Data processing terms

Draft for legal review. These terms are not final.

These terms apply when an employer uses Landed to invite and follow hires. They form part of our terms and meet Article 28 of the GDPR.

Roles

The employer is the controller of its hires' personal data in Landed. Strateal Oy (Business ID 1821241-5), Finland, is the processor and processes that data only on the employer's documented instructions, which are these terms and the employer's use of the service.

What data and why

• Hires: name, email address, move date, city, whether they move from abroad, citizenship group (EU or not), whether family is coming, step states and help notes.
• Employer users: email address and role.
• Purpose: to give each hire a checklist, send them their link and reminders, and show the employer their progress.

Offer clicks are not linked to hires and are not processed for the employer. Strateal Oy handles them as its own data, as the privacy policy explains.

Our commitments

• Everyone at Strateal Oy who can access the data is bound by confidentiality.
• Data is encrypted in transit and stored in an EU region. Access is limited to the people who run the service.
• We help the employer answer requests from hires who use their data protection rights.
• We tell the employer without undue delay, and within 48 hours where we can, after we become aware of a personal data breach.
• We give the employer the information needed to show compliance, and allow an audit on reasonable notice, at the employer's cost.

Subprocessors

• Railway: hosting and database, EU region.
• Resend: sending emails to hires and employer users.
• Stripe: billing for paid plans. It receives employer billing details, not hire data.

We'll tell employers at least 30 days before adding or replacing a subprocessor, so they can object.

Deletion

A hire's data is deleted automatically twelve months after their move date. The employer can delete a hire sooner at any time. When an employer stops using Landed, we delete its hires' data within 30 days, unless the law requires us to keep it.

Contact

Data protection questions go to info@strateal.com.