GDPR & Data Protection
Last updated: May 2026
Legal basis for processing
We process customer data under Article 6(1)(b) of the GDPR (performance of a contract) when you sign up for and use the service. For operational telemetry and security logging we rely on Article 6(1)(f), our legitimate interest in keeping the service running and safe.
For marketing emails (when you've opted in) we rely on Article 6(1)(a), your explicit consent. You can withdraw that consent at any time from your profile settings.
Data subject rights
Under Articles 15–22 of the GDPR you have the right to access your data, correct inaccuracies, request deletion, object to processing, and receive a portable copy of your data in a structured format.
Most rights can be exercised directly inside the product: Settings → Profile lets you view, edit, and export your information. For the few that require manual intervention (full account deletion, processing objection) write to privacy@ferio.eu and we'll action the request within 30 days.
Data retention
Active accounts retain their data for the duration of the contract. When a tenant cancels, customer content is retained for 90 days in case the cancellation was a mistake, then permanently deleted from our primary systems within 30 days of that grace period ending.
Backups follow a 35-day rolling-window retention. After that window data is purged from backups as well; we hold no archival copies beyond it.
International transfers
Customer data is stored in the European Union. Our subprocessors are either EU-based or operate under Standard Contractual Clauses approved by the European Commission for transfers outside the EEA.
If we ever need to transfer data outside this set of safeguards we'll notify you in advance and give you the option to terminate the contract without penalty.
Contact our DPO
Our Data Protection Officer can be reached at dpo@ferio.eu. For escalations you can also write to the postal address listed in the imprint at the bottom of this page.
If you're not satisfied with our response you have the right to lodge a complaint with a supervisory authority, typically the one in your country of residence.