This document describes Namia Oy’s (“Namia”, “we”) privacy practices as a controller. This Privacy Notice may concern You if any of the following applies:

Controller’s contact details

Namia Oy
Company ID: 2850225-6
Location: Helsinki, Finland
E-mail address: hi@namia.io

Namia complies with Finland’s Personal Data Act (523/1999) and European Union’s General Data Protection Regulation (GDPR, 2016/679) or with other applicable and valid data protection legislation.

Personal data processed

We collect two types of data from our Users: user data and technical data.

User data about You is collected in three scenarios: 1) You buy services from Namia, 2) You have given consent to collect and process your personal data. In the most typical scenario we collect basic contact information (including, but not limited to, name, phone number, email address).

Technical data is collected when You visit any of Namia’s websites. The personal data collected is typical web server log data (for example: ip address, web browser and URL). We do not use technical data to identify any user unless at least one of the following applies:

Cookies

We do not use cookies.

Purposes and legitimate grounds for processing

Namia processes personal data for managing relationships with customers, controlling and monitoring payments and transfers, managing and developing our customer service, protecting our customers and meeting legal obligations.

In the first place we process personal data to be able to provide our services to our customers. For example we process relevant personal data when customer service is contacted to make customer’s experience better. This is always done by one of Namia’s employees. Personal data is not used for automatic decision-making or profiling.

Legitimate grounds

We process user data to perform our contractual obligations as a deliverer of our services to the customers.

In some cases the users may be requested to grant their consent for the processing of their data. In such case they can withdraw their consent at any time.

We process technical data to protect our and our users’ personal data and intellectual property and to surveil illegal activies (such as data breaches).

Storage period

User data is stored as long as at least one of the following applies:

Users’ rights

Right to access

You have the right to receive Your personal data in a structured, commonly-used, machine readable format without unreasonable delay.

Right to withdraw consent

If the data processing is based on Your consent, You may withdraw the consent at any time. Withdrawing the consent may affect how we can provide our services to You.

Right to correct

You have the right to have missing or incorrect personal data about yourself corrected or completed.

Right to deletion

You have the right to request a deletion of your personal data. Upon such request we will delete all personal data, for which we don’t have a legitimate ground to keep, about You. We may not be able to remove everything immediately, but we will comply with such requests without unreasonable delay. Deleting all personal data may affect how we can provide our services to You.

Right to object

You have the right to object any type of processing of personal data unless Namia has a legal obligation or right to process the data. Example: Namia might preserve the right to process user’s personal data if the user hasn’t paid the bills. Depending on the type of processing, objecting the processing of personal data may affect how we can provide our services to You.

Right to data portability

You have the right to receive your personal data in a structured, commonly-used, machine readable format without unreasonable delay. You have the right to transfer this data freely.

How to use the rights

The rights mentioned above may be used by sending us email to the address listed in “Controller’s contact details”. Please provide following information about yourself: full name, email address, company name (if applicable), phone number. We may ask You for additional information to verify Your identity or to ensure that our actions match Your request.