JEEZI

Privacy Policy

Last updated: [DATE]

1. Data Controller

The data controller for personal data collected via JEEZI is:

[Company name]
[Business ID]
[Address]
[Email address for privacy matters]

2. Personal data we collect and why

Account registration

We collect your name (optional) and email address to create and operate your account. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Donations

If you provide your name and email when making a donation, we store this to send you a payment receipt. Providing this information is optional — you may donate anonymously. Legal basis: your consent (Art. 6(1)(a) GDPR).

Project updates

If you subscribe to project updates, we store your email address to send you news. You can unsubscribe at any time via the link in every email. Legal basis: your consent (Art. 6(1)(a) GDPR).

Fundraising activity

For team members, we record fundraising totals and achievements to operate the leaderboard and reward system. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Bank account details

Team administrators provide bank account information (IBAN, BIC) to receive collected funds. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

3. Data processors and third parties

Paytrail Oyj

We use Paytrail to process payments. When you make a donation, your name and email (if provided) and payment amount are transmitted to Paytrail to process the transaction securely. Paytrail acts as a data processor on our behalf under a data processing agreement.

Brevo (Sendinblue SAS, France)

We use Brevo to send transactional emails (donation receipts, achievement notifications, project update subscriptions). Your email address and relevant event data are transmitted for this purpose. Brevo acts as a data processor on our behalf under a data processing agreement.

Hosting and infrastructure

Our application is hosted on [hosting provider]. Personal data is stored on servers located in [location / EU].

4. Data retention

We retain your personal data for as long as your account is active. Account data is deleted when you close your account. Donation records are retained for [X years] to comply with accounting and legal obligations. Audit logs are retained for 90 days.

5. Cookies and session data

JEEZI uses a single strictly necessary HTTP-only session cookie to keep you logged in. This cookie is essential for the service to function and does not require your consent. We do not use advertising cookies or tracking technologies.

6. Your rights

Under GDPR you have the right to:

  • Access — request a copy of all personal data we hold about you
  • Rectification — correct inaccurate or incomplete data
  • Erasure — request deletion of your personal data
  • Data portability — receive your data in a machine-readable format
  • Object — object to processing based on legitimate interests
  • Restriction — request that we limit processing of your data
  • Withdraw consent — where processing is based on consent, you may withdraw it at any time

You can exercise your right to access, portability, and erasure directly in your account settings. For other requests, contact us at [privacy@yourdomain.fi].

7. Right to lodge a complaint

If you believe your data is being processed unlawfully, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto): tietosuoja.fi.

8. Contact

Privacy-related questions: [privacy@yourdomain.fi]