Effective Date 2025-01-01
Tapesafe ("we," "us," or "our") is a data archiving service specializing in the secure storage and management of data on magnetic tape media. We are committed to protecting the privacy and security of your personal data in accordance with the European Union's General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679).
This policy explains what personal data we collect, how we use it, our legal basis for processing, how we protect it, and your rights concerning your data.
Tapesafe acts as the Data Controller for the personal data we collect about our customers (e.g., your contact and billing information). We act as a Data Processor for the archival data you store on tape, as you determine the purpose and means of processing that data.
| Data Controller | Tapesafe by Formativity AS |
|---|---|
| Address | Osterhaus' gt 21B, 0183 Oslo, Norway |
| Email for Privacy Concerns | privacy@tapesafe.eu |
We collect and process the following categories of personal data from our clients:
| Data Category | Examples of Data Collected | Purpose of Processing |
|---|---|---|
| Identity & Contact Data | Name, job title, company name, email address, telephone number, mailing address. | Account setup, service provision, general business communication, contract management. |
| Financial/Billing Data | Bank details, payment card details (processed securely via third-party providers), billing address, invoicing history. | Processing payments for services rendered, financial record-keeping, billing. |
| Service Usage Data | Account login details, log files, access times, metadata about archived tapes (e.g., tape IDs, size, date of archive/retrieval). **Note:** *This does not include the content of the archival data on the tapes. | Service delivery, maintaining the security and integrity of our systems, monitoring service performance. |
| Communication Data | Records of correspondence (emails, support tickets) and feedback | Customer support, responding to inquiries, service improvement. |
We rely on the following legal bases under GDPR Article 6 to process your personal data:
Performance of a Contract (Art. 6(1)(b)): Processing is necessary to fulfill our obligations under the service agreement with you (e.g., managing your account, invoicing, and performing the tape archival service).
Legal Obligation (Art. 6(1)(c)): Processing is necessary to comply with a legal requirement (e.g., retaining financial records for tax purposes).
Legitimate Interests (Art. 6(1)(f)): Processing is necessary for our legitimate interests, provided your fundamental rights do not override those interests (e.g., improving our services, preventing fraud, maintaining system security).
Consent (Art. 6(1)(a)): In specific, clearly defined cases, we may rely on your consent (e.g., for optional marketing communications). You have the right to withdraw consent at any time.
Security: We have implemented appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including encryption, access controls, secure facilities for tape storage, and staff training.
Data Retention We retain your personal data only for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Generally, we retain your data for the duration of your contract and for a legally mandated period thereafter.
We may share your personal data with the following types of third parties only where necessary and lawful:
We will never sell your personal data to third parties.
We will not transfer your personal data outside of the European Economic Area (EEA).
Under the GDPR, you have the following rights concerning your personal data:
To exercise any of these rights, please contact us using the details provided in Section 2. We will respond to your request within one month.
As a Data Processor, Tapesafe is responsible for the technical security and storage of the archival data you place on our tapes.
Content: We do not access, process, or monitor the *content* of your archived data unless specifically instructed by you or required by law.
Confidentiality: All personnel with access to the archival systems are bound by strict confidentiality obligations.
Your Control: You, the client, remain the Data Controller of the data stored on the tapes and are responsible for ensuring that the data stored complies with GDPR.
If you have a complaint about our handling of your data, please contact us first so we can try to resolve the issue. You also have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, place of work, or the place of the alleged infringement.