Privacy Policy
At Karhu.ac, we are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR). This Privacy Policy explains what personal data we collect, why we collect it, how it is processed, and your rights as a user under GDPR.
Data We Collect and Why
1. Hardware Identifier and IP Address
- What we collect: When you start up Karhu, we collect your hardware identifier and IP address.
- Purpose: These details are used to ensure security, monitor for unauthorized use, and detect potential misuse of our services.
- Retention: This data is securely stored for 90 days after startup and automatically deleted thereafter unless required for resolving disputes or investigating misuse.
2. Payment Information
- What we collect: Payment information is processed through our payment provider, Stripe.
- Purpose: To process payments securely and fulfill your purchase agreement.
- Data Controller: Stripe acts as an independent data controller for payment data. Please refer to their Privacy Policy for details.
Lawful Basis for Processing
We process your personal data under the following lawful bases:
- Legitimate Interests: To ensure the security and proper functioning of our services by processing hardware identifiers and IP addresses.
- Contractual Necessity: To fulfill your purchase agreement through the processing of payment data by Stripe.
Your GDPR Rights
As a user under GDPR, you have the following rights regarding your personal data:
- Right of Access: You can request access to the personal data we hold about you.
- Right to Rectification: You can request corrections to any inaccurate or incomplete data we hold.
- Right to Erasure: You can request the deletion of your data.
- Right to Restrict Processing: You can request restrictions on the processing of your data.
- Right to Data Portability: You can request a copy of your data in a structured format.
- Right to Object: You can object to the processing of your data.
- Right to Lodge a Complaint: You can file a complaint with your local data protection authority.
Contact Us
For any questions, concerns, or requests related to this Privacy Policy, please contact us at:
Email: [email protected]
