Privacy Policy

Updated 16 September 2026

This privacy policy describes how LEDiMedia Oy processes personal data in accordance with the EU General Data Protection Regulation (GDPR) when you use our website, contact us or do business with us.

1. Data controller

LEDiMedia Oy
Business ID: 2450248-6
Address: Kauppaneliö 13 T 7, FI-60120 Seinäjoki, Finland
Email: info@ledimedia.fi
Website: ledimedia.fi

2. Contact person for data protection matters

For any questions regarding data protection, please contact:
Juha Hokkanen, Technical Support
Phone: +358 44 243 9858
Email: juha.hokkanen@ledimedia.fi

3. Personal data we process

  • Enquiry data: name, email address, phone number and message content that you provide via our contact or quote request form.
  • Customer and order data (online shop): name, billing and delivery address, email, phone number, and order and payment transaction details.
  • Marketing data: contact details and consent records of newsletter or marketing subscribers.
  • Website usage data: IP address, browser and device information, visit times and information on how the website is used, collected through cookies.
  • Server log data: technical data collected automatically to ensure the operation and security of the website.

4. Purposes and legal basis for processing

  • Responding to enquiries and preparing quotes – legal basis: legitimate interest and steps taken prior to entering into a contract.
  • Order processing, delivery and customer service – legal basis: performance of a contract.
  • Accounting and statutory obligations – legal basis: legal obligation.
  • Marketing and newsletters – legal basis: consent.
  • Ad targeting and measurement (Google Ads, Meta, LinkedIn) – legal basis: consent.
  • Website analytics and development – legal basis: consent (non-essential cookies) and legitimate interest.
  • Security and fraud prevention (including reCAPTCHA) – legal basis: legitimate interest.

5. Sources of data

We collect personal data mainly from you directly (forms, orders, enquiries) and automatically from your use of the website through cookies and similar technologies.

6. Recipients and processors

We use trusted service providers who process personal data on our behalf. These include:

  • Website hosting: DigitalOcean, LLC.
  • Google Ireland Limited: Google Analytics 4 (web analytics), Google Tag Manager, Google Ads conversion tracking and Google reCAPTCHA (spam protection for forms).
  • HubSpot Ireland Limited: forms, customer relationship management (CRM) and marketing.
  • Meta Platforms Ireland Limited: Meta Pixel (Facebook) for ad targeting and measurement.
  • LinkedIn Ireland Unlimited Company: LinkedIn content and ad measurement.
  • Payment service provider: online shop payments are processed by the provider of the payment method you choose.
  • Email and office services: the service provider that operates our email communications.

We do not sell or rent personal data to third parties. Data may be disclosed to authorities where required by law.

7. Transfers outside the EU/EEA

Some of our service providers (including Google, HubSpot, Meta, LinkedIn and DigitalOcean) may process data outside the EU and EEA, for example in the United States. In such cases, transfers are based on the Standard Contractual Clauses (SCCs) approved by the European Commission and/or the EU–US Data Privacy Framework, with appropriate safeguards in place.

8. Retention periods

  • Enquiry data: retained for as long as needed to handle the matter, up to 24 months.
  • Customer and order data: for the period required by the Finnish Accounting Act, 6 years from the end of the financial year.
  • Marketing consent data: until you withdraw your consent.
  • Analytics data: up to 14 months.

When the retention period ends, the data is deleted or anonymised.

9. Cookies

Our website uses cookies for functionality, analytics and marketing purposes. Non-essential cookies are only used with your consent. For more information, please see our cookie policy.

10. Your rights as a data subject

You have the right to:

  • know whether we process personal data concerning you and access your data;
  • request the rectification of inaccurate data;
  • request the erasure of your data (“right to be forgotten”);
  • request the restriction of processing;
  • object to processing based on legitimate interest;
  • receive your data in a portable format (right to data portability);
  • withdraw your consent at any time.

You can exercise your rights by contacting the person named in section 2.

11. Right to lodge a complaint with a supervisory authority

If you believe that the processing of your personal data violates data protection legislation, you may lodge a complaint with the supervisory authority: the Office of the Data Protection Ombudsman, tietosuoja.fi/en.

12. Data security

We protect personal data with appropriate technical and organisational measures, such as encrypted connections (SSL/TLS), access control and regular updates.

13. Automated decision-making

We do not carry out automated decision-making or profiling based on personal data that would have legal effects concerning you.

14. Changes to this privacy policy

We continuously develop our services, so this policy may be updated. The current version is always available on this page. The date of the latest update is shown at the top of the policy.