This policy is a template for the demo site. Replace the bracketed details and have it reviewed before going live.
This policy explains how [Company name] ("we") processes personal data when you use the Info Display service ("the service") and this website. We act as the controller for account and website data, and as a processor for the content our customers put on their screens.
Who we are
[Company name], [business ID], [street address], [postcode and city], [country]. Contact: display@8w.fi.
What we process
| Data | Examples | Why | Legal basis |
|---|---|---|---|
| Account data | Name, email address, password hash, language, role | To provide accounts and access control | Contract |
| Usage and security logs | Sign-in times, IP addresses, audit events (pairing, publishing, role changes) | Security, abuse prevention, troubleshooting | Legitimate interest |
| Screen data | Screen name, model, OS and agent version, IP addresses, status, screenshots you request | To operate and monitor your screens | Contract |
| Customer content | Media, slides, playlists and schedules you upload | To show it on your screens | Contract (we process it on your behalf) |
| Billing data | Billing contact, company details, invoices | Billing and accounting obligations | Contract, legal obligation |
| Enquiries | What you send us by email | To answer you | Legitimate interest |
We don't sell personal data and don't use it for advertising.
Website
This website is static. It sets no cookies, uses no analytics or tracking scripts, and loads no third-party fonts or resources. Our hosting provider keeps standard server logs (IP address, time, requested page) for up to [30] days for security.
The editor at https://signage.8w.fi uses one strictly necessary session cookie to keep you signed in.
Where data is stored
| What | Provider | Location |
|---|---|---|
| Application servers and database | [Hosting provider] | [Country / region] |
| Media storage | [Object storage provider] | [Country / region] |
| [Email provider] | [Country / region] |
If data is transferred outside the EU/EEA, we rely on an adequacy decision or the European Commission's standard contractual clauses.
How long we keep it
- Account data: while your account exists, and up to [90] days after closing it.
- Customer content: until you delete it or your subscription ends, then deleted within [30] days.
- Security and audit logs: [12] months.
- Billing records: as required by accounting law ([6] years).
Your rights
You have the right to access, correct and delete your personal data, to restrict or object to processing, and to data portability. Write to display@8w.fi. You also have the right to lodge a complaint with your data protection authority.
If your account belongs to an organisation (for example your employer), that organisation controls the content and accounts in its workspace; we'll forward your request to them where appropriate.
Security
See our security overview for how we protect data.
Changes
We'll post updates here and notify account holders by email of material changes.