GDPR Compliance

1. Data Controller Information

Under the General Data Protection Regulation (GDPR), the data controller for your personal data is:

• Company: Agenton Oy
• Registration: Established and registered in Finland
• Jurisdiction: Subject to Finnish and EU data protection laws
• Contact: aleksi@agenton.ai

2. Lawful Basis for Processing

We process personal data under the following GDPR legal bases:

Article 6(1)(b) - Contract Performance

• Account creation and management
• Service delivery and maintenance
• Customer support

Article 6(1)(f) - Legitimate Interests

• Service improvement and optimization
• Fraud prevention and security

Article 6(1)(a) - Consent

• Marketing communications (where applicable)
• Optional analytics and tracking

3. Your Rights Under GDPR

You have the following rights regarding your personal data:

4. Data Storage and Security

• All personal data is stored within the European Union
• No international transfers outside the EEA
• End-to-end encryption for data in transit
• Industry-standard security measures implemented
• Regular security audits and assessments

5. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Account data is deleted upon request or account closure.

6. Supervisory Authority

You have the right to lodge a complaint with your local data protection authority. For Finland:

7. Contact for Data Protection Inquiries

For any GDPR-related inquiries or to exercise your rights, please contact us at: aleksi@agenton.ai