Privacy Policy

Last updated: 26 June 2026

1. Data Controller

Visiofeist Oy (Business ID 2984567-1)
Eerikinkatu 28, 00180 Helsinki, Finland
Email: [email protected]
Phone: +358 9 612 7841

2. Scope

This Privacy Policy explains how Visiofeist Oy ("we", "us") collects, uses, stores, and protects personal data when you visit visiofeist.life, contact us, or use our lighting design services. We process personal data in accordance with the EU General Data Protection Regulation (GDPR, Regulation 2016/679) and the Finnish Data Protection Act (1050/2018).

3. Personal Data We Collect

• Contact data: name, email address, phone number, postal address
• Project data: property details, design preferences, correspondence related to your enquiry or commission
• Technical data: IP address, browser type, device information, pages visited (via cookies — see our Cookie Policy)
• Financial data: billing address, payment references (processed via third-party payment providers; we do not store card numbers)

4. Legal Basis for Processing

• Contract (Art. 6(1)(b)): to deliver lighting design services you have requested
• Legitimate interest (Art. 6(1)(f)): to respond to enquiries, improve our website, and maintain business records
• Consent (Art. 6(1)(a)): for non-essential cookies and marketing communications where applicable
• Legal obligation (Art. 6(1)(c)): to comply with Finnish accounting and tax legislation

5. How We Use Your Data

We use personal data to: respond to contact and booking requests; prepare proposals and deliver design services; issue invoices and maintain accounts; send project updates; improve our website and services; and comply with legal obligations.

6. Data Retention

Enquiry data is retained for 24 months unless a project proceeds. Client project files are retained for 7 years after project completion (Finnish accounting requirements). Cookie consent preferences are stored locally in your browser under the key visiofeist_life_consent.

7. Data Sharing

We do not sell personal data. We may share data with: electrical contractors and suppliers involved in your project (with your knowledge); cloud hosting and email providers (EU/EEA or adequacy-decision countries); and accounting services. All processors are bound by data processing agreements.

8. International Transfers

Where data is transferred outside the EU/EEA, we ensure appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.

9. Your Rights Under GDPR

You have the right to:

• Access your personal data (Art. 15)
• Rectify inaccurate data (Art. 16)
• Erase data in certain circumstances (Art. 17)
• Restrict processing (Art. 18)
• Data portability (Art. 20)
• Object to processing based on legitimate interest (Art. 21)
• Withdraw consent at any time where processing is consent-based

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

10. Supervisory Authority

If you believe we have not handled your personal data correctly, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutettu):

Office of the Data Protection Ombudsman
Lintulahdenkuja 4, 00530 Helsinki, Finland
Website: tietosuoja.fi
Email: [email protected]

11. Security

We implement appropriate technical and organisational measures including encrypted connections (HTTPS), access controls, and staff training to protect personal data against unauthorised access, loss, or destruction.

12. Changes

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated date.