Privacy

Who is responsible

Adafy Oy (business ID 2480016-8, Lutakonaukio 1, 40100 Jyväskylä, Finland) is the controller of the personal data described here and operates Weik.io Cloud. You reach Adafy about privacy at cloud@weik.io.

This policy covers two things: the weikio.cloud website, and the console accounts of the people who use Weik.io Cloud. The data you put into your workspaces and services is yours, and Adafy processes it for you under the data processing agreement.

The website

The weikio.cloud pages load nothing from third parties and set no cookies, except the one session cookie that keeps you signed in to the console. The site counts visits with an analytics service hosted in the EU that uses no cookies and no identifier that follows you to other sites. The counts show which pages are read and which site a visitor came from. The servers keep their access logs, with the IP address and the browser of each request, for 30 days to keep the site secure.

Your console account

When you create an account, Adafy keeps:

• Your name, your e-mail address and your password, which is stored only as a salted hash
• Your company, its country and its VAT ID when you give them, for the invoices
• Your sign-in through Microsoft Entra ID when you use it, in which case Adafy receives your name, your e-mail address and your tenant’s ID from Microsoft
• The sign-ins to the account and the changes made in the console, with their time and IP address, as the account’s activity record
• The payment method on file, of which Adafy keeps the card’s brand, its last four digits and its expiry, while the card payment company keeps the card itself
• The invoices of the account

Adafy uses this data to run your account, to bill it, to answer your support cases, to send you notices about the service, its security and its terms, and to meet its accounting duties. The legal basis is the agreement with you, and for accounting records the law.

How long data is kept

The account’s data is kept while the account exists. When you close the account, Adafy deletes it within 30 days, except the invoices and the bookkeeping records that Finnish accounting law requires Adafy to keep for ten years.

Who else processes it

The account data is stored in Hetzner’s Helsinki data centre park in Finland, and the companies that process data for Weik.io Cloud are listed on the subprocessors page. Adafy doesn’t sell personal data and doesn’t share it for marketing.

Your rights

You can see and correct your account data in the console. You can also ask Adafy at cloud@weik.io for a copy of your personal data, for its correction or deletion, to restrict its processing or to move it to another service. If you think Adafy handles your data against the law, you can complain to the Data Protection Ombudsman of Finland at tietosuoja.fi.

Changes to this policy

Adafy announces a material change to this policy to the e-mail addresses of the accounts before it takes effect, and the date at the top of the page shows the latest version.