Fintura acts as a Data Processor on behalf of our Enterprise Clients (Data Controllers). We process Scope 3 emission data strictly in accordance with the Data Processing Agreement (DPA) signed with each Client.
All data processed by the Fintura Intelligence OS is stored exclusively within the European Economic Area (EEA) (Frankfurt & Warsaw regions) on ISO 27001 certified infrastructure.
If you are a driver or subcontractor and wish to exercise your rights (access, rectification, erasure) under GDPR, please direct your request to the contracting company you provided services for. Fintura will assist the Data Controller in fulfilling these requests within statutory timeframes.
We maintain a strict list of authorized sub-processors essential for OCR (Optical Character Recognition) and cloud infrastructure. All sub-processors are vetted for GDPR compliance and are bound by identical confidentiality obligations.