Privacy Policy

1. Data controller

Axiora Labs Oy (Business ID: 3605198-5)
Helsinki, Finland
Email: [email protected]

2. What data we collect

2.1 Customer data (our users)

When you register for the FlowDial service, we collect:

• Name and email address
• Company name and business ID
• Billing details
• Login data and usage logs

2.2 Company data (the content of our service)

The FlowDial database contains public and commercially available information about Finnish companies. This data is sourced from:

• The official Finnish company register and trade register
• Public Finnish tax records
• Companies' own websites and public profiles
• Other public sources
• Technology fingerprinting from companies' public websites

2.3 Website usage data

We collect anonymous analytics data to improve our website (page views, browser type, time on site). We do not use third-party tracking cookies.

3. Purposes of processing

• Service provision: Providing company data through search, filtering, and export functions
• Customer relationship management: Account administration, billing, and customer support
• Service improvement: Usage analytics to improve the quality of the service
• Legal obligations: Compliance with accounting law and other regulations

4. Legal basis

We process personal data on the following legal bases under the EU General Data Protection Regulation (GDPR):

• Contract (Art. 6(1)(b)): Processing of customer data to provide the service
• Legitimate interest (Art. 6(1)(f)): Processing of public company data as a B2B information service. Our legitimate interest has been assessed using a balancing test.
• Legal obligation (Art. 6(1)(c)): Accounting and tax obligations

5. Sharing and transfers of data

We do not sell personal data to third parties. Data may be shared with:

• Service providers: Hosting providers (EU region), payment providers, and email providers that process data on our behalf
• Authorities: Where required by law

Data is not transferred outside the EU/EEA without appropriate safeguards (e.g. EU Standard Contractual Clauses).

6. Retention

• Customer data: For the duration of the customer relationship and for 12 months after it ends
• Billing data: 6 years, in accordance with Finnish accounting law
• Usage logs: 12 months
• Company data: Continuously refreshed and removed when the company ceases to exist

7. Information security

We protect data with appropriate technical and organisational measures. We use TLS encryption in transit, encryption at rest, access controls, and regular security reviews. Servers are located in EU data centres.

8. Your rights as a data subject

Under the GDPR you have the following rights:

• Right of access: The right to know what data we hold about you
• Right to rectification: The right to request correction of inaccurate data
• Right to erasure: The right to request deletion of your data
• Right to restriction: The right to restrict processing
• Right to data portability: The right to receive your data in a machine-readable format
• Right to object: The right to object to processing based on legitimate interest

To exercise your rights, email [email protected]. We will respond to your request within 30 days.

9. Cookies

We use only cookies that are strictly necessary for the operation of the service (session cookies, login). We do not use advertising cookies or third-party tracking cookies. Strictly necessary cookies do not require separate consent.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated within the service and by email. We recommend reviewing this page regularly.

11. Supervisory authority

If you are dissatisfied with the way we process your data, you may lodge a complaint with the Office of the Data Protection Ombudsman:

Office of the Data Protection Ombudsman
Lintulahdenkuja 4, 00530 Helsinki, Finland
tietosuoja.fi

12. Contact

For questions about data protection, please contact:
[email protected]