Privacy notice
This notice explains which personal data the MacroLens macroeconomic indicators database processes, for what purposes, where the data is stored and which rights you have under the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).
Who processes the data
- Controller — the organisation that ordered the MacroLens service for its staff (your organisation). Your organisation decides which employees get access and determines the purposes of processing.
- Processor — Sixty Four OÜ (registry code 12354921, Kolde pst 23, 10412 Tallinn, Estonia), which provides and maintains MacroLens. Sixty Four OÜ processes personal data only on behalf of and on the instructions of the controller, in accordance with Article 28 GDPR and the data processing agreement concluded with the organisation.
Which data is processed
| Category | Data |
|---|---|
| Account data | Full name, work e-mail address, organisation, role, interface language and settings |
| Sign-in data | Password hash (the password itself is never stored), two-factor authentication key, hashes of personal access tokens and when they were used |
| Session and security data | Sign-in times, IP address, browser type, failed sign-in attempts |
| Activity log | Sign-ins, account and administration actions, exports, token creation, sharing |
| Support requests | Content of requests, correspondence and — if you choose — technical information (browser, screen size, time zone, page) |
| Content you create | Analyses, charts, tables, reports, presentations and user series (they normally contain no personal data unless you enter it) |
For what purposes
- Providing the service and individual access to it.
- Protecting the service and the data against unauthorised access.
- Supporting users and fixing reported problems.
- Evidencing that the service is provided under the contract (availability, data updates, support deadlines).
- Informing about planned maintenance and other service events.
The data is not used for marketing, profiling or automated decision-making.
Where the data is stored and who receives it
- All data is stored and processed on infrastructure located in the European Union / European Economic Area; it is not transferred outside the EU / EEA.
- Only infrastructure (cloud hosting) and e-mail delivery providers are used, under data processing agreements. The full list of sub-processors is in the data processing agreement.
- MacroLens uses no analytics, advertising or tracking tools. Your data and content are not shared with third parties for their own purposes and are not used to train artificial intelligence models.
Cookies
Only strictly necessary cookies are used:
| Cookie | Purpose | Duration |
|---|---|---|
ml_session |
Signed-in session | up to 12 hours or 120 minutes of inactivity |
ml_lang |
Selected interface language | 1 year |
ml_pre |
Protection of the sign-in and password forms | up to 4 hours |
ml_dev |
Remembered device – set only when you tick “Remember this device” | 30 days |
In app mode (when MacroLens is installed as an app) the browser caches static files only (styles, scripts, images) — personal data and your content are not cached.
How long data is kept
- Sessions end after 12 hours or after 120 minutes of inactivity.
- Account data and content are kept while the account exists. When the account is closed they are deleted (and, if the organisation wishes, handed over first).
- Security and activity logs and support requests are kept for the term of the contract and as long as needed to evidence the provision of the service; the exact periods are set in the data processing agreement.
- When the contract ends, the data is returned and/or deleted as set out in the contract.
How the data is protected
Connections are encrypted (HTTPS), passwords are stored only as Argon2id hashes, sign-in uses two-factor authentication, sessions can be revoked, administration actions are logged, and access to data is limited to what is needed to provide the service. In the event of a personal data breach, Sixty Four OÜ notifies the controller without undue delay.
Your rights
You have the right to access your data, have it corrected, request its deletion or restriction of processing, object to processing and receive it in a portable format. You can change your profile on the My account page, where you can also download all your data and work (a ZIP file) at any time.
To exercise your rights, contact the controller (your organisation and its data protection officer) — Sixty Four OÜ will assist. You may also lodge a complaint with the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt).
Contact
Sixty Four OÜ, MacroLens support: henrik.aavik@sixtyfour.ee.
The Lithuanian version of this notice prevails.