Annex B Processing details
Terms and Notices — Sellforte Solutions Oy — 2026-09
EU/rest of the world (excluding the US). The contracting entity in the Order Form determines the applicable terms.
Annex B Processing details
B1 Parties and contacts
The Customer identified in the Order Form is controller, or an authorized processor for the controllers recorded in its instructions. Sellforte Solutions Oy is processor or subprocessor. Customer contacts are those in the Order Form; Sellforte’s contact is privacy@sellforte.com, Otakaari 5, 02150 Espoo, Finland.
B2 Subject matter and purposes
Providing the ordered marketing measurement and analysis Services: onboarding, authorized collection and ingestion, validation, storage, customer-specific modeling, delivery of results, support, maintenance, security, and instructed return or erasure. Optional AI analysis, Tracking Technology, external-tool access, and Automated Actions apply only when enabled within scope. Anonymous-data creation is subject to ToS Section 11.3 (Anonymous Aggregate Data).
B3 Nature and frequency
Collection, receipt, organization, validation, aggregation, analysis, inference, hosting, retrieval, transmission to authorized recipients, correction, restriction, anonymization where authorized, and erasure. Processing is ongoing during service delivery, with collection and update frequency determined by the Order Form and authorized source configurations.
B4 Data subjects
• Customer and Affiliate personnel, Users, agency personnel, and supplier contacts.
• Where included in Customer data: customers and prospects, website or app visitors, and advertising audiences, including on websites or apps directed primarily to children, subject to ToS Section 3.6 (Tracking Technology). Restricted data follows DPA Section 4.1 (Restricted data).
B5 Data categories
• Business contact and account information; User identifiers and permissions.
• Sales, transaction, campaign, spend, conversion, and interaction data, where these contain Personal Data.
• Online or device identifiers and technical events where Tracking Technology is enabled.
• Support communications, prompts, responses, and authorized action records. Special-category and criminal-offense data are excluded unless separately agreed.
B6 Duration and minimization
Processing continues during the subscription and lawful transition, followed by the 30-day retrieval period and limited backup retention in ToS Section 17.6 (Return and erasure). Earlier lawful deletion instructions and shorter mandatory deadlines apply. Only Personal Data necessary for the agreed purposes is processed.
B7 Location and recipients
Primary processing is in the EU unless another supported region is selected in the Order Form. International access and processing follow Annex C and DPA Section 13 (International transfers).
B8 Controller instructions
The Order Form, authorized settings, and documented requests provide instructions within this Annex. The Customer must identify any controllers it represents and any necessary processing variations before processing starts. New purposes, restricted data, or materially different data-subject categories require a documented update and any required assessment.