Privacy & Personal Data Policy
Effective Date: 30 June 2025
This Privacy and Personal Data Policy explains how Finnworlds (“we”, “us”, or “our”) processes your personal data when you visit our Website at www.finnworlds.com (“Website”) or use our Services, including API subscriptions, standalone database purchases, and customer support.
We are committed to protecting your privacy and complying with applicable data protection laws, including the EU General Data Protection Regulation (GDPR).
This Policy applies to:
- Visitors to our Website,
- Users of our Services,
Individuals contacting us for support, billing, or other inquiries.
It explains:
- What personal data we collect,
- Why and how we process it,
- How long we retain it,
Your rights under applicable laws.
What Personal Data We Collect
| Data Type | Purpose |
|---|---|
| Name | To identify you |
| Email address | To communicate with you, including service and account updates |
| Company name and country | For billing, invoicing, and usage reporting |
| Address (if provided) | For invoicing and legal compliance |
| API usage logs | For service performance, usage tracking, and abuse prevention |
| IP address and user agent | For security, analytics, and regional interest analysis |
| Timestamp of API calls | To monitor usage and ensure service availability |
How We Use Your Data
We collect and process your personal data only when we have a lawful basis to do so under the EU General Data Protection Regulation (GDPR). Depending on your relationship with us and the specific context, we may process your data for one or more of the following purposes:
- To provide our Services to you, including access to API subscriptions, standalone database purchases, and customer support. This is necessary for the performance of a contract between you and Finnworlds.
- To process payments and issue invoices, in compliance with accounting and tax regulations. This processing is necessary to meet our legal obligations under applicable laws.
- To respond to your inquiries and support requests, which is based on our legitimate interest in providing effective customer service and maintaining good client relationships.
- To monitor and maintain the functionality and security of our Services, including API usage tracking and abuse prevention. This is based on our legitimate interest in ensuring the security and reliability of our systems.
- To send important updates related to your account, such as changes to our terms or this Privacy Policy. This processing is either based on a legal obligation or our legitimate interest in keeping users informed.
- To send promotional emails or marketing communications, if you have explicitly opted in. In such cases, the legal basis is your consent, which you may withdraw at any time.
We do not use your personal data for automated decision-making or profiling that would have legal or significant effects on you.
Cookies and Analytics
We use Cookies and Web Beacons to improve your experience and analyze traffic on our Website.
Examples of data collected via cookies:
- Browser type and language,
- IP address or proxy,
- Country or region,
- Referral source,
- Pages visited and links clicked,
- Timestamps of visits.
This data is used to:
- Improve Website performance,
- Tailor user experience,
- Understand regional interest in our Services.
You will be asked for consent to non-essential cookies when you first visit our Website. You can withdraw your consent or clear cookies via your browser settings at any time.
Advertisers may use cookies on our Website. We do not control third-party cookie practices.
Third-Party and International Transfers
We may share personal data with third parties only in the following circumstances:
- With service providers such as hosting companies, accountants, auditors, cybersecurity professionals, or legal advisors, solely for the provision of the Services.
- With regulatory authorities or courts, if legally required or to protect our legitimate interests (e.g. fraud prevention).
- With advertising or analytics platforms (non-personal data only, and only if you opt in).
Some data may be transferred outside the European Economic Area (EEA). In such cases, we ensure appropriate safeguards (e.g. Standard Contractual Clauses) are in place.
Data Security
We implement technical and organizational measures to protect your data, including:
- Hosting with certified, secure cloud providers,
- Encrypting data in transit (HTTPS),
- Limiting access to authorized personnel,
- Staff training on GDPR and data handling.
While no system is 100% secure, we take all reasonable precautions. You are responsible for keeping your API key, passwords, and devices secure.
Your Rights Under GDPR
As a data subject under GDPR, you have the right to:
- Access your personal data,
- Rectify inaccurate or outdated information,
- Request erasure (“right to be forgotten”),
- Restrict processing under certain conditions,
- Object to processing based on legitimate interest,
- Withdraw consent at any time (e.g. for marketing),
- Avoid automated decision-making (we do not engage in this).
To exercise these rights, please contact us at:
📧 support@finnworlds.com
Children’s Data
Our Services are not directed to individuals under the age of 16. We do not knowingly collect or process personal data of children.
External Links
Our Website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. Please review their privacy policies before providing any personal data.
Changes to This Policy
We may update this Policy from time to time. If we make material changes, we will notify you via email. You may be asked to accept the new Policy before continuing to use our Services.
If you do not accept the updated Policy, you may withdraw your consent and request deletion of your data. However, this may limit our ability to continue providing the Services.
Contact Us
For any questions, requests, or concerns regarding this Privacy and Personal Data Policy, please contact:
Finnworlds
📧 support@finnworlds.com
🌐 www.finnworlds.com