Privacy Policy

Last updated: April 8^th, 2025

This Privacy Policy lays out how we protect your (“You”; “Data Subject”) rights and freedoms when processing your personal data. The purpose of data protection is to define when and under what conditions personal data can be processed. This privacy policy (“Privacy Policy”) explains in detail how we collect, use and disclose your personal data.
‍

1. GENERAL INFORMATION

1.1 About this Privacy Policy. This Privacy Policy (the “Privacy Policy”) governs the processing of personal data by Playmerce Solutions Oy (3510410-9) (“Us”; “Playmerce”). The Privacy Policy does not cover any third-party websites, applications, software, products, or services. Please note that Playmerce is not responsible for how the online store displaying our services processes your data outside the scope of the services or functionalities provided by Playmerce.

1.2 Our role as a data controller and data processor: We may act either as a data controller or a data processor. Our role depends on the specific situation in which personal data is handled by us, as explained in detail below:

1. Data controller. When we are the data controller, we determine the purposes and means of the processing of personal data. Hence, we are the controller when you send us an inquiry or conclude a service with us. Situations when we are the controller of personal data are further explained in this document. We comply with the data controller’s obligations set forth in the applicable laws.
2. Data processor. We are a data processor when we process personal data on behalf of our customers. In our role as a processor we process your data only as instructed by the respective data controller. Such instructions can be found from data processing agreement (the “DPA”) which is incorporated as an appendix into our Terms and Conditions (link to terms). The DPA is concluded automatically upon acceptance of the Terms and Conditions.

1.3 Minors. Our service is not intended for use by children (i.e., persons who are minors in their country of residence). Therefore, we do not knowingly process minors’ personal data. If you, as a parent or a legal guardian of a child, become aware that the child has submitted his/her personal data to us, please contact us immediately. We will delete your child’s personal data from our systems without undue delay.

1.4 Amendments. The Privacy Policy may be updated from time to time. We encourage you to review our Privacy Policy to stay informed.

1.5. Security. We use commercially reasonable administrative, technical, personnel, and physical measures designed to safeguard information in its possession against loss, theft and unauthorized use, disclosure, or modification.  

2. WHAT PERSONAL DATA DO WE COLLECT, FOR WHAT PURPOSES AND ON WHICH LEGAL BASIS?

2.1 Personal data processed. We shall process the following personal data provided by you:

1. Usage information. When you interact with our services, we process your IP address, analytics identifiers and record your interactions with our analytics and reporting solution.
2. Inquiries. When you contact us, we process information related to your inquiry such as your name, email address, possible company name and any information that you decide to include in your message.

2.2. Legal basis. We use your personal data to provide you with the service and/or fulfil the contractual obligations. This requires us to process your above mentioned personal data for the customer /partner relationship management, support, and communication, conducting customer surveys, customer complaint handling, maintenance, software and system updates, user identification as well as for problem diagnosis and fixing. Hence, the above-mentioned processing of your personal data is based on your contract with us.

2.3. Purpose. In addition to the foregoing, we use your abovementioned personal data for the following purposes based on legitimate interests pursued by us:

• Analytics and development purposes, including creating aggregated groups based on your usage activities. This also enables us to understand our users’ needs as customers and to improve the quality and user experience of our current and future services and offerings.
• Information and account security purposes, including detecting or preventing various types of misuse of services and fraud to provide you with secure and reliable services.

2.4. Electronic Direct Marketing and communication via email. We may send you electronic direct marketing, such as newsletters, promotions about new products as well as information about user surveys and trials, by email. You can opt-out of such electronic direct marketing or communication at any time free of charge by clicking on the “unsubscribe” link included in our newsletters, adjusting the settings of your user account, or by contacting us directly.

2.5. Sensitive data. We do not collect or have access to any special categories of personal data as defined by Art. 9 of the GDPR (“sensitive data”) from

3. HOW LONG DO WE KEEP YOUR PERSONAL DATA?

3.1. Retention of personal data. We store your personal data only for as long as such personal data is required for the purposes described in this Privacy Policy or until you request us to delete your personal data, whichever comes first. If you wish to know more about Your rights, please see chapter 6 of this Privacy Policy.

4. HOW DO WE SHARE AND DISCLOSE YOUR DATA?

4.1 Location of personal data. We store your data in the databases located in the EU/EEA. However, our third-party vendors may be located outside the EU, including the United States.

4.2 Sharing of your personal data. We share your data in the following ways:

• Our third-party vendors, who provide us with cloud-based IT and business support as well as customer care services, may need to process your information. All such third parties are operating under contract and acting on behalf of us.
• Competent authorities. When required in response to a legal process or request from a competent authority according to applicable laws or in connection with a legal proceeding or process.
• Mergers, acquisitions or sale of assets. When required as part of a merger, acquisition, sale of assets (such as service agreements) or transition of service to a group entity or another company.

4.3 International transfers. When transferring and disclosing your data outside the EU/EEA in above mentioned situations, where the local law may not provide the same level of protection, we comply with applicable legal requirements for providing adequate safeguards to such transfer by e.g. using the European Commission's Standard Contractual Clauses (SCC).5. COOKIES

Cookies are used to recognize a device and collect certain information about the use of websites and services online. You can manage your cookie consents at the data controller’s site. The cookies listed in Section 8 of this Privacy Policy are used in order to provide the service.

The cookies listed in Section 8 may be divided into the following types;

• Essential technical cookies that are strictly necessary to ensure the correct functioning and the provision of the services requested by you;
• Preference cookies that record information about the choices that you make on Playmerce solution;
• Marketing cookies that allow us to create, implement, and examine our marketing and marketing campaigns. Such cookies allow us to identify and reach the right customers and offer you personalised advertisement; and
• Statistics cookies that allow us to generate statistical reports about how you use Playmerce solution.

6. WHAT RIGHTS DO YOU HAVE WITH REGARD TO YOUR PERSONAL DATA?

6.1 Data Subject Rights. You have the right to control how your personal data is processed by us by exercising the rights listed below:

• Right of access: you can get a copy of your personal data that we store in our systems;
• Right to rectification: you can rectify inaccurate personal data that we process about you;
• Right to erasure (‘right to be forgotten’): you can ask us to erase your personal data;
• Right to restriction: you can ask us to restrict the processing of your personal data if;
1. Your data is unlawfully processed, but you do not want to erase it.
2. You have a legal claim that you need to establish, exercise, or defend, and you requested us to keep your data when we would not keep it otherwise.
3. You have contested the accuracy of your personal data and the accuracy of your data is pending our verification.
4. Your request for objection is pending our verification process‍
• Right to data portability: you can ask us to provide you with a copy of your personal data in a structured, commonly used and machine-readable format ‍
• Right to object: you can ask us to object processing your personal data when processing is based on legitimate interest
• ‍Right to withdraw consent: you have the right to withdraw your consent, if you have provided one; or‍
• Right to complaint: you can submit your complaint regarding our processing of your personal data to the local data protection authority. For more information, please see for example https://tietosuoja.fi/en/home.

6.2 How to exercise your rights? If you would like to exercise any of your rights, please contact us by email at hello@playmerce.com and explain your request in detail. In order to verify the legitimacy of your request, we may ask you to provide us with an identifying piece of information that allows us to identify you in our system. We will answer your request within a reasonable time frame but no later than one month.

7. CONTACT

If you have any questions about this Privacy Policy or our data protection practices or wish to exercise your rights, please contact us by:

Email: hello@playmerce.com

Saukopaadenranta 20 A 17, 00180 Helsinki, Finland

8. LIST OF COOKIES IN USE

Below, you can find a list of cookies that we use on Playmerce, including their purpose and expiration time:

Marketing cookies:

Name: fr

Type: Third-party HTTP cookie

Provider (location): facebook.com (US)

Expiration: 3 months

Purpose: The cookie is set by Facebook to show relevant advertisements to you and measure and improve the advertisements. The cookie also tracks your behavior across the web on sites that have Facebook pixel or Facebook social plugin.

‍

Name: fbp

Type: First-party HTTP cookie

Provider (location): https://www.playmerce.com/ (Finland)

Expiration: 3 months

Purpose: The cookie is used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers.

‍

Name: tr

Type: Third-party pixel cookie

Provider (location): facebook.com (US)

Expiration: End of session

Purpose: The cookie is used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers.

Statistics cookies:

Name: _ga

Type: First-party HTTP cookie

Provider (location): https://www.playmerce.com/ (Finland)

Expiration: 2 years

Purpose: The cookie is used to set a unique ID that is used to generate statistical data on how you use Playmerce.

‍

Name: _gat

Type: First-party HTTP cookie

Provider (location): https://www.playmerce.com/ (Finland)

Expiration: 1 day

Purpose: The cookie is used by Google Analytics to throttle request rate.

‍

Name: _gid

Type: First-party HTTP cookie

Provider (location): https://www.playmerce.com/ (Finland)

Expiration: 1 day

Purpose: The cookie is used to set a unique ID that is used to generate statistical data on how you use Playmerce.