Privacy policy

This privacy policy describes how Premore processes personal data in connection with the Exorda service.

1. Data controller

Premore (Exorda service)
Business ID: 1877355-4

Email for privacy matters:
support@exorda.net

2. Personal data we process

We process only personal data necessary to provide and operate the Exorda service, such as:

email address
language preference
technical data related to the user account
data entered by the user in the service

Financial data and notes entered into the service may contain personal data at the user’s discretion.

3. Purpose and legal basis for processing

Personal data is processed for the following purposes:

creating and maintaining user accounts
providing the Exorda service and managing access rights
customer support and service development
compliance with legal obligations (e.g. accounting)

The primary legal basis for processing is performance of a contract (GDPR Article 6(1)(b)). In certain cases, processing may also be based on a legal obligation or Premore’s legitimate interest.

4. Source of data

Personal data is collected primarily directly from the user when registering for and using the Exorda service.

5. Service providers, data disclosure and international transfers

We do not sell personal data.

To operate the service, we use service providers (processors), such as hosting and infrastructure providers. These providers process personal data only on our instructions and only for providing and securing the service.

Exorda is hosted in Switzerland with Infomaniak (Infomaniak Network SA), which processes personal data on our behalf as a data processor. We maintain a data processing agreement with our hosting provider as required by GDPR Article 28. A copy of the relevant processor terms can be provided on request (see the email address above).

Personal data may be disclosed only if required by law or a competent authority, or in connection with a transfer of the service to another operator.

Personal data is processed and stored in Switzerland. Switzerland is subject to an adequacy decision by the European Commission, and data is processed in accordance with a level of protection equivalent to EU data protection standards.

6. Data retention

Personal data is retained for as long as the user account is active. After account deletion, data is deleted or anonymised unless retention is required by law.

7. Data subject rights

You have the right to:

access your personal data
request correction of inaccurate data
request deletion of data
restrict processing
object to processing
request data portability, where applicable

Requests may be sent to the email address listed above. You also have the right to lodge a complaint with the supervisory authority.

8. Is providing data mandatory?

Certain personal data is required to provide the Exorda service. Without this data, a user account cannot be created.

9. Applicable law

Processing of personal data is governed by Finnish law and the EU General Data Protection Regulation (GDPR).

10. Changes to this policy

We may update this privacy policy as necessary. The current version is always available within the Exorda service.