Privacy Policy

Privacy Policy

Last updated: July 7, 2025
Last modified: 7.7.2025

This privacy policy applies to Luota Agency Oy's website www.luota-agency.fi.

1. Data Controller

Luota Agency Oy
Business ID: 3514204-1
Email: hello@luota-agency.fi
Registered office: Tampere, Finland

2. What data we collect

We only collect necessary personal data for the following purposes:

  • Contact form: name, email address, and optional message

  • Cookies: anonymized data about website usage (e.g., Google Analytics)


3. Purpose of data processing

  • Processing inquiries and customer communication

  • Improving website functionality and user experience


4. Data retention period

We retain personal data only as long as necessary:

  • Contact information: maximum 12 months

  • Cookie data: according to cookie type


5. Data disclosure

We do not disclose personal data to third parties without your consent, unless required by law. We use trusted service providers (e.g., web hosting, analytics) that process data within the EU.

6. Data subject rights

You have the right to:

  • Access your personal data

  • Request correction or deletion of data

  • Object to data processing or request restriction

  • Withdraw consent (e.g., marketing communications)

  • File a complaint with the supervisory authority (Data Protection Ombudsman)

7. Contact

All privacy-related requests and questions can be sent by email to hello@luota-agency.fi

8. Luota AI

The Luota AI system does not operate under www.luota-agency.fi. Luota AI analyzes publicly available data related to influencer marketing and does not process, store, or retain personal data in a way that would constitute a register of personal data as defined by GDPR.

Since the software does not collect or retain personal data, the data subject rights under GDPR, such as the right to access or delete data, are not applicable to Luota AI's operations.

If we process data provided by our clients, we ensure that the processing complies with GDPR requirements and that our clients have the necessary rights to use the data. We always act in accordance with the role of either data controller or data processor within the framework of applicable legislation and contractual obligations.