This Privacy Policy describes how Fimakron Oy ("Controller", "we") processes personal data in the Fimakron Platform service and its related applications (Fimakron Platform Management, Fimakron Betting Contest, Fimakron Share Invest).

1. Data Controller

Fimakron Oy
Business ID: 3488095-8
Address: Sininärhentie 3 A 5, 02650 ESPOO, Finland
Email: fimakron@fimakron.com
Website: https://www.fimakron.com

2. Personal Data Processed

2.1 Basic account information

• Name
• Email address
• Password (hashed)
• User roles and access rights
• Selected application (Platform / Betting Contest / Share Invest)

2.2 Login and log data

• Login timestamps
• IP address
• Session identifiers (session cookies)
• Log events (Platform Log data visible in the ADMIN interface)

2.3 Google Sign-In (OAuth)

Google provides during sign-in:

• Name
• Email address
• Identity verification confirmation

2.4 Betting Contest application data

• Match predictions made by the user
• Points and results
• Application internal settings

2.5 Fimakron Share Invest application data

• Investment areas selected by the user and their validity periods
• Investment parameters: return target and capital (entered by the user)
• Recommendation table data (calculated stock data, not personal data)

3. Purposes of Processing

• Creating and managing user accounts
• Authentication and login
• Access rights management
• Technical operation of the service (sessions, cookies, logs)
• Operation of the Betting Contest application
• Operation of the Share Invest application (stock recommendations, investment areas)
• Ensuring security and preventing misuse
• Compliance with laws and regulatory requirements

4. Legal Basis for Processing (GDPR Article 6)

• Contract: maintaining user accounts and service use
• Legitimate interest: service security, log data, preventing misuse
• Consent: Google OAuth sign-in
• Legal obligation: security and log data where required

5. Cookies

The service uses only strictly necessary cookies:

• sessionid — maintains the user session
• csrftoken — protects forms against misuse

Analytics or marketing cookies are not used without separate consent.

6. Retention Periods

• Account data: as long as the account is active
• Log data: 12–24 months
• Betting Contest data: until competition ends + 12 months
• Share Invest data: for the duration of the account; investment parameters and areas are deleted upon account deletion
• Google OAuth data: only during sign-in; no extra data is stored

7. Recipients of Data

• Google Ireland Ltd. (only during Google sign-in)
• Technical service providers (hosting provider, email service)
• Authorities, if required by law

Data is not disclosed for marketing purposes.

8. Transfers Outside the EU/EEA

Google OAuth sign-in may involve transfers outside the EU/EEA. Google uses EU Standard Contractual Clauses (SCC) to ensure data protection.

9. Rights of the Data Subject

You have the right to:

• access your data
• rectify your data
• erase your data ("right to be forgotten")
• restrict processing
• object to processing
• data portability
• withdraw consent (Google sign-in)
• lodge a complaint with a supervisory authority

10. Security

• HTTPS / SSL
• Server environment: Ubuntu, Nginx, Gunicorn
• Passwords stored as hashes
• Access controls (ADMIN / USER)
• Log data monitoring

11. Contact

For privacy matters, please contact:
Fimakron Oy
Email: fimakron@fimakron.com
Address: Sininärhentie 3 A 5, 02650 ESPOO, Finland

12. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy. The latest version is always available at: https://www.fimakron.net/privacy