Last updated: January 2026
This Privacy Policy describes how Greenlux Lighting Solutions Oy (“Greenlux”, “we”, “us”, or “our”), the parent company and legal entity behind the Valoya® brand, collects, uses, discloses, and protects personal data.
This policy applies to the following websites and platforms: – www.valoya.com (the “Website”) – www.radiation.valoya.com (the “Light Planning Tool” or “LPT”) – www.lightdna.valoya.com (the “LightDNA Platform”)
Collectively referred to as the “Services”.
Greenlux Lighting Solutions Oy is committed to complying with the EU General Data Protection Regulation (GDPR) (EU) 2016/679 and applicable national data protection legislation. We do not sell personal data.
1. Data Controller
Greenlux Lighting Solutions Oy
Business ID: FI21111877
Registered address: Mekaanikonkatu 1,
00880 Helsinki, Finland
Email: marketing@greenlux.com
For matters related to sales or customer relationships, you may also contact: sales@greenlux.com
2. Personal Data We Collect
2.1 Data You Provide Voluntarily
We may collect the following categories of personal data when you contact us, use our Services, or create an account:
– Name
– Company name and role
– Email address
– Phone number
– Postal and delivery address
– Login credentials (for LPT and LightDNA)
– Any other information you choose to provide via forms, email, or other communications
2.2 Automatically Collected Data
When you use our Website, we may automatically collect:
– IP address
– Browser and device information
– Pages visited, time spent, and interaction data
– Referring URLs
This data is collected via cookies and similar technologies (see Section 10).
3. Purposes and Legal Bases for Processing
We process personal data only when we have a lawful basis under GDPR. The purposes and corresponding legal bases include:
– Performance of a contract (Article 6(1)(b))
To deliver products and services, manage accounts, provide access to LPT and LightDNA, process orders, and provide customer support.
– Legitimate interests (Article 6(1)(f))
To manage customer and partner relationships, improve our Services, conduct business analytics, ensure IT security, and develop our products and services.
– Consent (Article 6(1)(a))
For marketing communications, newsletters, webinars, surveys, and non-essential cookies.
– Legal obligation (Article 6(1)(c))
To comply with accounting, tax, and other mandatory legal requirements.
4. Marketing Communications
You will receive marketing communications from us only if:
– You have explicitly consented, or
– You are an existing customer or reseller and the communication relates to similar products or services, where permitted by law.
Every marketing email includes a clear unsubscribe option. You may withdraw your consent at any time, after which your contact details will be removed from marketing systems.
5. Surveys
We may invite customers, resellers, or partners to participate in surveys for service and product improvement. Surveys are typically anonymous. Where personal data is collected, it will be clearly stated and processed based on consent or legitimate interest.
Survey data may be processed using third-party platforms such as SurveyMonkey, Mailchimp, or CRM systems.
6. Data Recipients and Transfers
We may share personal data with trusted third parties that support our business operations, including:
– Marketing and newsletter platforms (e.g. Mailchimp)
– Website analytics tools (e.g. Google Analytics, Hotjar)
– Website and hosting providers (e.g. WordPress)
– Cloud and IT infrastructure providers (e.g. Microsoft Azure)
– ERP and accounting systems (e.g. Visma)
– Logistics and shipping partners
– Local distributors, where necessary to fulfil contracts and provide local support
Some of these service providers may process data outside the EU/EEA. In such cases, we ensure appropriate safeguards, such as EU Standard Contractual Clauses (SCCs) or equivalent legal mechanisms, are in place.
7. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected:
– Customer and partner data: for the duration of the relationship and thereafter as required by law (e.g. accounting obligations)
– Marketing data: until consent is withdrawn
– Recruitment data: see Section 11
– Technical and analytics data: retained in aggregated or anonymised form where possible
You may request deletion of your personal data at any time, subject to legal retention requirements.
8. Your Rights Under GDPR
You have the right to:
– Access your personal data
– Rectify inaccurate or incomplete data
– Request erasure (“right to be forgotten”)
– Restrict processing
– Object to processing based on legitimate interests
– Withdraw consent at any time
– Data portability (where applicable)
– Lodge a complaint with a supervisory authority
Requests can be submitted to marketing@greenlux.com. We will respond within one month, as required by GDPR.
If you believe your data protection rights have been violated, you also have the right to lodge a complaint with your local data protection authority.
9. Data Security
We implement appropriate technical and organisational measures to protect personal data, including:
– Encrypted data transmission (HTTPS / SSL)
– Access controls and user authentication
– Firewalls and antivirus protection
– Restricted access to personal data on a need-to-know basis
Despite these measures, no method of transmission or storage is completely secure.
10. Cookies and Tracking Technologies
We use cookies and similar technologies to:
– Ensure website functionality
– Analyse website usage
– Improve user experience
Non-essential cookies are used only with your consent via our cookie banner. You may manage or withdraw cookie consent at any time through your browser settings or our cookie management tool.
Cookies may be session-based or persistent, with retention periods varying depending on the cookie type.
11. Recruitment
Personal data provided during recruitment is processed for:
– Assessing applications
– Managing the recruitment process
Data may include CVs, application letters, references, and information obtained from recruiters. We may view publicly available professional profiles (e.g. LinkedIn) but do not systematically store such data.
If no employment relationship is established:
– Applications are deleted immediately, or
– If interviews took place, data may be retained for up to six (6) months for potential future opportunities, unless you request earlier deletion.
12. Light Planning Tool and LightDNA Platform
Access to LPT and LightDNA is limited to authorised users (employees, subcontractors, resellers, customers).
Personal data is required to create and maintain user accounts. If access is terminated, personal account data is deleted. Technical reports and system-generated data may be retained for business, legal, and analytical purposes, similar to accounting records. Such data is not used to identify former users.
13. External Links
Our Services may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites and encourage users to review their privacy policies.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect legal, technical, or business developments. The latest version will always be available on our Website, with the date of last update clearly indicated.
15. Contact
For questions about this Privacy Policy or our data protection practices, please contact:
Greenlux Lighting Solutions Oy
Email: marketing@greenlux.com
