Privacy policy
Who we are, what we know about you, where we got it and how to make us stop.
Last updated 30 October 2026
Who we are
Labona Studio is the international video studio of Labona Oy, a digital agency in Finland, EU (Business ID 3092118-5). Labona Oy is the controller of the personal data described here.
For anything about your data, including opting out, write to myynti@labona.fi. A person reads it and answers.
Free sample requests
When you request a sample or quote, we receive your name, company, email address, any product-page link and message, and your selected service. We also record your express acceptance of the AI Production Terms and provider-training permission, the accepted version and the time of submission. We use these details to respond, arrange the agreed work, send the sample and follow up once, and evidence the permissions given. We do not add you to a newsletter.
For a business representative's contact details, the legal basis is our legitimate interest in handling business enquiries and administering and evidencing agreements (GDPR Article 6(1)(f)). Where you personally are the contracting party, necessary pre-contractual and contractual processing is based on Article 6(1)(b). Acceptance of the production terms is an agreement about material use, not blanket consent to process personal data for AI training.
If you don't order, we delete the request 12 months after our last contact. If you become a customer, we keep what the customer relationship and Finnish accounting law require, invoices for example for the statutory period.
To stop the form being abused, we keep a scrambled (hashed) version of your IP address for two hours. We can't turn it back into the address, and it is not stored with your request.
AI production and training
We use third-party AI generation and production services and their model providers to process the product images and other assets you approve. Under our standard AI Production Terms, approved inputs and generated outputs may also be used by those providers and their relevant affiliates for model training and improvement. This applies to free samples and paid work unless we expressly agree a different arrangement before processing. Providers, models and access routes can have different settings and rules.
We do not send your enquiry contact details to an AI service as production prompts. Our standard workflow is for product assets without identifiable people or other personal data. Do not include personal data or restricted material in production assets without prior agreement. If a project requires personal data, the lawful basis, roles, notices, processing terms and any international-transfer safeguards must be established separately before it is submitted. A licence to use a photograph does not by itself meet those requirements.
We may change production services within the permissions and restrictions agreed for the project. This does not limit any legally required information about personal-data recipients, processing or international transfers. The 12-month enquiry-retention period above does not describe an AI provider's retention schedule. Provider copies, records and previous training may be subject to different deletion rules. Contact us about deletion; statutory personal-data rights remain available.
Emails we send to businesses
We email a small number of jewelry, watch and beauty brands each day that we think could use our video ads. If you got one of these emails, this is what's behind it.
- Who sends them
- The Labona Studio team, from addresses at labonastudios.com. That domain belongs to us and redirects to this site.
- Where we got your address
- Either from a public source, such as your company's own website, a public business directory or a professional profile, or, when your address isn't published, by working it out from your name and your company's domain (for example first name at the company's domain) and checking with an email-verification service that the address exists. Every email says which of the two applies to you. We only use business addresses, and we only write about business.
- What we keep
- Your name, role, company and business email, public information about your company's products and ads, what we noticed about them, and whether you replied or clicked a link in our email.
- Why we can
- Our legitimate interest in offering our services to businesses (GDPR Article 6(1)(f), and the same article of the UK GDPR for recipients in the UK). We weigh that interest against your rights and expectations, and on request we tell you how we did it. You can object at any time, and we then stop.
- Who we write to in the UK
- Only registered companies: limited companies, public limited companies and limited liability partnerships. We don't send these emails to sole traders or ordinary partnerships, because UK law (PECR) treats them as individuals who must agree first.
- How long
- If you don't reply, we delete your details within 12 months of our last email.
Some emails link to a page we made for your company. These pages are hidden from search engines, only reachable through the link, and deleted within 30 days. If they show your brand, they are a concept sketch that only you get to see, and we never publish them anywhere. When one of these pages is opened from outside Finland, or a film on it is marked as one you like, we get an email saying so, with the time, the browser's time zone and language, and the browser type, but not your IP address. That tells us when to follow up.
How to stop our emails
Reply with "unsubscribe" or "no thanks", or write to myynti@labona.fi. We put your address on our do-not-contact list and never email you again. We keep only the address and the date on that list, because without it we couldn't make sure we don't contact you again.
Visits to this site
We count visits with Umami, which does not use cookies and does not store your IP address. It tells us which pages were viewed, where visitors came from, the type of device and browser, the country, and whether a sample was requested. It doesn't tell us who you are. The legal basis is our legitimate interest in knowing how the site is used.
Our web host keeps standard server logs (IP address, time, page requested) for a short time for security.
Who else handles the data
We use the following services for the purposes described here. Providers may act as processors for us or process certain information for their own purposes under their applicable terms. Where a provider processes personal data on our behalf, a data processing agreement is required. The advertising and recording services below are used only when you have agreed to the relevant cookies.
- Hostinger: web hosting and the sample request form (EU).
- Microsoft and Google: our email.
- Brevo: delivering sample requests from the form, and notices that a personal page was opened, to our inbox (EU).
- Instantly: sending our outreach emails and recording replies and clicks (USA).
- Cloudflare: delivering the videos on this site.
- AI generation and production services and their model providers: approved production assets, as described under AI production and training. The standard workflow does not send enquiry contact details as AI inputs.
- Umami: cookieless visit statistics.
- With your consent: Microsoft Clarity, Meta, Google, TikTok and LinkedIn, as described under Cookies.
When data goes outside the EU, we rely on the EU-US Data Privacy Framework or the EU's standard contractual clauses, depending on the provider. We don't sell personal data.
Your rights
You can ask us what data we have about you and get a copy, have it corrected or deleted, restrict how we use it, and object to its use. Your right to object to marketing is absolute: if you object, we stop. Write to myynti@labona.fi and we answer within a month.
If you think we've handled your data wrongly, you can complain to the Finnish Data Protection Ombudsman (tietosuoja.fi/en) or to the data protection authority where you live or work, such as the Information Commissioner's Office (ICO) in the UK.
If we change this policy, the new version appears on this page with a new date.