Lumise Oy Privacy Policy
Protecting your privacy is very important to Lumise Oy (“Lumise”). We are committed to keeping your personal data secure and processing it transparently, carefully and in accordance with applicable data protection legislation.
This Privacy Policy explains how we process personal data in our online store, customer service, marketing activities and on our website. Personal data means any information from which a person can be identified directly or indirectly.
This Privacy Policy includes the following information:
As the data controller, Lumise Oy collects and processes personal data in accordance with this Privacy Policy and applicable legislation, including the EU General Data Protection Regulation (GDPR) and applicable UK data protection legislation.
We only collect and process personal data where we have a lawful basis to do so. Personal data is used, for example, for processing orders, customer service, developing our online store, marketing activities and fulfilling legal obligations.
The data controller is:
Lumise Oy
Teollisuustie 17
96320 Rovaniemi
Finland
Business ID: 2548487-3
Email: info@lumise.fi
Lumise uses several service providers and data processors for the processing of personal data, including:
When making payments, customers are transferred to the services of our payment service provider (Adyen N.V.). The payment service provider acts as an independent data controller with regard to payment information. Lumise does not process or store customers’ payment card details.
Customer and order information
Processed data may include name, email address, phone number, shipping address, billing address, order contents, payment method details and other information necessary for processing orders.
Legal basis: performance of a contract (GDPR Article 6(1)(b)) and compliance with legal obligations (GDPR Article 6(1)(c)).
Purpose of processing: order processing, deliveries, invoicing, returns, complaints and customer service.
Customer service communications and inquiries
Processed data may include customer messages, order numbers, contact details, call information, chat conversations and other customer service related information.
Legal basis: performance of a contract (GDPR Article 6(1)(b)) and legitimate interest (GDPR Article 6(1)(f)).
Purpose of processing: customer support, communication, complaint handling and service quality improvement.
Vehicle information and registration numbers
Customers may provide us with vehicle-related information such as registration numbers, make, model or other information required for evaluating product compatibility.
Legal basis: performance of a contract (GDPR Article 6(1)(b)) and legitimate interest (GDPR Article 6(1)(f)).
Purpose of processing: recommending suitable products, verifying compatibility, installation-related guidance and customer service.
Marketing information
Processed data may include email address, phone number, marketing permissions, newsletter subscriptions, campaign participation and information related to opening and clicking marketing communications.
Legal basis: consent (GDPR Article 6(1)(a)) or legitimate interest (GDPR Article 6(1)(f)) in accordance with applicable legislation.
Purpose of processing: newsletters, offers, customer communications, SMS marketing and targeted marketing.
Product reviews and customer feedback
Processed data may include name, email address, purchased product, review content, feedback and review timestamps.
Legal basis: legitimate interest (GDPR Article 6(1)(f)) or consent (GDPR Article 6(1)(a)).
Purpose of processing: collecting and publishing product reviews and improving our services.
Analytics and event data
Processed data may include website usage data, event information, device and browser information, cookie identifiers, IP address and online store interaction data.
Legal basis: consent or legitimate interest in accordance with applicable legislation.
Purpose of processing: development of the website and online store, analytics, measuring and targeting marketing activities.
Personal data is retained only for as long as necessary for the purposes for which it was collected or to comply with legal obligations. For example, accounting-related data is retained for the period required by accounting legislation.
Personal data is primarily processed within the EU and EEA. In certain situations, personal data may be transferred outside the EU or EEA, for example due to the operation of our service providers.
Any transfers outside the EU or EEA are carried out using safeguards in accordance with GDPR and applicable UK data protection legislation, such as the European Commission’s Standard Contractual Clauses or other appropriate safeguards.
Under applicable data protection legislation, you have the right to:
You may exercise your rights by contacting us at info@lumise.fi.
Finnish Data Protection Ombudsman: https://tietosuoja.fi/en/home
If you are located in the United Kingdom, you may also lodge a complaint with the UK Information Commissioner’s Office (ICO): https://ico.org.uk/
Lumise reserves the right to modify this Privacy Policy. Changes may be based on changes in legislation, our services, systems or personal data processing practices.
The latest version of this Privacy Policy is always available on our website.
Lumise uses cookies and similar technologies to enable website functionality, improve user experience, perform analytics and measure and target marketing activities.
We may use tools and services provided by Google Analytics, Google Tag Manager, Custobar, Meta platforms and other analytics and marketing technology providers.
You can manage cookie settings using the cookie management tool available on our website.
Updated 13 May 2026
Trusted payment and delivery partners
