Registry and Privacy Statement

This is Löytö24’s registry and privacy statement in accordance with the Finnish Personal Data Act (§10 and §24) and the EU General Data Protection Regulation (GDPR).
Created: 01.01.2026 (reCAPTCHA service implemented).

1. Data Controller

Realisointi Löytö24, Keltakuja 3B, 01620 Vantaa
Business ID: 3533401-9

2. Contact Person Responsible for the Register

Tauri Ojala, info@loyto24.fi

3. Register Name

Löytö24 customer register, marketing register, stakeholder register, and online service user register

4. Legal Basis and Purpose of Processing

Legal basis under GDPR for processing personal data:

  • Consent of the individual (documented, voluntary, specific, informed, and unambiguous)

  • Contract in which the data subject is a party

  • Legitimate interest of the controller (e.g., customer relationship)

Purpose: communication with customers, managing customer relationships, and marketing.
Data is not used for automated decision-making or profiling.

5. Data Contents

Stored data includes:

  • Name, position, company/organization

  • Contact details (phone, email, address)

  • Website addresses, IP addresses, social media accounts/profiles

  • Details of ordered services and changes, billing information

  • Other data related to customer relationships and services

Data is retained only for the intended purpose or as required by law.

6. Regular Data Sources

Data is obtained from clients via:

  • Web forms

  • Email, phone, social media

  • Contracts, meetings, and other situations where clients provide data

7. Regular Disclosures and Transfers Outside the EU/EEA

Data is not regularly disclosed to third parties.
Data may be disclosed to authorities if required by law.

Data is not transferred outside the EU/EEA without appropriate safeguards.

8. Security Principles

Data is processed carefully, and IT systems protect stored information appropriately.
Data stored on internet servers is physically and digitally secured.

The controller ensures confidential handling of stored data, server access, and other critical security information by authorized personnel only.

The online store uses reCAPTCHA to prevent spam, abuse, and fraud, and to improve website quality and user experience.

9. Right to Access and Rectify

Individuals have the right to:

  • Check their stored data

  • Request correction of inaccurate or incomplete data

Requests must be sent in writing to the data controller. Identification may be required.

The controller responds within the GDPR-specified time (generally one month).

10. Other Rights

Individuals have the right to request deletion of their data (“right to be forgotten”).
Other GDPR rights apply, e.g., limiting data processing in certain situations.

11. Google Analytics and Cookies

Google Analytics (provided by Google Inc.) helps analyze website usage and improve functionality.

Google Analytics and other non-essential cookies are activated only with user consent.
Users can manage cookie settings via the cookie banner.