Privacy Notice (GDPR)

Last updated: 27 January 2026

This privacy notice describes how personal data is processed in the FennTek service (https://fenntek.fi) in accordance with the EU General Data Protection Regulation (GDPR, EU 2016/679).

1. Data controller

Company: TachyoNet Oy

Service: FennTek

Email: info@fenntek.fi

Website: https://fenntek.fi

The controller is responsible for processing personal data as described in this notice.

2. Personal data we process

We process only personal data necessary for the service. This may include:

User account information

  • First and last name
  • Email address
  • Telephone number, stored in a standardised format, e.g. +358…
  • Username and password; the password is stored only in encrypted form

Customer and order information

  • Orders, licences and validity periods
  • Information related to payment transactions, through the payment provider
  • Billing and delivery addresses

Information related to use of the service

  • The user’s permissions and role in the service
  • Group and access permission information
  • Associations relating to devices and licences

Technical information

  • IP address
  • Sign-in and log data
  • Cookies and similar technologies

3. Purposes of processing personal data

Personal data is processed for the following purposes:

  • Creating and managing user accounts
  • Providing and maintaining the service
  • Managing licences and access rights
  • Connecting devices and users to the tracking service
  • Customer service and technical support
  • Billing and payment processing
  • Developing the service and ensuring information security
  • Complying with legal obligations

4. Legal basis for processing

Personal data is processed on the following grounds under the GDPR:

  • Contract: personal data is needed to provide the service to the customer
  • Legal obligation: for example, accounting and taxation
  • Legitimate interest: service security, prevention of misuse and development
  • Consent: for example, marketing communications, where separately given

5. Recipients and transfers of data

Personal data may be transferred or disclosed to the following parties only to the extent necessary to provide the service:

  • Payment providers, such as card and online banking payment providers
  • Hosting and server infrastructure providers
  • Technology services used to deliver the tracking service

Data is not sold or disclosed to third parties for marketing purposes.

Data may be transferred outside the EU/EEA only if the level of data protection has been ensured as required by the GDPR, for example through the EU Standard Contractual Clauses.

6. Data retention

Personal data is retained only for as long as necessary:

  • For the duration of the customer relationship
  • For the duration of licences and contractual obligations
  • In accordance with statutory retention periods

Data that is no longer needed is deleted or anonymised.

7. Rights of data subjects

Data subjects have the following rights:

  • The right to access their personal data
  • The right to request rectification of inaccurate data
  • The right to request erasure of data, the “right to be forgotten”
  • The right to restrict processing
  • The right to object to processing
  • The right to data portability
  • The right to withdraw consent, insofar as processing is based on consent

Requests should be sent by email to info@fenntek.fi.

8. Information security

Personal data is protected by appropriate technical and organisational measures, such as:

  • Encrypted connections (HTTPS)
  • Access control
  • Server- and application-level security solutions
  • Restricted access to personal data

9. Cookies

FennTek uses cookies and similar technologies to ensure the service operates, improve the user experience and provide analytics.

Users can manage cookies through their browser settings or a separate cookie notice.

10. Android/iOS app

Mobile app (Android/iOS)

This section supplements the FennTek privacy notice and applies to the FennTek mobile app for Android and iOS.

Data processed in the mobile app

The mobile app may process the following data to provide the service:

1) User account data

  • Name and email address, insofar as these are provided during sign-in.
  • The user’s role and permissions, such as viewer, owner or administrator, and group memberships in the service.

Note: sign-in uses OpenID Connect (Keycloak). As a rule, the password is not stored in the mobile app.

2) Location data (optional)

  • Precise location, from GPS and/or other positioning sources, when the user enables “Show my location on the map”.
  • Location may be displayed on the map in the mobile app and sent to the server at the selected interval so that it is visible to users/groups with permission to view the device.

Background location: the user may allow location updates even when the app is not actively displayed on screen, for example by selecting “Allow all the time” / “Always”. Background updates depend on the operating system permissions granted by the user.

3) App identifiers

  • App ID, a device-specific identifier generated by the app, used, for example, to identify the mobile device (“handset”) on the server and enable location sharing.

This identifier is not used for targeted advertising.

4) Device information and technical logs

  • IP address, sign-in and usage logs, and technical error/diagnostic data to ensure the operation of the servers and app.
  • Information about devices that the user adds/views in the service, such as the tracker’s name, uniqueId/IMEI, group associations and access rights.

5) Push notification data (optional)

  • To deliver push notifications, the mobile app may process push identifiers (Android: FCM token; iOS: APNs token) and technical information related to notification delivery.

Purposes of processing in the mobile app

Personal data is processed in the mobile app for purposes including:

  • Enabling sign-in and use of the user account
  • Displaying devices and groups on maps and in list views
  • Displaying location and, at the user’s choice, sending it to the tracking service
  • Managing groups and access rights, such as joining a group with a join code
  • Delivering push notifications, such as alerts
  • Information security, prevention of misuse and technical maintenance of the service

Legal basis for processing

Processing in the mobile app is based on:

  • Contract, to provide the service
  • Legitimate interest, for the security and reliability of the service
  • Consent, insofar as processing requires operating system permission, such as location and push notifications

Recipients and transfers of data (mobile app)

Data may be processed by or transferred to the following parties to deliver the service:

  • Identity management / sign-in: Keycloak (OpenID Connect)
  • Tracking service: Traccar and related server components
  • Push notifications on Android: Google Firebase Cloud Messaging (FCM)
  • Push notifications on iOS: Apple Push Notification service (APNs)
  • Map services and map layers: providers of map tiles and map data, such as Google Maps, National Land Survey of Finland background maps and OpenTopoMap, which may process technical information such as IP addresses when map data is downloaded

Data may be transferred outside the EU/EEA only if the level of data protection has been ensured as required by the GDPR, for example through the EU Standard Contractual Clauses.

Retention period

Data generated through the mobile app is retained only as long as necessary to provide the service and in accordance with the customer relationship, licences and statutory retention periods described in this notice.

User choices and rights in the mobile app

Users can manage mobile app permissions and data processing as follows:

  • Location: Settings → “Show my location on the map”, and the device’s operating system location permissions.
  • Background location: through operating system settings, for example “Allow all the time” / “Always”.
  • Push notifications: through operating system notification settings.

Other data subject rights are described in the main privacy notice.

11. Changes to the privacy notice

We reserve the right to update this privacy notice. The current version is always available at https://fenntek.fi.

12. Contact

For questions and requests relating to data protection, contact:

TachyoNet Oy / FennTek

Email: info@fenntek.fi

Share this link:
Shopping Basket

Scroll to Top