PRIVACY POLICY

Last updated: 16.11.2024

Infodata Processing Oy (“Infodata,” “we,” “us”) is committed to protecting personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This privacy policy describes how we process personal data in our services.

1. Data Controller and Contact Information

Data Controller:
Infodata Processing Oy
Business ID: 2540007-8
Kilonkallio 3, 02610 Espoo, Finland

Data Protection Officer:
Anton Khreliats
Phone: 040 505 4966
E-mail: anton@infodata.fi

2. Purposes of Processing Personal Data

We process personal data for the following purposes:

• Customer relationship management and customer support
• Providing and maintaining services
• Processing payments and billing
• Improving service functionality and ensuring security
• Fulfilling legal obligations
3. Collected Data and Retention Period

The types of personal data we collect and how long they are retained depend on the service being used. We only store the personal data necessary for providing and maintaining our services.

The processed data may include:

• Contact details (e.g., name, email, phone number)
• Payment transaction details
• Customer relationship and service usage data
• Data required for legal compliance

Personal data is retained only as long as:

• It is necessary for customer relationship management.
• It is required to comply with legal obligations.
• It is needed to ensure the functionality and security of services.

When the data is no longer needed, it will be securely deleted or anonymized.

4. Payment Processing

Payment transactions are processed by our payment service providers. Infodata does not store card payment details.
Our payment service providers:

• Payment terminals: Infodata together with Nets Denmark A/S, Finnish branch.
• Online store and mobile application: Payment Highway (Checkout Finland, part of Nexi Group).

Infodata processes payment transactions in compliance with the PCI DSS standard to ensure payment security.

5. Disclosure of Personal Data

Personal data may only be disclosed to the following parties:

• Payment service providers (for processing transactions)
• Payment terminal owners who use Infodata’s payment automation solutions
• Regulatory authorities, where required by law

Personal data will not be transferred outside the EU/EEA without appropriate safeguards.

6. Data Security

Infodata applies appropriate technical and organizational measures to protect personal data, including:

• Encrypted data transmission and pseudonymization
• Access control and employee training
• Regular security audits and policy reviews
7. Data Subject Rights

Under GDPR, data subjects have the following rights:

• Right to rectification: Incorrect or incomplete data can be corrected.
• Right to erasure: Personal data can be deleted unless retention is required by law.
• Right to restrict or object to processing: Data processing may be limited in certain situations.
• Right to lodge a complaint: If personal data is processed unlawfully, data subjects may file a complaint with the data protection authority.

For any inquiries related to data protection, please contact the Data Protection Officer (see section 1 for contact details).

8. Cookies and Web Tracking

Infodata uses cookies and tracking technologies to improve services and enhance user experience. Cookies may collect information such as:

• Pages visited on the website
• Session duration
• User preferences

Users can manage cookie settings in their browser. Disabling cookies may affect service functionality.

9. Changes to This Privacy Policy

Infodata Processing Oy may update this privacy policy as necessary. The latest version is always available at infodata.fi/privacypolicy.html .