appropriate job responsibilities have access to personal data.

The storage time of personal data

Lanttu.io retains your personal data only for as long as necessary to fulfill our contractual obligations, unless the law requires us to retain them for a longer period. When personal data is processed on another legal basis, such as legitimate interest, the data is retained for as long as necessary to achieve the purpose of the processing. Therefore, different retention practices may apply to personal data based on the type and purpose of the data.

Once the retention period has expired, the data is either deleted or rendered anonymous by irreversibly transforming it into a form where an individual can no longer be identified.

The Rights of data Subjects

The right to access data. You have the right to obtain confirmation from us of what personal data concerning you we are processing. This allows you to assess and ensure the lawfulness of the processing. Additionally, you have the right to request a copy of the personal data we process about you.
The right to rectify data. You have the right to request Lanttu.io to correct any inaccurate or incorrect personal data concerning you or to complete incomplete data about you. If you have a user account with Lanttu.io’s service or website, you can usually correct the information yourself in the relevant service or in the “your account” or “your profile” section of the service or website.
The right to erasure. You have the right to request Lanttu.io to delete the personal data concerning you.
The right to data portability. You have the right to request us to transfer your personal data to you or to third parties in a structured, commonly used, and machine-readable format.
The right to object to the processing of your personal data. You have the right to object to the processing of your personal data based on our legitimate interests or for direct marketing purposes, or for processing carried out for the performance of a task carried out in the public interest or in the exercise of official authority vested in us. You may also object to the processing of your personal data for reasons related to your particular situation.
The right to lodge a complaint with a supervisory authority. You also have the right to lodge a complaint with a data protection authority regarding the processing of your personal data.

Marketing

When you interact with Lanttu.io, such as by visiting Lanttu.io’s website, downloading content, participating in webinars, and using Lanttu.io’s services, Lanttu.io processes your personal data on the basis of legitimate interest. One of the purposes of legitimate interest is processing data for marketing purposes. Lanttu.io’s services are used, sold, and marketed for work-related activities. The purpose of creating marketing target groups is to offer services to companies and individuals who match the industry, decision-making position, job tasks, or preferences of our existing customers. Lanttu.io processes your personal data to provide you with relevant work-related content through marketing channels such as social media platforms, email, websites, or the Lanttu.io service.

Lanttu.io does not process sensitive personal data. The use of Lanttu.io’s services is not intended to reveal anything about your private life. Your personal data is processed from a business perspective in a way that, to our understanding, does not jeopardize your rights and freedoms as an individual. You always have the option to opt out as described below or in other situations when you receive marketing from Lanttu.io. Right to opt out of marketing communications You have the right to opt out of receiving marketing communications, as well as targeted advertising based on your profile, from Lanttu.io, and you can do so by any of the following methods:

(a) By following the opt-out instructions in marketing communications
(b) By changing settings in the relevant account editing section
(c) By contacting us via email at tommi.hyyrynen@lanttu.io

You also have the option to choose cookies for a particular website through our cookie banner. Please note that even if you opt out of receiving marketing communications from Lanttu.io, you may still receive administrative messages, such as order confirmations and notifications necessary for managing your account or the services we provide.

Contact and Exercising Rights

The exercise of rights is generally free of charge; however, in certain exceptional cases defined by law (such as if you request multiple copies of your data), we may ask you to pay in advance the costs related to fulfilling your request. We will respond to all requests without undue delay (no later than one month from the receipt of the request) and inform you of the actions we have taken in response to your request. If, for any reason, we are unable to fulfill your request, we will notify you of the refusal and the reasons for it no later than one month from the receipt of the request. If there are multiple requests or they are complex, we may sometimes need additional time for processing (up to 2 months). In such cases, we will inform you of the need for an extension and the reasons for it no later than 1 month after the request is made.

Changes

We encourage you to review this privacy statement regularly. If we make significant changes to the privacy statement that materially alter our privacy practices, we may also notify you in other ways, such as by email or by posting a notice on our company website before the changes take effect.

The privacy statement is reviewed at least annually, and any changes are approved by the senior management of Lanttu.io. Last updated: October 5, 2023.

Data controller and contact information

The data controller refers to the entity that determines how and why personal data is processed. Lanttu.io determines the purposes and means of processing personal data and is therefore the data controller for these personal data.

Contact information for the data controller:
Lanttu Oy
Keilaranta 1 02150 Espoo
Business ID: 3365966-1
Phone: +358 400 405 090

Contact information for the Data Protection Officer:
Tommi Hyyrynen
Phone: +358 40 525 4211
tommi.hyyrynen@lanttu.io