Privacy statement

Foundryworks Finland Oy is the controller of the Symple service. All questions and requests related to data protection can be addressed to support@symple.fi.

Data collected during registration

• Name, social security number
• Address, e-mail address, phone number
• Bank account number for settlements
• Tax card information

Data collected during the use of the service

• Invoicing information: customer information, invoiced amounts, job descriptions
• Data on accounts
• Communication with customer service
• Registration times and methods
• Device IP address and browser information

Additionally in the business name service

• Business ID and company information
• Accounting material: vouchers, receipts, invoices
• Bank account transactions (if the user connects a bank account)

We process personal data for the following purposes:

• Implementation of the contract: managing invoicing, accounting, tax withholding and official notifications
• Statutory obligation: Compliance with Finnish tax, accounting and financial legislation
• Legitimate interest: ensuring the security of the service, preventing abuses and developing the service
• Consent: marketing communications to which you have separately given your consent

We do not use personal data for automatic decision-making or profiling in a way that would have legal implications.

We store personal data as long as it is necessary:

• Invoicing and financial information: 6 years from the end of the accounting period (Accounting Act)
• Taxation information: the period required by legislation, at least 6 years
• Customer relationship information: for the duration of the customer relationship + 2 years
• Marketing consent: until consent is withdrawn

After closing the account, we will delete the data after the above-mentioned storage periods have expired, unless legislation requires longer storage.

We provide information in the following cases:

• Authorities: The tax administration, pension insurance companies and other authorities to fulfill statutory obligations
• Insurance company: to manage accident and liability insurance
• PlusID Oy (Business ID 3256194-5): acts as the payment service provider and settlement provider. PlusID Oy is a payment institution supervised by the Finnish Financial Supervisory Authority and processes personal data related to payment transactions as an independent controller on the basis of payment services legislation, anti-money laundering (AML), customer identification (KYC) and risk management obligations.
• Accounting system: to manage the accounting of the business name service

We do not sell, rent or hand over personal data to third parties for marketing purposes. All of our subcontractors are committed to complying with the GDPR and our data protection requirements.

We strive to process all personal data in the EU/EEA area. If data is transferred outside the EU, we ensure an appropriate level of protection using standard contract clauses approved by the EU Commission or other transfer mechanisms permitted by the GDPR.

You have the right according to the GDPR:

• Right of inspection: to find out what information we process about you
• Request for correction: request correction of incorrect information
• Right of deletion: request deletion of your data ("right to be forgotten")
• Restriction of processing: request the restriction of the processing of your data
• Right of transfer: receive your information in a machine-readable format
• Right to object: object to the processing of your data based on a legitimate interest
• Revocation of consent: withdraw marketing consent at any time

Send requests regarding the use of rights to support@symple.fi. We respond to requests within 30 days. If you consider that the processing of your data is illegal, you can file a complaint with the data protection authority (tietosuoja.fi).

Symple.fi uses cookies and similar technologies for the following purposes:

• Essential cookies: mandatory for the operation of the service, does not require consent
• Analytics cookies: to analyze and develop the use of the service (consent required)
• Marketing cookies: for targeted marketing (consent required)

You can manage the cookie settings from the browser settings or from the cookie ban displayed on our site. Blocking essential cookies can affect the operation of the service.

We protect your personal data with appropriate technical and organizational measures:

• Transmission encryption (TLS/HTTPS)
• Database encryption
• Access control and user identification
• Regular information security audits
• Personal data protection training

We notify the relevant persons and the data protection authority of a data security breach within the time required by the GDPR.

We will update the privacy policy if necessary with legislative changes or service development. We notify registered users of material changes by email before the changes take effect.

The date of the current version is indicated at the beginning of this manual.