política de privacidad
Last updated: [2.3.2026]
Planmetry processes personal data in accordance with this Privacy Policy and applicable data protection legislation. This Privacy Policy may be updated as our business or applicable laws change, so please check back from time to time.
1. Controller
Planmetry Oy
Kampinkuja 2, 00100, Helsinki, Finland
Email: info@planmetry.com
Company ID: FI33458579
Planmetry Oy acts as the data controller for personal data described in this Privacy Policy.
For data protection matters, you may contact:
info@planmetry.com
2. Scope of this Privacy Policy
This Privacy Policy describes how Planmetry processes personal data when acting as a data controller in accordance with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.
Where Planmetry processes personal data on behalf of its business customers in connection with customer-uploaded content, Planmetry acts as a data processor. Such processing is governed by a separate Data Processing Agreement (DPA), which is available at https://www.planmetry.com/dpa
3. Categories of Personal Data Collected
3.1 Account and User Information.
● First name and last name
● Email address
● Phone number (if provided)
● Job title / field of activity
● Company name
● Login credentials and authentication data
● Account preferences
3.2 Service Usage Data
● Event history and usage logs
● IP address
● Device and browser information
● Login timestamps
● Error logs and diagnostic data
3.3 Communication Data
● Messages sent via web forms, chat (e.g. Intercom), or email
● Support requests
● Survey responses
3.4 Billing Data (Business Customers)
● Company address
● VAT number
● Billing contact details
● Payment-related metadata (payment processing is handledby third-party providers such as Stripe)
4 Customer-Uploaded Content (Processor Role)
Users may upload drawings, project files, documents and other content to the Service.
To the extent that such content contains Personal Data, Planmetry processes that data solely on behalf of the Customer and in accordance with the applicable Data Processing Agreement.
Planmetry does not use identifiable Personal Data contained in customer-uploaded content for its own independent purposes.
Planmetry may access and process customer-uploaded content only:
● to provide and maintain the Service,
● to ensure security, integrity and technical functionality,
● to comply with legal obligations.
Planmetry may use data derived from customer-uploaded content in irreversibly anonymised and aggregated form for the purposes of service improvement, development and testing, provided that such data does not identify any individual or the Customer.
5. Purposes and Legal Bases for Processing
Planmetry processes personal data for the following purposes:
5.1 Provision of the Service
Legal basis: Contract (Art. 6(1)(b) GDPR)
● Account creation and authentication
● Service delivery
● Customer support
● Billing and invoicing
● Performance of contractual obligations
5.2 Service Improvement and Security
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR)
● Service analytics
● Debugging and error resolution
● Fraud prevention
● System security monitoring
● Product development
Planmetry has conducted a legitimate interest assessment where required.
5.3 Marketing and Customer Communication
Legal basis: Legitimate interest or Consent
● Product updates
● Service-related announcements
● Customer surveys
● Direct marketing (where permitted by law)
5.4 Legal Obligations
Legal basis: Legal obligation (Art. 6(1)(c) GDPR)
● Accounting and tax requirements
● Compliance with court orders
● Regulatory reporting
6. Data Minimisation and Retention
Planmetry processes only personal data that is necessary and relevant for thespecified purposes.
Retention periods may also be influenced by statutory limitation periods forlegal claims.
Retention periods:
● User account data: 2 years from last login
● Email archives: up to 7 years where required for accounting or legal claims
● Billing data: retained as required by applicable accounting laws
Personal data is deleted or anonymised when no longer necessary unlessretention is required by law.
7. Recipients and Processors
Personal data may be processed by authorised personnel and trusted service providers, including:
● Cloud infrastructure providers (e.g. AWS)
● Communication tools (e.g. Intercom)
● Payment processors (e.g. Stripe)
● Productivity tools (e.g. Google Workspace)
Planmetry has entered into Data Processing Agreements with all processors inaccordance with Article 28 GDPR.
Processors may not use personal data for their own purposes.
A list of current subprocessors is available at: https://www.planmetry.com/subprocessors
8. International Transfers
Personal data may be transferred outside the European Economic Area (EEA).
Where such transfers occur, Planmetry ensures appropriate safeguards, including:
● EU Commission adequacy decisions, or
● Standard Contractual Clauses (SCCs)
9. Security Measures
Planmetry implements appropriate technical and organisational measures, including:
● Encrypted data transmission (SSL/TLS)
● Access control and role-based permissions
● Secure cloud infrastructure
● Logging and monitoring
In the event of a personal data breach, Planmetry will act in accordance with applicable data protection laws.
10. Automated Decision-Making
Planmetry does not engage in automated decision-making that produces legal or similarly significant effects within the meaning of Article 22 GDPR.
11. Data Subject Rights
You have the following rights under GDPR:
● Right of access
● Right to rectification
● Right to erasure (right to be forgotten)
● Right to restriction of processing
● Right to object
● Right to data portability
● Right to withdraw consent at any time
You may exercise your rights by contacting: info@planmetry.com
Planmetry may request reasonable proof of identity.
You also have the right to lodge a complaint with a supervisory authority in your country of residence, workplace, or where an alleged infringement occurred.
In Finland, the supervisory authority is the Office of the Data Protection Ombudsman.
12. Changes to this Policy
Planmetry may update this Privacy Policy from time to time. Material changes will be communicated appropriately.
