Privacy Policy

At Rosa 01, we take data privacy seriously and are committed to complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Here's how we handle GDPR and data privacy matters to ensure the security and confidentiality of your personal information:

Transparency: We are transparent about how we collect, use, and process your personal data. Our Privacy Statement clearly outlines the types of data we collect, the purposes for which we use it, and your rights regarding your personal information. Our HQ, Rosa 01 Oy is incorporated in Finland. Rosa 01 Oy has been appointed responsible for handling all data subject requests and questions relating to the personal data processing of the Rosa 01.
Lawful Basis: We only collect and process personal data when we have a lawful basis to do so. This includes obtaining your consent, fulfilling contractual obligations, complying with legal requirements, or pursuing legitimate interests.
Data Minimisation: We collect and retain only the personal data that is necessary for the purposes for which it was collected. We do not store more data than is required, and we regularly review and update our data storage practices.
Security Measures: We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, misuse, loss, or alteration. These measures include encryption, access controls, and regular security assessments.
Data Subject Rights: We respect your rights regarding your personal data, including the right to access, rectify, delete, or restrict the processing of your information. If you have any requests or inquiries regarding your data, you can contact our Data Protection Officer or Customer Support team at info@rosa01.io.
Data Transfers: If we transfer your personal data to third parties or international organisations, we ensure that adequate safeguards are in place to protect your privacy rights. This may include implementing standard contractual clauses or relying on other legal mechanisms recognised by data protection authorities.
Data Breach Response: In the event of a data breach involving your personal information, we have procedures in place to promptly assess the breach, mitigate any risks, and notify relevant authorities and affected individuals as required by law.
Compliance Monitoring: We regularly review and update our data processing practices to ensure compliance with GDPR and other applicable data protection regulations. Our internal processes are designed to promote a culture of privacy and accountability throughout the organisation.

If you have any questions or concerns about how we handle GDPR and data privacy matters, please don't hesitate to contact us. Your privacy and trust are important to us, and we are committed to protecting your personal information to the best of our ability.