Privacy Notice

1. Data controller

The data controller for this service is:

Questions concerning privacy or requests relating to personal data may be sent to the email address above.

2. Purpose of processing

The daycare system processes personal data only as necessary to provide, maintain, secure, and administer the service.

The system is used for daycare-related communication and administration. It stores account information and content entered or uploaded by authorized users.

Personal data is not collected for advertising, profiling, or sale to third parties.

3. Data processed

Depending on how the service is used, processed data may include:

• names, email addresses, account identifiers, roles, and language preferences;
• information concerning daycare units, children, guardians, staff, and their authorized relationships;
• attendance reservations and attendance-related information;
• messages, feedback, notifications, events, and other user-created content;
• images and files uploaded by users;
• security, authentication, audit, and technical log information needed to operate and protect the service.

Users should only enter information that is necessary for the intended daycare-related purpose.

4. Legal basis

Personal data is processed when necessary to provide and administer the service, fulfil agreements and service arrangements, comply with legal obligations, protect the security of the system, and support the legitimate operation of the service.

Where processing requires consent under applicable law, consent will be requested separately.

5. Recipients and hosting

Personal data is made available only to authorized users whose role and relationship permit access to the relevant information.

Technical service providers may process data only as necessary to provide hosting, email delivery, maintenance, security, or other essential system services.

The system is hosted using infrastructure operated by OVH Groupe SA. The relevant data centre is physically located in Gravelines, France. Data is intended to be processed within the European Union and in accordance with applicable EU data-protection requirements.

Personal data is not sold.

6. Retention

Personal data is retained only for as long as reasonably necessary for operation of the service, the relevant daycare relationship, legal obligations, security, dispute handling, and recovery from technical incidents.

Retention periods may vary according to the type of information and the requirements applicable to the relevant daycare operator or organization.

Backups may retain information for a limited additional period before they are replaced or securely deleted.

7. Security and possible data loss

Palmgren Games Oy uses reasonable technical and organizational measures to protect personal data and preserve service data.

The service remains under active development. Although reasonable efforts are made to prevent data loss and maintain reliable backups, uninterrupted availability and complete preservation of all content cannot be guaranteed in every exceptional or unforeseeable event.

In a rare serious technical incident, some information could be lost or deleted. Data loss does not by itself mean that personal data has been disclosed to an unauthorized person or otherwise compromised.

Affected users or organizations will be informed when notification is required or reasonably necessary.

8. User rights

Subject to applicable law, users may have the right to:

• request access to their personal data;
• request correction of inaccurate data;
• request deletion of data;
• request restriction of processing;
• object to certain processing;
• receive applicable data in a portable form;
• withdraw consent where processing is based on consent.

Some rights may be limited where processing is required by law, necessary for the rights of other persons, or necessary for operation and security of the service.

Requests may be sent to palmgrengames@gmail.com. The requester’s identity may need to be verified before a request is fulfilled.

9. Complaints

A user who believes that personal data has been processed unlawfully may contact Palmgren Games Oy or lodge a complaint with the Office of the Data Protection Ombudsman in Finland.

10. Changes

This notice may be updated when the service, its processing activities, or applicable requirements change. The current version will be available on this page.