Privacy Policy

1. Roles and scope

Odenaro provides hosted χώρο εργασίαςs to businesses. For personal data that customers place in their χώρο εργασίας, the customer generally acts as υπεύθυνος επεξεργασίας and Odenaro acts as εκτελών την επεξεργασία. Odenaro may act as υπεύθυνος επεξεργασίας for account administration, subscription, security, support and service-operation data.

2. Data we process

Depending on the selected product, data may include account and company details, login and security activity, customer and supplier records, invoices, payments, inventory, operational records, support communications and product-specific records. Some products may contain information about children, guardians, attendance, επαφές έκτακτης ανάγκης, allergies or ιατρικές σημειώσεις when entered by the customer.

3. Purposes

We process data to provide and secure the service, authenticate users, deliver requested features, manage subscriptions, provide support, prevent abuse, troubleshoot incidents, maintain δυνατότητα ελέγχου and comply with applicable legal obligations.

4. Service providers and subεκτελών την επεξεργασίαs

We use service providers for infrastructure, αποστολή email, payments and other operational services where required. The current categories and principal providers are listed on our Subεκτελών την επεξεργασίαs page. Providers receive only the access needed for their service and are subject to applicable contractual and μέτρα ασφάλειας.

5. Security, αρχεία ελέγχου and access

We apply technical and organisational measures including έλεγχοι πρόσβασης, διαχωρισμός δεδομένων πελατών, πιστοποίησης protections, αντίγραφα ασφαλείας and καταγραφή συμβάντων ασφάλειας. Critical actions may generate limited μεταδεδομένα ελέγχου. Audit logs are not intended to contain sensitive free-text content and are retained separately where needed for integrity, security and dispute resolution.

6. Retention and deletion

Data is retained only for as long as needed for service delivery, contractual, security or legal purposes. Different categories may have different διατήρησης periods. Deletion of a επιχειρησιακής εγγραφής does not necessarily require immediate deletion of minimal μεταδεδομένα ελέγχου where a legitimate security, συμμόρφωσης, dispute-resolution or legal-διατήρησης purpose remains. Our Retention Policy provides more detail.

7. International use and local obligations

Odenaro may be used by customers in multiple jurisdictions. Customers are responsible for ensuring they have a lawful basis to enter personal data into the service and for providing notices, obtaining permissions or consents, and meeting local ειδικές ανά κλάδο requirements where applicable.

8. Rights and contact

Requests relating to data held inside a customer χώρο εργασίας should normally be directed first to that customer as υπεύθυνος επεξεργασίας. For Odenaro απορρήτου matters contact info@odenaro.com.