GDPR: your rights in brief

Who processes your data?

The controller is Pure Digital Marketing Agency Oy (Business ID 3362970-2), Vironkatu 9 A 8, 00170 Helsinki, Finland, [email protected]. Full policy: Privacy.

How long do we keep data?

• Account data: for as long as the account is in use. We delete it within 30 days after you ask us to delete the account.
• Payment records: 6 years from the end of the year in which the payment was made (Finnish Accounting Act).
• Newsletter: until you unsubscribe. We delete the address within 30 days. An unconfirmed subscription is deleted after 30 days.
• Push address for browser notifications (your consent, off by default): for as long as notifications are on. We delete it within 30 days after you switch them off in your account or browser, or delete your account.
• Contact requests: 12 months after the matter is closed.
• Server logs: 30 days.

Who receives the data?

• a hosting provider in the EU (site, database and logs)
• an email service in the EU (verification emails, password reset, notifications and the newsletter)
• your browser maker’s push service, if you allow Premium notifications in your browser (it receives an encrypted notification and your device’s push address)
• Stripe (Premium payments); Stripe also processes payment data under its own privacy terms

Stripe may transfer payment data to the United States under the EU–US Data Privacy Framework and standard contractual clauses. Browser push services may be located outside the EU.

We do not sell your data and do not use it for advertising.

What are your rights?

You can get a copy of your data, correct it, ask for deletion or restricted processing, receive it in a machine-readable format, object to processing based on our legitimate interest, and withdraw your consent.

How do you make a request?

Send your request with the contact form or to [email protected]. We reply without undue delay and within one month at the latest. If a request is complex or there are many requests, this can be extended by up to two more months, and we tell you within the first month. We may ask you to confirm your identity.

Where can you complain?

If you think we process your data unlawfully, you can complain to the Office of the Data Protection Ombudsman in Finland (tietosuoja.fi).