Privacy Policy

1. Scope

This Privacy Policy explains how we process personal data when you use the Service.

We act as:

• Data Controller for account and billing data
• Data Processor for customer data you upload

2. Data We Collect

Account Data

• Name
• Email address
• Company name
• Login credentials (encrypted)

Usage Data

• Logins
• IP address
• Device/browser info
• Activity logs

Uploaded Data

• Customer contact details
• Booking information
• Invoices and receipts

We do not knowingly collect data from consumers or minors.

3. Legal Basis (GDPR Article 6)

We process data based on:

• Contractual necessity
• Legitimate interest
• Legal obligations

4. Purpose of Processing

• Provide and operate the Service
• Billing and subscription management
• Security and fraud prevention
• Legal compliance

5. Data Storage & Transfers

• Data is stored in the EU
• Sub-processors may include: Hosting providers, Email services, Payment processors

If data is transferred outside the EU, appropriate safeguards are applied.

6. Data Retention

• Account data: retained while account is active
• Billing data: retained as required by law
• User Content: deleted upon request or account termination (subject to legal retention)

7. Your Rights

Under GDPR, you have the right to:

• Access
• Rectification
• Erasure
• Restriction
• Data portability
• Objection

Requests can be sent to: sales@2ds.fi

8. Security Measures

We implement:

• Encryption
• Access controls
• Role-based permissions
• Audit logs

However, no system is 100% secure.

9. Supervisory Authority

You may lodge a complaint with the Finnish Data Protection Ombudsman.