Privacybeleid

1. What personal data we process and where we collect it from?

We may collect your personal data whenever you interact with us or our Sites or when you use our Services. The personal data we process is collected directly from you, the data subject. We enter the data into the Register as we receive it from you and update it according to the information provided by you to us.

The personal data we collect from you may include the following data:

• Contact and other general information: when you visit our Sites or use our Services, we collect your personal data, primarily your name and email address in order to provide the Service for you. In some cases, where it is necessary to provide our Services to you, we may also collect your telephone number, postal address and date of birth.
• Information shared in customer relationship: to provide the subscribed Services to you, we collect accounting and financial data such as information related to accounts, salaries, vendors, employees and cost of data. We also collect information you share with us in customer meetings or otherwise in communication relating to the subscribed Services.
• Billing and payment information: we collect your credit card or payment method information and information of your orders with respect to our Services.
• Company information: If you act on behalf of a company, we may collect contact information of the company such as a company address and your name and position in the company.
• Customer feedback and other contact requests: when you interact with us by providing customer feedback or requesting us to contact you by any means, we will process information that you provide us with. If your request is made in connection with a particular transaction, we may ask you to provide information about your credit card, or other payment method (if applicable) to respond to your request. When you make an inquiry on our Sites, we use that information to contact you so that we may respond to your inquiry.
• Customer order history information: when you place orders with respect to our Services, we process information related to invoicing and debt collection.
• Information related to your marketing preferences: we process information such as data related to your preferences to be contacted by us and your possible consent or prohibition to receive any direct marketing material from us.

2. Cookies

When you visit our Sites, we may also collect personal data from you automatically using cookies or similar technologies. We may automatically collect information such as information on your device (e.g. device type, IP address, operating system) and your usage information (e.g. the time and date you visited our Sites, the parts in our Sites you visited, the content you viewed, the website that referred you to our Site) when you access our Sites. We use cookies to improve your user experience when visiting our Sites and to target relevant content to the visitors of our Sites. You can learn more about the cookies we use in our Cookie Policy.

3. What is the purpose and legal basis for the processing of your personal data?

We process your personal data only for the purposes described in this Privacy Policy. Our such purposes, of which one or more may apply depending on the case at hand, are:

• To provide you with the Services you have requested: we process your personal data primarily to offer you the opportunity to use our Services and to deliver your order. We process your personal data to send you questionnaires to measure your satisfaction with our Services. We also process your personal data for the purposes of managing the contractual relationship between us. The legal basis for processing your personal data is the fulfilment of an agreement between you and us.
• To maintain and develop our Sites and Services: we process your personal data to continuously develop our Sites and Services to maintain our customer relationships and ensure the high-quality of your customer experience by e.g. presenting content in the most efficient and effective manner. The legal basis for processing your personal data is our legitimate interests.
• To communicate with you regarding your requests and feedback: in the event you make an inquiry, we will use the provided information to answer your questions or solve possible issues. We also process your personal data to manage and reply to your feedback. The legal basis for processing your personal data is our legitimate interests.
• For direct marketing: we process your personal data for marketing and advertising our products and Services. We want to let you know about our new Services, products, special offers, employment opportunities and any updates on our Services by for example sending you direct marketing messages. The legal basis for processing your personal data is your consent. To be allowed to send electronic direct marketing (e.g. utilizing email or text messages), your consent of the electronic direct marketing is collected (opt-in) where required by applicable laws. Such consent request may take place in certain parts of our Services. You may withdraw your consent (opt-out) at any time by contacting us.
• To fulfil our legal obligations: we process your personal data to fulfil our reporting, accounting and other legal obligations towards authorities. The legal basis for processing your personal data is to comply with our legal obligations.
• For potential claims handling and legal processes: we may process your personal data in relation to claims handling, debt collection and legal processes. We may also process your personal data for the prevention of misuse of our Services and for data, system and network security. In these situations, the legal basis for processing your personal data is our legitimate interests.

When choosing to process your personal data on the basis of our legitimate interests, we weigh our own interests against your right to privacy. We also use pseudonymized or non-personally identifiable data when possible.

4. Are your personal data disclosed or transferred to third parties?

We only share your personal data within our organization, if and as far as reasonably necessary, in accordance with this Privacy Policy and applicable laws. We will not disclose your personal data with third parties outside of our organization unless we are required to do so under applicable laws.

We primarily process personal data on servers located in the EU/EEA. However, in case we need to transfer your personal data outside the EU/EEA, we take necessary steps to implement appropriate technical and organizational measures under the GDPR to ensure that your personal data remains always secure. Such transfers outside EU/EEA can be made on the basis of an adequacy decision or with appropriate safeguards in accordance with GDPR. We will provide you with further information about such international transfers upon your request.

5. What are the principles of data security?

We will only process your personal data for the purposes of this Privacy Policy as set out above. Processing of your personal data in a secure way is important to us and we have implemented appropriate technical and organizational measures to keep your personal data secure. We maintain a report of the personal data on a separate, limited-access server and access to such personal data is limited to only those employees for whom they are necessary to perform their work. Viewing of personal data requires an individual, protected user ID and password. We will keep your personal data confidential and not disclose it to any other entities than those set out in this Privacy Policy unless you clearly authorize us to do so or such an authorization results from applicable laws.

6. For how long we store your personal data?

We store your personal data only for as long as and in the extent that it is necessary for the purposes for which the personal data was collected as set out in the Section 3 of this Privacy Policy unless a longer retention period is required or permitted by the applicable laws, such as Accounting Act (1336/1997).

We review and evaluate the need for retaining the personal data in the Register regularly, at least once every two (2) years, and delete or anonymize personal data that is no longer needed in the Register.

If the collection and use of personal data is based solely on your consent, the personal data will be deleted at your request.

7. What are your rights as the data subject?

You may at any time exercise your legal rights as a data subject in relation to your personal data that we process. Your rights include the following:

• Right to access and rectification (Article 15 & Article 16 of the GDPR): You have the right to request access to your personal data we process. This includes e.g. the right to be informed whether or not we process personal data relating to you, what personal data is being processed and the purpose for the processing. You also have the right to request inaccurate or incomplete personal data about you to be corrected.
• Right to object and withdraw your consent (Article 21 of the GDPR): You have the right to object to certain processing of your personal data including e.g. processing of your personal data for direct marketing purposes or when we otherwise base our processing of your personal data on a legitimate interest of ours or a third party. In cases where the processing is based on your consent, e.g. for direct marketing purposes, you have the right to withdraw your consent to such processing at any time. After such withdraw, we will no longer use your personal data for marketing purposes. When you request the deletion of your personal data that is processed on the basis of our legitimate interest, we may no longer process your personal data unless we can demonstrate compelling legitimate grounds for continuing the processing of your personal data.
• Right to erasure (Article 17 of the GDPR): You have the right to request your personal data be erased if, for example, the personal data is no longer necessary for the purposes for which it was collected, the processing is unlawful, or the personal data has to be erased to enable us to comply with our statutory obligations.
• Right to data portability (Article 20 of the GDPR): If your personal data that you yourself have provided is being processed automatically with your consent or in accordance with a contract between you and us, you may request the personal data to be provided to you in a structured, commonly used and machine-readable format and the personal data to be transmitted to another controller, if this is technically possible.

You may exercise any of the above-mentioned rights by contacting us by email at privacy@tangently.ai.

8. Lodging a complaint

Our aim is always to solve disagreements relating to the processing of your personal data directly with you. However, if you wish to file a complaint with a competent data protection authority regarding our processing of your personal data, you may do so by contacting the Data Protection Ombudsman (tietosuoja@om.fi, 029 566 6768, www.tietosuoja.fi).

Changes to Privacy Policy

We are constantly improving our services and privacy measures, and we therefore reserve the right to modify this Privacy Policy by notifying about it on our website or via email. Changes in this Privacy Policy may also be based on changes in the applicable laws. Thus, we kindly recommend you to read this Privacy Policy regularly.

Summary

Tangently.ai (“Tangently”, “we”, “us”, or “our”) is committed to protecting privacy and personal data.

This Privacy Policy explains how we collect, process, store, and protect personal data when you use Tangently.ai’s website, applications, integrations, and services.

Tangently.ai operates in Finland and complies with the EU General Data Protection Regulation (GDPR).

Data Controller: Tangently.ai, Lahnatie 9, 01490 Vantaa, Finland. Email: privacy@tangently.ai

Tangently.ai processes accounting and financial data such as accounts, salaries, vendors, employees, and cost data solely to provide the Service. All data is stored and processed within the European Union.