Privacy
This is a translation of the Finnish privacy policy, which is the authoritative version. It explains how Lense Oy handles the personal data of its clients, of people who contact us and of visitors to lense.fi.
Controller
Lense Oy, Business ID 2372264-7, 20100 Turku, Finland. Contact for privacy matters: Rasmus Jaakonmäki, rasmus@lense.fi.
Whose data
Our clients’ contact people, people who contact us or ask for a quote, and visitors to lense.fi.
What data we handle
The name, email address, phone number (optional), topic and message sent with the contact form, and the details of contacts made by email or phone.
For clients, also the company name and business ID, the billing address and other billing details, and messages about the project.
Where the data comes from
From you: the contact form, email, phone calls and meetings. We may check a company’s basic details in the Finnish business register (YTJ).
Purpose and legal basis
To answer your message and make a quote, as steps taken at your request before entering into a contract (GDPR Article 6(1)(b)).
To carry out and invoice the agreed work, under the contract (Article 6(1)(b)).
To keep the accounts, as a legal obligation under the Finnish Accounting Act (Article 6(1)(c)).
To manage the client relationship and stay in touch after a project, as our legitimate interest (Article 6(1)(f)).
Providing data
Giving us your data is voluntary, but without contact details we cannot answer your message or make a quote. We make no automated decisions and do no profiling based on your data.
Recipients
Messages sent with the form reach us as email through Resend, Inc. Our email runs on Google Workspace.
Cloudflare, Inc. hosts the site and provides the form’s spam protection (Turnstile) and the visitor statistics.
Billing and accounting data is handled in our invoicing and accounting service and by our accountant.
We do not sell data or pass it on for marketing. We disclose data to authorities only when the law requires it.
Transfers outside the EU
Resend, Cloudflare and Google are US companies and may process data in the United States. These transfers rely on the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework.
Client websites
When we build, host or maintain a client’s website, the data of its visitors and forms belongs to the client’s records. We process it only on the client’s behalf and as far as the work needs, and use it for nothing else. The client’s own privacy policy describes it.
Cookies and statistics
The site uses no tracking or advertising cookies. Visitor statistics are collected with Cloudflare Web Analytics, without cookies. On the contact page, Turnstile uses the information strictly necessary for spam protection.
Retention
Messages are kept as long as the contact or the client relationship requires, at most five years after the last contact.
Accounting records are kept as the Finnish Accounting Act requires: vouchers such as invoices for six years, and the books and financial statements for ten years from the end of the financial year.
Security
The data is kept in services that only Lense’s own accounts and passwords can open. The site and the form use encrypted connections (HTTPS). Form messages go straight to email and are not stored on the site.
Your rights
You have the right to access the data held about you and to ask for it to be corrected or erased, to restrict its processing or to have it moved to another service, and to object to its processing. You can forbid the use of your data for direct marketing at any time. Send your request to rasmus@lense.fi.
You can also complain to the Finnish Data Protection Ombudsman (tietosuoja.fi).
The Fontavio app
The Fontavio app has its own privacy policy at fontavio.com/privacy.
Changes
We update this policy when the way we handle data changes. It was last updated on 18 October 2026.