Privacy policy

Data controller

The data controller is Leda Agency Oy (business ID 3348510-4). For all matters concerning data protection and this policy, contact us by email at Management@ledaagency.com.

What personal data we collect

We collect only the data you give us yourself or that is generated technically when the site is used:

• Contact-form data: name, email address, company name (optional) and the content of your message.
• Email correspondence: when you contact us by email, we process the content of your message and your contact details.
• Technical log data: the server may record technical data such as your IP address and browser type to keep the site secure and functioning.

How we use the data

• Responding to enquiries and questions.
• Preparing offers and progressing possible collaboration.
• Maintaining site security and preventing misuse.

Legal basis for processing

Processing of personal data is based on Article 6 of the GDPR as follows:

• Consent (Art. 6(1)(a)): when you send the form or a message, we process the data you provide in order to reply to you.
• Pre-contractual steps (Art. 6(1)(b)): where your enquiry relates to a possible engagement, processing is necessary to take steps before a contract.
• Legitimate interest (Art. 6(1)(f)): processing of technical log data is based on our legitimate interest in keeping the site secure and functioning.

Who receives the data

We do not sell or rent personal data. We use trusted service providers that process data on our behalf (as data processors):

• Vercel Inc. (United States): technical hosting, server infrastructure and content delivery (hosting and CDN). This service may process technical log data.
• Microsoft 365 / Exchange Online (Microsoft Ireland Operations Ltd, Microsoft Corporation): delivery and storage of email correspondence and of contact-form messages sent by email.

The contact form does not send data to a separate form service; it opens a pre-filled message in your own email application, and the message is delivered to us by email through Microsoft 365. We may also disclose data to authorities where required by law.

Transfers outside the EU and EEA

Some of our service providers, such as Vercel (hosting) and Microsoft (email), may process data outside the European Economic Area (EEA), for example in the United States. In that case the transfer is protected by appropriate safeguards: the European Commission's Standard Contractual Clauses (SCCs) and the EU-US Data Privacy Framework.

How long we keep the data

We keep data related to enquiries only as long as handling the matter and any resulting collaboration requires. If an enquiry does not lead to collaboration, we delete the data within 24 months of the last contact at the latest. Technical log data is kept for a shorter period for security purposes.

Your rights

Under the GDPR you have the following rights regarding your personal data:

• The right of access to your data.
• The right to rectification.
• The right to erasure.
• The right to restriction of processing.
• The right to object to processing.
• The right to data portability.
• The right to withdraw your consent at any time.

You can exercise your rights by contacting Management@ledaagency.com. If you consider that we process your data unlawfully, you have the right to lodge a complaint with the supervisory authority, which in Finland is the Office of the Data Protection Ombudsman (tietosuoja.fi).

Automated decision-making

We do not carry out automated decision-making or profiling based on personal data.

Cookies

The site is built to work without cookies. Read more in our cookie policy.

Changes to this policy

We may update this privacy policy, for example as our services or the law change. The date of the latest update is shown at the top of the page.