This privacy policy describes how Lenny's Kitchen Oy (Business ID: 3322370-2) processes personal data, what data is collected, for what purposes it is used, and to whom it may be disclosed.
Lenny's Kitchen Oy processes personal data in accordance with the EU General Data Protection Regulation (2016/679) and other applicable data protection laws. This privacy policy applies to all services, applications, systems, and channels provided by the company. We continuously develop our operations, and as legislation evolves, we may update this privacy policy when necessary. We recommend reviewing this policy regularly.
We process the following categories of personal data: name, phone number, email address, address details, technical data related to browser and device, communication and interaction logs, and data provided by job applicants.
Personal data is processed only for predefined and justified purposes. We collect data to provide our services, develop our operations, and fulfill legal obligations. Each processing activity is based on at least one lawful basis under GDPR.
Main purposes of processing include:
Marketing and customer communication
Personal data may be used for communication and marketing purposes, including targeted content and advertising through social media and online services. Processing is typically based on legitimate interest. You have the right to opt out of direct marketing at any time.
Compliance with legal obligations
Data is processed to fulfill obligations related to accounting, taxation, and employment legislation.
Human resources management
Employee data is processed for payroll, working hours, contracts, and other employer responsibilities. The legal basis is contract, legal obligation, and in some cases consent.
Recruitment and form submissions
We process data provided by job applicants. Data collected through website forms such as feedback or contact forms is used for the purposes stated in the form.
Personal data is processed based on consent or to fulfill a contract. Providing most personal data is voluntary, especially for job applications and feedback forms. However, employee data is processed as required for contractual and legal obligations. Feedback data is used to improve services.
Personal data is mainly processed by Lenny’s employees within their roles.
We may use external service providers for data processing and storage. Many systems are cloud-based, and most data is stored electronically. We use trusted partners for secure storage, marketing automation, financial management, payroll, website maintenance, analytics, and visitor tracking.
We ensure through agreements that all third parties process data securely, confidentially, and only on our behalf.
Data may also be disclosed to authorities when required by law, court decisions, or official requests. Data may be transferred in connection with business transactions.
Personal data is retained only as long as necessary to fulfill contracts or improve services. Data is protected according to industry standards and treated confidentially. We do not sell or rent personal data.
Data is primarily collected directly from the data subject, from technical logs related to website use, from authorities, and from service providers.
Our website uses localStorage to remember selected restaurant preferences. This does not contain personal data and is not used for tracking or marketing. Data is stored only on the user’s device and can be cleared by the user.
Data is not regularly transferred outside the EU/EEA.
Data is transmitted over SSL-secured connections.
Electronic data is protected by firewalls, usernames, and passwords.
Access is limited to authorized personnel only.
No automated decision-making is carried out.
You have the right to access your personal data, request correction or deletion, restrict processing, or object to processing.
You also have the right to opt out of direct marketing at any time.
Requests must be submitted in writing and signed.
The request must include:
The right of access is free once per year.
You also have the right to file a complaint with the supervisory authority:
Office of the Data Protection Ombudsman
Lintulahdenkuja 4, 00530 Helsinki
Phone: 029 566 6700
Updated 01/02/2026