Last updated: 26 October 2026
1. Introduction
At Kumorion, we respect your privacy and are committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store and protect personal data when you visit our website, contact us, enquire about our technologies and services, or interact with us in a business context.
Kumorion is a brand operated by Lekane Consulting and Services Oy, a company registered in Finland.
We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Finnish data protection legislation.
2. Data Controller
Lekane Consulting and Services Oy (Kumorion)
Business ID: 3256455-6
Registered in Finland
Address: Tuulikuja 2, 02100 Espoo, Finland
Website: https://kumorion.com
Privacy enquiries: marko.virtanen@kumorion.com
3. Personal Data We Collect
Depending on how you interact with us, we may process the following categories of personal data:
Contact and business information
- Name
- Email address
- Telephone number
- Company and job title
- Information submitted through contact forms
- Business enquiries and correspondence
Website usage information
Where analytics consent has been given, we may collect:
- Pages visited and interactions with the website
- Approximate geographical location
- Browser, device and operating system information
- Traffic sources and referral information
- Cookie identifiers and other online identifiers, where applicable
Customer and business relationship information
- Business contact details
- Enquiries, meetings and communication history
- Information relevant to existing or potential customer relationships
We collect personal data directly from you, through your interactions with our website and, where applicable, through legitimate business communications.
4. Purposes and Legal Bases for Processing
We process personal data for the following purposes:
Responding to enquiries
To respond to contact requests, provide information about Kumorion and communicate with prospective customers and partners.
Legal basis: Legitimate interests or steps taken before entering into a contract, depending on the circumstances.
Managing customer and business relationships
To maintain customer and partner relationships, manage business communications and support sales activities.
Legal basis: Legitimate interests or performance of a contract, as applicable.
Website analytics
To understand website usage, measure website performance and improve the user experience.
Legal basis: Consent for non-essential analytics cookies and associated processing.
Marketing communications
To provide relevant information about Kumorion's technologies, services and activities, where permitted by applicable law.
Legal basis: Consent or legitimate interests, depending on the communication and applicable marketing rules.
Legal obligations
To comply with applicable legal and regulatory requirements.
Legal basis: Compliance with a legal obligation.
5. Google Analytics 4
We use Google Analytics 4 (GA4) to understand how visitors use our website and to improve its content, functionality and performance.
Google Analytics may collect information such as:
- Pages visited
- Time and duration of visits
- Device and browser information
- Approximate geographical location
- Website interactions
- Traffic sources
Google Analytics uses cookies and similar technologies where applicable.
Google Analytics is activated only after the visitor has given consent to analytics cookies.
We use Google Consent Mode v2 with a privacy-first Basic Consent Mode implementation.
This means:
- Analytics cookies are disabled by default.
- Google Analytics tracking does not start before consent.
- Visitors can accept or reject optional analytics cookies.
- Rejecting optional cookies does not prevent access to the website.
- Visitors can change or withdraw their consent at any time through Cookie Settings.
When analytics consent is withdrawn, further analytics tracking is stopped.
Google's processing of personal data is subject to its applicable privacy terms and data protection arrangements.
More information:
https://policies.google.com/privacy
6. HubSpot CRM
We use HubSpot CRM to manage business contacts, customer relationships, sales enquiries and related communications.
Personal data processed in HubSpot may include:
- Name and business contact information
- Company and job title
- Enquiries and correspondence
- Meeting and communication history
- Information relevant to customer or prospective customer relationships
We use this information to respond to enquiries, maintain business relationships and provide relevant information about our technologies and services.
HubSpot is used as a customer relationship management (CRM) system only.
We do not use HubSpot website tracking, marketing cookies or website visitor profiling.
HubSpot CRM data processing is separate from website analytics and cookie consent.
HubSpot acts as a service provider in accordance with the applicable contractual and data protection arrangements.
More information:
https://legal.hubspot.com/privacy-policy
7. Cookies and Similar Technologies
Our website uses cookies and similar technologies to support essential website functionality and, with the visitor's consent, to understand website usage.
We distinguish between two categories:
Essential Cookies
Essential cookies and similar storage technologies are used only where strictly necessary for the website to function properly, including remembering visitors' cookie preferences.
These do not require separate consent when they are strictly necessary for the requested functionality.
Analytics Cookies
Analytics cookies are optional and are used for Google Analytics 4.
They help us understand how visitors use our website so we can improve its content, functionality and performance.
Analytics cookies are disabled by default and are activated only after the visitor has given explicit consent.
Managing Cookie Preferences
When visitors first access the website, they can choose to:
- Accept all cookies
- Reject optional cookies
- Manage their cookie preferences
Visitors can change or withdraw their consent at any time through the Cookie Settings link in the website footer.
Rejecting optional analytics cookies does not affect access to the website or its essential functionality.
8. Sharing Personal Data
We may share personal data with trusted service providers where necessary for the purposes described in this Privacy Policy.
These may include:
- Website hosting and technical service providers
- Google Analytics, where analytics consent has been given
- HubSpot CRM
- Other service providers supporting our business operations
We require appropriate contractual and technical safeguards when personal data is processed on our behalf.
We do not sell personal data.
9. International Data Transfers
Some of our service providers may process personal data outside the European Economic Area (EEA).
Where personal data is transferred outside the EEA, we apply appropriate safeguards required under applicable data protection legislation.
Depending on the transfer, these may include European Commission adequacy decisions, Standard Contractual Clauses or other legally recognized transfer mechanisms.
10. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law.
Retention periods depend on the nature of the information and the relevant processing purpose.
When personal data is no longer required, it is deleted or anonymized in accordance with our applicable retention practices.
11. Data Security
We take appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, loss and misuse.
Access to personal data is limited to authorized personnel and service providers who require it for legitimate business purposes.
12. Your Rights
Under the GDPR, you may have the right to:
- Access your personal data
- Request correction of inaccurate information
- Request deletion of your personal data
- Request restriction of processing
- Object to processing based on legitimate interests
- Request data portability where applicable
- Withdraw consent at any time where processing is based on consent
You may exercise your rights by contacting us at:
marko.virtanen@kumorion.com
You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman or another competent supervisory authority.
Finnish Data Protection Ombudsman:
13. Changes to This Privacy Policy
We may update this Privacy Policy when our services, technologies, data processing practices or applicable legal requirements change.
The latest version will always be available on our website.
14. Contact Us
If you have any questions about this Privacy Policy or how we process personal data, please contact:
Lekane Consulting and Services Oy / Kumorion
Business ID: 3256455-6
Tuulikuja 2, 02100 Espoo, Finland
Email: marko.virtanen@kumorion.com
Website: https://kumorion.com/contact