Lightning Accounting Oy

Privacy notice

Updated September 29, 2026

Controller and contact details

Lightning Accounting Oy (trading as Lightning Accounting & Consulting), Finnish Business ID 2947290-9, is the controller. Contact: Janne Grönroos, janne.gronroos@lightningaccounting.fi, +358 50 575 9275. This notice covers use of this website and inquiries originating from it. Responsibilities for personal data in client assignments are addressed separately where necessary.

Information we process

When you contact us by email or phone, we process the information you provide, such as your name, company, role, contact details, message, and attachments. Information comes primarily from you or a contact at your company. Technical delivery of the website may involve processing IP addresses, browser and device information, requested pages, access times, and error or security logs. Please do not include unnecessary personal identity numbers, health information, or other sensitive material in your initial inquiry.

Purposes and legal grounds

We use inquiry information to answer questions, assess a potential assignment, prepare proposals, and communicate with you. Processing business contact information is based on our legitimate interest in handling business inquiries and relationships. Where you are personally a party to a contract, processing may be necessary to take steps at your request before entering a contract or to perform that contract. Processing required by law is based on the relevant legal obligation. Technical information supports website delivery, reliability, and security. Providing inquiry information is voluntary, but without sufficient contact details we may be unable to respond or prepare an assignment.

Service providers and international transfers

Hosting, network, email, and other IT service providers may process information as required for their tasks. Information may be disclosed to authorities when required by law. We do not sell inquiry information. This website is delivered through OpenAI Sites. The platform provider's privacy information also applies to its own account services and any sign-in process. International providers may process information outside the EU or EEA. Such transfers must have an applicable GDPR safeguard, such as an adequacy decision or standard contractual clauses with additional safeguards where needed. Contact us for further information about processors and applicable transfer safeguards.

Retention and security

Inquiry information is retained for as long as needed to handle the matter and any resulting customer relationship. Retention depends on the purpose of the inquiry, whether the matter remains open, contractual duties, legal retention requirements, and the handling of potential legal claims. Information that is no longer needed is deleted or anonymized. Technical log retention depends on the provider's practices and security requirements. Access to personal information is limited to what is needed for the relevant tasks, with appropriate technical and organizational safeguards.

Cookies and website technology

The website's own implementation has no analytics or advertising trackers, contact form, cookies, or persistent browser storage. Images and fonts are served from the website's own files. The carousel does not retain your selections between visits. Hosting and any sign-in service may use their own technical identifiers. Email and phone links open an application on your device; clicking a link does not itself send a message. External websites have their own privacy practices.

Your rights

You may request access, correction, deletion, restriction of processing, and, where applicable, portability of your information. You may object to processing based on legitimate interests on grounds relating to your particular situation. Where processing relies on consent, you may withdraw that consent without affecting the lawfulness of earlier processing. The availability of individual rights depends on the legal basis and applicable legal restrictions. Send requests to the contact listed above; we may need to verify your identity. You may lodge a complaint with Finland's Data Protection Ombudsman or another competent supervisory authority. The website's own implementation does not profile you or make automated decisions about you.

Changes to this notice

We update this notice when the website or relevant processing practices change. The current version is available on this page.