retention is required by law.
7. Recipients and Processors
Personal data may be processed by authorised personnel and trusted service providers, including:
● Cloud infrastructure providers (e.g. AWS)
● Communication tools (e.g. Intercom)
● Payment processors (e.g. Stripe)
● Productivity tools (e.g. Google Workspace)
Planmetry has entered into Data Processing Agreements with all processors in accordance with Article 28 GDPR.
Processors may not use personal data for their own purposes.
A list of current subprocessors is available at: https://www.planmetry.com/subprocessors
8. International Transfers
Personal data may be transferred outside the European Economic Area (EEA).
Where such transfers occur, Planmetry ensures appropriate safeguards, including:
● EU Commission adequacy decisions, or
● Standard Contractual Clauses (SCCs)
9. Security Measures
Planmetry implements appropriate technical and organisational measures, including:
● Encrypted data transmission (SSL/TLS)
● Access control and role-based permissions
● Secure cloud infrastructure
● Logging and monitoring
In the event of a personal data breach, Planmetry will act in accordance with applicable data protection laws.
10. Automated Decision-Making
Planmetry does not engage in automated decision-making that produces legal or similarly significant effects within the meaning of Article 22 GDPR.
11. Data Subject Rights
You have the following rights under GDPR:
● Right of access
● Right to rectification
● Right to erasure (right to be forgotten)
● Right to restriction of processing
● Right to object
● Right to data portability
● Right to withdraw consent at any time
You may exercise your rights by contacting: info@planmetry.com
Planmetry may request reasonable proof of identity.
You also have the right to lodge a complaint with a supervisory authority in your country of residence, workplace, or where an alleged infringement occurred.
In Finland, the supervisory authority is the Office of the Data Protection Ombudsman.
12. Changes to this Policy
Planmetry may update this Privacy Policy from time to time. Material changes will be communicated appropriately.