Privacy

Who is responsible

Adafy Oy (business ID 2480016-8, Lutakonaukio 1, 40100 Jyväskylä, Finland) is the controller of the personal data described here and operates Weik.io Cloud. You reach Adafy about privacy at cloud@weik.io.

This policy covers two things: the weikio.cloud website, and the accounts of the people who use Weik.io Cloud. The data you put into your installations is yours, and Adafy processes it for you under the data processing agreement.

The website

The weikio.cloud pages load nothing from third parties and set no cookies, except the one session cookie that keeps you signed in to the Customer Portal. The website runs no analytics script. The servers keep their access logs, with the IP address and the browser of each request, for 30 days to keep the website secure.

Your account

When you become a customer, Adafy keeps:

• Your name and your e-mail address
• Your company, its country and its VAT ID when you give them, for the invoices
• Your sign-in through Microsoft Entra ID when you use it, in which case Adafy receives your name, your e-mail address and your tenant’s ID from Microsoft
• The sign-ins to the account, with their time and IP address, as the account’s activity record
• The payment method on file, of which Adafy keeps the card’s brand, its last four digits and its expiry, while the card payment company keeps the card itself
• The invoices of the account

Adafy uses this data to run your account, to bill it, to answer your support cases, to send you notices about the service, its security and its terms, and to meet its accounting duties. The legal basis is the agreement with you, and for accounting records the law.

How long data is kept

The account’s data is kept while the account exists. When you close the account, Adafy deletes it within 30 days, except the invoices and the bookkeeping records that Finnish accounting law requires Adafy to keep for ten years.

Who else processes it

The account data is stored in Hetzner’s Helsinki data centre park in Finland. Cloudflare serves the weikio.cloud website and sends the Customer Portal’s sign-in code, so it sees the IP address and the browser of each request and the e-mail address you sign in with. Support cases you send to support@weik.io are received by Microsoft, which receives weik.io’s e-mail, and kept in Atlassian’s Jira Service Management, with the name and e-mail address of the person who opens a case, its messages and its attachments. The companies that process data for Weik.io Cloud are listed on the subprocessors page. Adafy doesn’t sell personal data and doesn’t share it for marketing.

Your rights

You can ask Adafy at cloud@weik.io for a copy of your personal data, for its correction or deletion, to restrict its processing or to move it to another service. If you think Adafy handles your data against the law, you can complain to the Data Protection Ombudsman of Finland at tietosuoja.fi.

Changes to this policy

Adafy announces a material change to this policy to the e-mail addresses of the accounts before it takes effect, and the date at the top of the page shows the latest version.