Privacy policy

Getadeal Oy (business ID 1618029-6), Mustapuronkatu 29, 15300 Lahti, Finland, is responsible for the processing of personal data described in this policy. For privacy matters, contact info@getadeal.fi.

This policy covers the Getadeal service: the seller mobile app, the buyer web service and their shared back end. The getadeal.ai website and its mailing list are covered by a separate privacy policy.

• Identity data: name, email address, phone number and the user's role on the account. For sellers, strong identification data: personal identity code and the identification identifier.
• Account data: company name, business ID, address and billing details. For a private seller, name and address.
• Payment and payout data: bank account (IBAN and BIC) and account holder, payments, payouts and the vouchers of deals.
• Listings and deals: listing images, descriptions, location and pick-up address, offers, deals and reclamations.
• Messages: chat messages between seller and buyer, with attachments.
• Feedback and contacts with customer support.
• Technical data: the device's notification token, sign-in sessions, and error and performance data.

• Providing the service, brokering deals and the related communication. Basis: contract (Article 6(1)(b) GDPR).
• Payment brokering, payouts, bookkeeping and reporting digital platform sellers to the Finnish Tax Administration (DAC7). Basis: legal obligation (point (c)).
• Preventing and investigating misuse and harassment, and the security of the service. Basis: legitimate interest (point (f)).
• Developing the service with feedback, error and usage data. Basis: legitimate interest.
• Automatic recognition of listing images, which suggests listing details from a photo. Basis: contract.

We get the data from you, from strong identification (Telia), company details from the open data of the Finnish Patent and Registration Office, payment details from the payment service provider (Paytrail), and from the use of the service.

• The other party of a deal: a buyer sees the seller's name and the listing. A seller sees the buyer's details only once the deal has been paid.
• Authorities: the Finnish Tax Administration (DAC7 reports) and other authorities as required by law.
• Processors acting on our behalf: Telia Finland (strong identification), Paytrail (payments), Visma Netvisor (bookkeeping and payouts), Twilio SendGrid (email), SMSPRO (text messages), Expo (push notifications), Google (route and distance calculation and listing image recognition), OpenStreetMap Nominatim (address geocoding), Sentry (error monitoring) and the provider of server and storage services.
• We do not sell or rent your data.

Some processors (for example SendGrid, Expo, Google and Sentry) may process data in the United States. Such transfers rely on the EU–US Data Privacy Framework or on the standard contractual clauses approved by the European Commission.

• User account data is kept for as long as the account is in use.
• When a user account is deleted, personal data is deleted at once, except as follows.
• The accounting records of deals (vouchers and payouts) and the seller information reported to the Tax Administration (name, personal identity code or business ID, address and bank account) are kept for six years from the end of the year of the last deal (Accounting Act and DAC7 Act). So are seller users' names and personal identity codes, so that the person who made a deal can be identified at an authority's request.
• Chat messages and their author's name and email are kept to investigate misuse and disputes over deals for three years from the last message, or six years if the account has deals.
• The text of feedback is kept without identifying details; feedback attachments are deleted.
• When a retention period ends, the data is deleted automatically. Deleted data also disappears from backups within their retention period.

• to know what data we process about you and to get a copy of it
• to have incorrect data corrected
• to have your data deleted: you can delete your user account in the app or ask for deletion at getadeal.ai/en/remove-account
• to restrict or object to processing
• to receive the data you provided in a portable format
• to lodge a complaint with the Office of the Data Protection Ombudsman (tietosuoja.fi)

We answer requests within a month.

Connections to the service are encrypted. Personal identity codes are stored encrypted, and viewing them is limited to administrators and logged. Access to personal data is limited to those who need it for their work.

We update this policy when the service or its processors change. The date of the latest update is at the top of the page.