Skip to main content

Software Privacy Statement

L
Written by Lassi kähkönen
Updated over a week ago

Epic Invoicing Oy — Combined Registry Statement and Information Document

(In accordance with the Finnish Personal Data Act 523/1999, Sections 10 & 24)


📌 Data Controller

Epic Invoicing Oy
Email: support@eemel.fi


📂 Name of the Register

Customer register of Epic Invoicing Oy


🎯 Purpose of Processing

The purpose of processing company data is to manage tasks and services related to the operation of the invoicing software, as well as to handle and develop customer relationships. Company data may also be used for user identification and authentication, risk management, and compliance with legal or regulatory obligations.


👥 Data Subjects

Any person or company with an existing or potential customer relationship with the controller, or a registration arising from legal obligations.


🧾 Content of the Register

Basic information about the user, such as:

  • Name

  • Business ID (Y-tunnus)

  • Contact persons

  • VAT registration status

  • Email addresses

  • Mobile phone numbers

  • Subscribed product

  • Other data collected during the use of the service and any data required by law


🔄 Regular Disclosures of Data

Data may be disclosed to authorities in accordance with legal data access rights. Otherwise, information is disclosed only with the data subject’s consent or authorization.


📥 Regular Sources of Data

Data is collected from:

  • The data subject directly

  • Associations

  • Companies

  • Official information systems


🌍 Transfer of Data Outside the EU/EEA

Data is not transferred outside the EEA, except in cases where personnel or third parties outside the EEA require access to provide the service. In such cases, compliance with data protection legislation is ensured.


🔐 Data Protection Principles

  • Registry use is strictly regulated

  • Users are carefully authenticated and their access rights monitored

  • Data is protected using appropriate methods


📑 Right of Access and How to Exercise It

Every registered individual has the right to inspect their personal data. Access is free of charge if more than a year has passed since the last request. Requests must be submitted to the data controller either as a signed or verified document, or in person.


✏️ Data Correction and Implementation

The controller will correct any inaccurate, unnecessary, incomplete, or outdated information upon request without undue delay.

Did this answer your question?