3.3 When we provide you our services (e.g. consulting, software development)

Why we process your data
To manage client relationships, deliver services, handle communications, and manage project logistics and invoicing.

Types of data we use

• Business contact details (name, email, phone, organization)

• Project content (messages, documents, tasks)

• Financial data (invoice details, company address)

Legal bases

• Art. 6(1)(b) GDPR – to deliver the services you requested

• Art. 6(1)(f) GDPR – our legitimate interest in operating our business

How long we keep it
We retain this data for up to 10 years (as required by the tax law).

Do we transfer your data outside the EU/EEA?
Some of our service providers are located outside the European Economic Area (EEA). When this happens, we use appropriate safeguards approved by the law, such as Standard Contractual Clauses (SCCs), to protect your data.

Here is a list of such providers, what we use them for, and how your data is protected:

• Google Workspace (USA). We use Google Workspace to host organizational emails (only @phnx.im emails), cloud storage, and document collaboration. Personal data in this case is safeguarded by Standard Contractual Clauses (SCCs): Google SCCs & data protection terms. 

• Notion (USA). We use Notion to organize and manage internal project documentation and client projects. Personal data in this case is safeguarded by Standard Contractual Clauses (SCCs): Notion Data Processing Addendum.