1. Data Controller

Name: DigiKaveri
Business ID: 3656584-7
Address: Espoo, Finland
Email: info@digikaveri.com
Phone: 045 7833 8105

2. Contact Person for Registry Matters

Name: Abdurrahman Chatani
Email: info@digikaveri.com

3. Name of the Registry

DigiKaveri's customer and marketing register.

4. Legal Basis and Purpose of Processing

The legal basis for processing personal data is the contract between the company and the customer (service order), the customer's consent (sending a contact form), a legal obligation (keeping invoices under Finnish accounting and VAT legislation) and DigiKaveri's legitimate interest (collecting voluntary customer feedback to improve the service).

The purpose of processing personal data is:

Responding to customer inquiries and communication.
Implementation of IT support services (remote support and home visits).
Billing, payment monitoring, and statutory bookkeeping and VAT reporting.
Maintaining and developing the customer relationship.
Collecting customer feedback and improving service quality.

Special Note on Remote Support: Connections established through remote support applications are one-time only and always occur with the customer's permission. DigiKaveri does not save files or browsing history on the customer's device to its own systems.

5. Data Content of the Registry and Retention Period

The following information is stored in the register:

First and last name
Phone number and email address
Information provided by the customer regarding the device and problem description
Service delivery address (for home visits to calculate travel fees and dispatch specialists)
Billing information and service history: invoice and receipt details such as billing address, work address, services billed, amounts, due date and payment date
Feedback survey answers: satisfaction rating, likelihood to recommend, how you heard about us and free-text comments. Answers are linked to your customer record so we can respond to your feedback. Answering the survey is voluntary.
Applicable promo or discount code metadata (e.g. single-use customer benefits)

Retention Period: Customer and billing data is retained for the period required by the Finnish Accounting Act (1339/1997, 6 years from the end of the financial year). Contact form submissions are retained for up to 12 months following completion of customer service, after which they are securely deleted. Feedback survey answers are retained for up to 3 years from answering. A personal feedback link expires after 90 days and can only be used once.

6. Regular Data Sources

Information is obtained directly from the customer via the website contact form, interactive price estimator, WhatsApp messages, email, phone calls, during in-person service appointments, or through a feedback survey sent to the customer.

7. Regular Disclosure of Data & Sub-processors

Personal data is never sold or disclosed to third parties for direct marketing purposes. Data may be disclosed to public authorities where required by statutory law or to debt collection agencies in cases of payment default.

We work with trusted technical service partners (GDPR Data Processors) to deliver our services:

Supabase Cloud Inc.: Cloud database for the service's systems: customer and service request records, invoices and receipts, feedback survey answers and single-use promo codes (EU-hosted servers, ISO 27001 & SOC 2 Type II certified).
Web3Forms: Encrypted, secure transmission of contact and booking requests.
Google Workspace & Cloud: Secure customer communications and scheduling tools.
OpenStreetMap & OSRM: Anonymous distance routing for travel fee calculations (no personal data stored).

Data is processed primarily within the EU/EEA. Where data is transferred outside the EU/EEA, European Commission Standard Contractual Clauses (SCCs) and the EU-U.S. Data Privacy Framework are strictly adhered to.

8. Cookies and Analytics (Consent Mode v2)

Our website uses cookies to ensure smooth technical performance and enhance the user experience:

Strictly Necessary Cookies: Essential for core website operations, such as remembering your chosen color theme (light/dark) and cookie preferences. Always active.
Analytics Cookies (Google Analytics 4): Collect anonymous visitor insights (IP anonymization enabled). These cookies only activate if you provide explicit consent in our cookie banner (Google Consent Mode v2 compliant).

You can adjust or withdraw your cookie preferences at any time via the "Cookie Preferences" link in the footer.

9. Principles of Registry Security

All personal data is processed with utmost care and modern security measures. All web traffic is encrypted with modern SSL/TLS protocols (HTTPS). Access to customer information is strictly restricted to designated, authorized specialists bound by confidentiality agreements, protected with multi-factor authentication (MFA).

10. Your Rights as a Data Subject

In accordance with GDPR Articles 15–22, you have the following rights:

Right of access (Art. 15): Right to obtain confirmation of whether your data is being processed and view stored information.
Right to rectification (Art. 16): Right to demand correction of inaccurate or incomplete personal data.
Right to erasure (Art. 17): Right to request deletion of personal data ("right to be forgotten"), unless statutory obligations (e.g. Accounting Act) require retention.
Right to restriction of processing (Art. 18): Right to restrict processing under certain statutory circumstances.
Right to data portability (Art. 20): Right to receive your personal data in a structured, machine-readable format.
Right to object (Art. 21): Right to object to processing on grounds relating to your particular situation.
Right to withdraw consent: Right to withdraw previously granted consent at any time.
Right to lodge a complaint: Right to lodge a complaint with the Finnish Data Protection Ombudsman (Office of the Data Protection Ombudsman, tietosuoja.fi/en).

All privacy requests should be sent in writing to info@digikaveri.com. We respond to all requests within one month.