GDPR

Data controller

National Data Media Oy
Porilaistie 1, 27800 Säkylä, Finland
Business ID 3312457-8 · 029 9800 · [email protected]

Data we process

• Account data: name, email address and a secure password hash.
• Subscription data: Premium plan and status plus the payment transaction ID. We never process full card numbers or security codes.
• Billing data: receipt number, plus billing address and VAT ID if you provide them.
• Technical data: your cookie choice and the data needed to keep you signed in.

We do not collect location data, track IP addresses for marketing or process biometric data.

Legal bases

• Contract (Art. 6(1)(b)) — maintaining your account, delivering Premium and billing.
• Legal obligation (Art. 6(1)(c)) — keeping accounting records.
• Consent (Art. 6(1)(a)) — newsletter and optional storage.
• Legitimate interest (Art. 6(1)(f)) — security and preventing misuse and payment fraud.

Retention

Account data is kept until you ask us to delete the account. Accounting records are kept for six years from the end of the financial year. Sign-in logs are deleted after 90 days.

Your rights

• Access the data we hold about you.
• Ask us to correct or erase your data.
• Object to processing or ask us to restrict it.
• Receive your data in a machine-readable format.
• Lodge a complaint with the Office of the Data Protection Ombudsman.

To exercise your rights: [email protected]. We reply within 30 days at the latest.

Data transfers

Our servers are located in the EU/EEA. If the payment provider transfers data outside the EU, the transfer is based on Standard Contractual Clauses approved by the European Commission.