Data protection at Lehto

At Lehto, we comply with the requirements of the EU General Data Protection Regulation and other legislation concerning data protection. We take legislative requirements into consideration when we process personal data, including ensuring the continuity of a high standard of data protection, making sure that all of the people on our registers receive open and comprehensible information about personal data processing in our company and enabling data subjects to exercise their rights in accordance with the regulation.

According to the regulation, data subjects are entitled to inspect, edit or erase data about themselves and, in certain cases, restrict or object to personal data processing. Data subjects also have the option of withdrawing consent they have previously granted if this formed the legal basis for processing the personal data.

Some of the systems belonging to the data files provide data subjects with the ability to inspect and edit their personal data themselves as described in more detail in the privacy statements. Data subjects may also make requests to exercise their rights by sending an email to tietosuoja [at]

For further information about Lehto’s personal data processing, information security and your rights, consult the relevant privacy statement below. If you cannot find an answer to your question in the privacy statement, feel free to contact us by email at the address stated above.


Cookies and information security

Updated on 18 May 2018

We use cookies on our website, and we want you to know what cookies are and why we use them. We collect and use cookies in accordance with current laws. By using our website, you accept the use of cookies.

Cookies are small text files stored on a user’s computer or other device that allow the user of the browser to be identified. The identity information we collect consists of various kinds of technical data, such as the user’s IP address, browser or websites that link to our website.

Although the information we collect is considered personal data, it cannot be directly linked to you as an individual. Cookies can be temporary, in which case they are removed from your device when you close the browser, or permanent, in which case they remain on your device for a longer, predetermined period of time. Some cookies are essential for the technical functioning of our website. Our website also uses third-party cookies.

We use the information we collect to improve our services and the user-friendliness of our website and, for example, to provide personalised website content.

You can determine the extent to which cookies are used on your computer yourself. By changing website settings, you can prevent your browser from using cookies, remove any existing cookies or ask your browser to notify you of new cookies. Disabling cookies can affect your experience of our website.

Privacy statement on the personnel register

We process data about employees on the personnel register in order to fulfill our obligations as an employer.

The following documents we have only in Finnish
(links for Finnish Privacy Policy pages)

Privacy statement on the customer and marketing register (Lehto Housing)

We process data for the purpose of maintaining our customer relationships on Lehto Housing’s customer and marketing register.

Privacy statement on the customer and marketing register (Lehto Business Premises)

We process data for the purpose of identifying investors, customers and partners on Lehto Business Premises’ marketing register.

Privacy statement on the recruitment register (Lehto Group)

We process data on the recruitment register to manage recruitment processes.