Privacy at Padeia

We respect your right to privacy and are committed to protecting personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable laws. This Privacy Notice explains how we collect, use, and protect your information when you interact with Padeia.

Who We Are

Padeia AS

Gaustadalléen 21, 0349 Oslo, Norway

Email: privacy@padeia.com

Padeia is the data processor when processing personal data on behalf of customers using our SaaS platform. Our customers are typically the data controllers under GDPR.

What Data We Process

When you use our services (or when your company does), we may process:

• Identity & access data – names, email addresses, user IDs
• Profile data – job title, company, avatar or bio (if provided)
• Contact details – email, phone, address (where applicable)
• Support communications – messages exchanged with our team
• Usage data – service logs and user activity analytics (aggregated and pseudonymized)

We do not intentionally collect sensitive personal data (e.g. health data, religion, biometrics). Customers are advised not to upload such data unless contractually agreed.

How We Use the Data

We process data only to:

• Deliver and operate our SaaS services
• Provide customer support
• Ensure security and availability
• Improve our systems through anonymized insights

Where allowed, we may use aggregated and anonymized data for analytics and benchmarking — never in a way that could identify individuals.

Legal Basis

We process personal data based on:

• Performance of a contract (e.g., providing our services)
• Legitimate interests (e.g., security, improving functionality)
• Legal obligations (e.g., breach reporting, audits)

Data Hosting & Transfers

All data is hosted on Microsoft Azure in the European Union (West Europe and North Europe regions). We do not transfer personal data outside the EEA unless explicitly approved by the controller and safeguarded with Standard Contractual Clauses or adequacy decisions.

Your Rights

As a data subject, you may have the right to:

• Access your personal data
• Correct or update inaccurate data
• Delete data where applicable
• Object to certain processing
• Request data portability

If your data is processed by Padeia on behalf of a customer, please contact your service provider (the data controller) to exercise your rights. If you’re unsure, contact us at privacy@padeia.com.

Subprocessors

We use a limited number of sub-processors. You can view the full and updated list here: padeia.com/privacy/subprocessors

Security

We implement industry best practices for securing your data. Learn more at padeia.com/security

Contact & Complaints

If you have questions or concerns, contact us at privacy@padeia.com.

You also have the right to lodge a complaint with your national data protection authority — for Norway, www.datatilsynet.no.

‍