Privacy notice

Under the EU General Data Protection Regulation (2016/679), Articles 13 and 14. Updated 21 October 2026. If this English version and the Finnish version differ, the Finnish version prevails.

1. Controller

Selia Invest Oy
Business ID: 3564913-3
Postal address: Kaartotie 8, 03400 Vihti, Finland
Email: hei@getloydy.fi

Löydy is a service provided by Selia Invest Oy. Questions and requests about privacy can be sent to hei@getloydy.fi.

2. What data we process

• Enquiries: name, business name, email address, phone number and the content of your message when you contact us by email or via the form.
• Clients: contact person's name and details, billing and contract details, and the photos and text supplied for the website.
• Prospective clients (businesses): business name, public contact details, address, services, price list and booking page, and the owner's name where it is publicly linked to the business. We use these to design a tailored mockup and to get in touch.

3. Where the data comes from

From you directly. Data about prospective clients is collected from public sources such as the business's own Instagram or Facebook profile, public booking pages, search engines and business registers.

4. Purpose and legal basis

• Replying to enquiries and preparing quotes: legitimate interest and steps prior to a contract (Art. 6(1)(b) and (f)).
• Managing the client relationship, building and maintaining the site, and invoicing: contract (Art. 6(1)(b)) and legal obligations under the Finnish Accounting Act (Art. 6(1)(c)).
• Business-to-business marketing and mockups: legitimate interest in offering our service to businesses (Art. 6(1)(f)). You can object at any time by replying “no thanks” or by emailing hei@getloydy.fi.

5. How this website works

This website uses no cookies, no analytics and no third-party tracking. Fonts are served from our own server. The contact form does not send or store anything on the site; it simply opens your email app with a pre-filled message.

Server logs (such as IP address, time and requested page) are created for technical operation and security, and are kept according to the hosting provider's policy.

6. Recipients and processors

We never sell your data or share it for marketing. The following providers process data on our behalf:

• Website and email hosting: Domainhotelli (Planeetta Internet Oy, Business ID 1753494-9, Helsinki, Finland). Servers are located in Helsinki.
• Accounting: an accounting service provider used for statutory bookkeeping.

Data is not transferred outside the EU/EEA unless stated here.

7. Retention

• Enquiries and prospective client data: up to 12 months after the last contact unless a client relationship begins. Objections are recorded so we don't contact you again.
• Client data: for the duration of the relationship and afterwards for as long as the law requires (accounting records 6–10 years).

8. Your rights

You have the right to access your data, have it corrected, request its erasure or restriction, object to processing (including direct marketing) and, where processing is based on a contract, receive your data in a portable format. Requests: hei@getloydy.fi.

You also have the right to lodge a complaint with the supervisory authority: the Office of the Data Protection Ombudsman, tietosuoja.fi.

9. Security

Data is kept in systems protected by passwords and encrypted connections, accessible only to those who need it.