Privacy Policy
This policy explains how Adelianz handles personal data. We act in two distinct roles, and this policy keeps them apart, because which one applies decides who you should contact about your data.
1Our two roles
Controller — for data we process for our own purposes: visitors to this website, business enquiries, and the contact and billing details of the organisations that use our platform.
Processor — for the client data that accounting firms and corporate service providers process using our platform. For that data the customer firm is the controller; we act only on its documented instructions under a Data Processing Agreement.
If you are being onboarded or verified by a firm that uses Adelianz, the controller of your data is that firm, not us. Please refer to their privacy notice, or contact them directly, for controller-level information and to exercise your rights.
2Data we process as controller
| Context | Data | Purpose & legal basis | Retention |
|---|---|---|---|
| Website | Usage, device, cookies | Operate, secure and improve the site — legitimate interest; consent for non-essential cookies | Up to 12 months |
| Enquiries and demo requests | Name, email, company, message | Respond and follow up — pre-contractual steps / legitimate interest | 24 months from last contact |
| Customer accounts and billing | Name, business email, role, billing details | Provide and administer the service, invoicing and tax — contract and legal obligation | Term of the agreement, then the statutory accounting period |
| Marketing (opt-in) | Contact details and preferences | Product updates — consent | Until you withdraw consent |
We do not use this data to make automated decisions producing legal effects.
3Data we process as processor
When a customer firm uses the platform, we process the personal data of that firm’s clients solely to provide the platform, and solely on the firm’s instructions. This can include identity and contact data, identity-document data, biometric data used for identity verification, beneficial-ownership data, screening results, and electronic-signature and audit records.
For that data the customer firm determines the purposes, the lawful basis and any Article 9 GDPR condition — including for biometric data. We do not make those determinations and we do not use the data for our own purposes. The arrangement is set out in our Data Processing Agreement with each customer.
4Sub-processors
To provide the platform we use vetted sub-processors under Article 28 GDPR:
| Sub-processor | Purpose | Location |
|---|---|---|
| EID Easy OÜ | Qualified electronic signature and seal | Estonia (EU) |
| Didit Identity Spain, S.L. | Identity verification, including biometric processing | Spain (EU) |
| Contabo GmbH | Cloud infrastructure and object storage | Germany and France (EU) |
The current list, with safeguards, is maintained in the Data Processing Agreement and available to customers. We give notice before adding or replacing a sub-processor.
5International transfers
The platform and its sub-processors are located in the EU/EEA. We do not currently transfer personal data outside the EEA. Should that change, the transfer will be covered by an appropriate safeguard — an adequacy decision or Standard Contractual Clauses — and this policy will be updated.
6Security
We apply appropriate technical and organisational measures, including role-based access control, isolation between customers, encryption in transit and at rest, access logging and backups.
7Your rights
For data we control (section 2) you may request access, rectification, erasure, restriction or portability, object to processing, and withdraw consent at any time. Write to privacy@adelianz.eu.
For data we process on a customer firm’s behalf (section 3), please contact that firm as controller. If you contact us, we will refer your request to them and assist as required.
You may also lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) or with the supervisory authority where you live.
8Cookies
This website uses only cookies that are necessary for it to function. If we introduce analytics or other non-essential cookies, we will ask for your consent first and describe them here.
9Changes and contact
We may update this policy; the version and effective date above always show the current text. Questions: privacy@adelianz.eu — Adelianz OÜ, Harju maakond, Tallinn, Kesklinna linnaosa, Viru väljak 2, 10111, Estonia.