Privacy Policy

Last updated: January 26, 2025

1. Data Controller

The data controller responsible for your personal data is:

Sijoitusyhtiö Reis Oy

Business ID: 2283166-5

VAT: FI22831665

Email: [email protected]

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Email address
  • Name (if provided)
  • Password (stored in hashed form)

2.2 Payment Information

When you subscribe to a paid plan, payment processing is handled by Stripe. We store:

  • Stripe customer ID
  • Subscription status and plan details
  • Billing history (invoice references)

We do not store your complete credit card number. All payment data is processed and stored securely by Stripe in accordance with PCI DSS standards.

2.3 Service Usage Data

We collect data about how you use our Service:

  • Domains you add and configure
  • Banner configurations and settings
  • Cookie scan results
  • Consent logs from your website visitors
  • Analytics data (consent rates, visitor statistics)

2.4 Technical Data

We automatically collect certain technical information:

  • IP address
  • Browser type and version
  • Device information
  • Access timestamps

3. How We Use Your Information

We use the collected information to:

  • Provide and maintain our Service
  • Process your payments and manage subscriptions
  • Send you service-related communications
  • Provide customer support
  • Analyze and improve our Service
  • Detect and prevent fraud or abuse
  • Comply with legal obligations

4. Legal Basis for Processing

Under GDPR, we process your personal data based on:

  • Contract: Processing necessary to provide our Service to you
  • Legitimate interests: Improving our Service, preventing fraud
  • Legal obligation: Compliance with applicable laws
  • Consent: Where you have given explicit consent

5. Third-Party Services

We use the following third-party services that may process your data:

Stripe (Payment Processing)

Stripe processes payments on our behalf. Their privacy policy is available at stripe.com/privacy

6. Cookies

Our Service uses cookies and similar technologies to:

  • Maintain your logged-in session
  • Remember your preferences
  • Analyze how you use our Service

You can control cookies through your browser settings. Disabling essential cookies may affect your ability to use certain features of our Service.

7. Data Retention

We retain your personal data for as long as:

  • Your account is active
  • Required to provide you with our Service
  • Necessary to comply with our legal obligations
  • Required to resolve disputes or enforce agreements

Consent logs from your website visitors are stored for up to 5 years to comply with GDPR audit requirements.

8. Your Rights (GDPR)

Under GDPR, you have the following rights regarding your personal data:

  • Right to access: Request a copy of your personal data
  • Right to rectification: Request correction of inaccurate data
  • Right to erasure: Request deletion of your data ("right to be forgotten")
  • Right to restrict processing: Request limitation of processing
  • Right to data portability: Receive your data in a machine-readable format
  • Right to object: Object to processing based on legitimate interests
  • Right to withdraw consent: Withdraw consent at any time

To exercise these rights, contact us at [email protected]. We will respond to your request within 30 days.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • Encryption of data in transit (HTTPS/TLS)
  • Secure password hashing
  • Regular security assessments
  • Access controls and authentication

10. International Transfers

Your data may be processed in countries outside the European Economic Area (EEA). When this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through our Service. The "Last updated" date at the top of this policy indicates when it was last revised.

12. Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with a supervisory authority. In Finland, the supervisory authority is:

Office of the Data Protection Ombudsman

Tietosuojavaltuutetun toimisto

Website: tietosuoja.fi

13. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Sijoitusyhtiö Reis Oy

Business ID: 2283166-5

VAT: FI22831665

Email: [email protected]