Privacy at a Glance

Preventos Hero is a secure, invitation-only service. We only collect the information needed to authenticate you and provide access to the app.

Last updated: 2026-04-16

What we collect

Your name (display name)
Your email address
Your company name and your Microsoft Entra External ID user identifier
Authentication details from Microsoft Entra External ID (such as identity tokens and email OTP if used)
Technical data (device type, browser, IP address, login time) for security and troubleshooting
If enabled: notification contact details (email and/or phone) and sent-notification records

How we use it

Verify your identity
Provide and secure your access to the app
Operate the service for your organization
Send optional notifications (service alerts and user-activated updates)

What we do not do

No public access
No marketing or advertising
No selling or sharing data with unrelated third parties
No analytics or tracking cookies

Storage and security

An essential login cookie keeps you signed in
Some non-personal app data is stored in your browser's localStorage
No personal data is stored in localStorage unless required for core functionality

External resources

Authentication is provided by Microsoft Entra External ID (CIAM)
Fonts, CSS, and JavaScript are loaded via jsDelivr
Map tiles and GIS layers are provided by OpenStreetMap, Esri, and Maanmittauslaitos (NLS Finland)
Optional notifications use Microsoft 365 (email) and GatewayAPI.eu (SMS for opted-in users)
Satellite map tiles are offered only with explicit user consent in your profile

Retention

Personal data is kept only as long as needed for service, security, and legal obligations
After account deletion or agreement end, data is deleted or anonymized within 30 days (unless law or legal claims require longer retention)

Mandatory vs Optional

Name and email are required to create and use an account
Notifications are optional and disabled by default
SMS notifications require opt-in, and consent can be withdrawn at any time

⚠️ Data Disclosure

When connecting to these external services, your IP address and basic request metadata (user agent, referrer) may be visible to the providers. We use only providers that do not track or analyze this data for advertising purposes.

Your GDPR Rights

Under GDPR, you can request:

Access — See what personal data we have about you
Correction — Update inaccurate information
Deletion — Request erasure of your data (right to be forgotten)
Restriction — Limit how we use your data
Portability — Download your data in a portable format
Withdraw consent — Stop consent-based processing at any time

To exercise your rights, contact info@preventos.fi or your organization's administrator.

You may also lodge a complaint with your local Data Protection Authority (DPA).

In Finland, the supervisory authority is the Office of the Data Protection Ombudsman: https://tietosuoja.fi/.