Last updated: on the 31st of October 2018
Your privacy and the security of your personal information is important to Aibidia Oy (“Aibidia”). Aibidia is committed to protecting the personal data it receives about you in order to enable your registration with and use of the Aibidia Service.
1. THE PERSONAL DATA AIBIDIA COLLECTS
1.1 Information collected from you
In order to enable your registration and use of the Aibidia Service, Aibidia needs to collect certain information from you, by which you are individually identifiable (i.e. your personal data). The data Aibidia collects from you may include business contact information, such as names, business phone numbers, and business e-mail addresses. Additionally, Aibidia may need you to provide user names, passwords and other such credentials to be used in the authentication of Authorised Users as well as the validation of their actions or are otherwise needed in order to provide access to the Aibidia Service.
You may also need to provide certain information about your payment method, such as your credit card details. The payments are managed by the payment solutions service provider of Aibidia, and Aibidia only receives the information about your payment method necessary for the payment of Aibidia Service fees, which may include the four last numbers and the year and month of expiry of your credit card. Aibidia may also collect details of made and unpaid payments and payment times.
The data Aibidia collects about you may also include information it receives from your email interaction or other contact you may have with Aibidia in connection with the Aibidia Service.
1.2 Information collected automatically
Certain information about you or your device may also be collected automatically in connection with your use of the Aibidia Service, including information such as your IP-address, access times, device type and model, unique ID and operating system version of the device, and other such technical information.
2. THE USE OF PERSONAL DATA
2.1 The main reason Aibidia collects, uses, processes and stores your personal data is to allow it to provide the Aibidia Service to you.
2.2 Aibidia always processes your data in accordance with the applicable data protection legislation, including the GDPR. The legal base for processing your personal data are either to perform a contract, for the purposes of a legitimate interest, or to comply with a legal obligation.
Aibidia may use the personal data to extent necessary for the purposes of:
(i) setting up and maintaining your registration with the Aibidia Service and fulfilling your requests;
(ii) providing available Aibidia Service features;
(iii) ensuring the technical functionality and security of the Aibidia Service;
(iv) operating, managing, developing and improving the Aibidia Service;
(v) personalising the Aibidia Service;
(vi) communicating with you;
(vii) enforcing the general terms and conditions for using the Aibidia Service;
(viii) auditing the Aibidia Service and analysing the Aibidia Service and usage patterns of the Aibidia Service
(ix) charging applicable Aibidia Service fees;
(x) market research and direct electronic marketing in accordance with applicable law;
(xi) protecting the rights and property of Aibidia as well as preventing and investigating fraud and other misuses; and
(xii) complying with the legal obligations of Aibidia and otherwise in connection with law enforcement or other civil or criminal legal proceedings.
3. SHARING PERSONAL DATA
3.1 Unless otherwise stated below, Aibidia does not sell, lease, rent or otherwise disclose personal data to unauthorised third parties without your consent.
3.3 The Aibidia Service is provided using resources located in Microsoft Azure. You may however choose to use certain Aibidia Service features may enable your personal data to be transferred to third party service providers, such as payment processors, in which case the location of such third party service providers may be anywhere in the world, and personal data may be transferred outside the country of your residence or the country where the Aibidia Service is used, which may include countries outside the European Economic Area that do not have similar laws providing specific protection for personal data or that have different legal rules on data protection.
3.4 Aibidia may be obligated by mandatory legislation to disclose personal data about you to certain authorities, such as law enforcement agencies. Aibidia may also process personal data about you in connection with defending the legitimate interests of Aibidia in civil or criminal legal proceedings or to prevent and investigate fraud and other misuses.
3.6 In addition, Aibidia may disclose or make available to third parties certain automatically-collected, aggregated, or otherwise non-personally-identifiable information that does not constitute personal data and does not allow the identification of individual users.
4. YOUR RIGHTS
4.1 You have the following legal rights relating to your personal data which you may, as appropriate and in accordance with the applicable data protection legislation, exercise by contacting Aibidia through the contact points referred to below under section  below:
(a) the right to know what personal data Aibidia holds about you and to request access to such information;
(b) the right to request the rectification of personal data if the personal data is inaccurate or incomplete;
(c) the right to request Aibidia to delete personal data about you if it is no longer needed for the purposes for which it was collected;
(d) the right to request Aibidia to restrict the processing of your personal data if the personal data is not accurate, the processing is illegal and you object to the deletion of the personal data and instead request for its use to be restricted, if the personal data is no longer needed for the purposes for it was collected but you need it to establish, bring or defend yourself against legal claims, or if you object to the processing by Aibidia where Aibidia has collected personal data based on its legitimate interest and Aibidia is investigating whether your privacy interest overrides the legitimate interest of Aibidia;
(e) the right to object to the processing of personal data that Aibidia processes based on its legitimate interest;
(f) the right to request Aibidia to provide the personal data that you provided to Aibidia in a structured, commonly-used and machine-readable format and the right to transfer your personal data to another controller if the processing is based on a contract with you and the processing takes place automatically; and
(g) the right to file a complaint with a relevant supervisory authority regarding the processing of personal data by Aibidia.
5. THE CONTROLLER OF YOUR PERSONAL DATA
Your personal data is controlled by Aibidia Oy, c/o Alder & Sound Oy, Mannerheimintie 16 A 00100 Helsinki, Finland.
If you have any questions concerning the way Aibidia processes your personal data or want to contact Aibidia for any other reason relating to your personal data, you may contact Aibidia by email at firstname.lastname@example.org.