Updated 1 October 2026.
1. Data controller
Limetti Catering Oy
Business ID: 3154572-4
Ruosilantie 16 G, 00390 Helsinki, Finland
myynti@limetticatering.fi
+358 10 2866 04
2. Purpose and legal basis
We use information you provide to respond to enquiries, prepare offers and deliver agreed services. Processing is necessary for steps you request before entering a contract and for performing a contract. Our legitimate interest in managing customer communications and protecting the website also applies. Sending an enquiry does not subscribe you to marketing.
3. Information and sources
We receive your name, email address, optional phone number and event details directly from you. We also store the submission time, form language and your acknowledgement of this notice. A hash of your IP address is used to limit abusive submissions. Technical request information may be processed by our hosting provider for operation and security.
4. Access and service providers
For authorised administrators, we also store account details, a password hash, session information and hashed password-reset tokens. Reset links expire after 30 minutes and can be used once. Hashed request identifiers help prevent abusive recovery requests.
Enquiries are accessible to authorised staff through the protected administration area. Vercel provides website hosting and image storage, and Neon provides database hosting. When enquiry email alerts are enabled, Resend delivers an alert containing an administration link, without the customer’s event details. Information is not published or sold.
Service providers may process information outside the EU/EEA. Such transfers require an applicable adequacy decision or appropriate safeguards, such as the European Commission’s standard contractual clauses. Contact us for information about the safeguards applicable to your data.
5. Retention and protection
We retain enquiries only as long as needed to handle the enquiry, the resulting customer relationship and applicable legal obligations. Information that is no longer needed is removed. Access is restricted to authorised staff and connections are encrypted.
6. Cookies
The administration area uses necessary cookies for sign-in and language preference. The public website does not currently use advertising or analytics cookies.
Your dismissal of the cookie notice is remembered in your browser’s local storage for one year. This information stays in your browser and is not used for tracking. You can reopen the notice using Cookie information in the footer.
7. Your rights
You may request access, correction, deletion, restriction of processing or, where applicable, data portability. You may object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. Some rights depend on the legal basis and statutory obligations.
Send requests to myynti@limetticatering.fi. You may also lodge a complaint with the Office of the Data Protection Ombudsman.