Privacy Policy

Introduction

Margn OÜ (registry code: 12141533, “Payroll24”, “we”, “us”, or “our”) values the privacy and security of your personal and business data. This Privacy Policy explains how we collect, process, use, disclose, store and safeguard data when you use Payroll24, payroll24.ee or related services.

This policy is designed to comply with the General Data Protection Regulation (EU 2016/679 – GDPR) and applicable European Union data protection laws.

We are committed to transparency and respecting your rights. By using Payroll24, you acknowledge the practices described in this Privacy Policy.

Applicability

This Privacy Policy applies to Payroll24, including:

• the Payroll24 payroll software;
• payroll24.ee;
• Payroll24 APIs and supported integrations;
• customer support and related Payroll24 services.

This Privacy Policy does not govern independent third-party services connected to Payroll24. Users should review the privacy policies of those providers separately.

Data controller and processor roles

Under GDPR, there is a distinction between a Data Controller, who determines why and how personal data is processed, and a Data Processor, who processes personal data on behalf of the Controller.

Payroll24 generally acts as:

Data Processor: when processing Customer Data entered, uploaded or managed by customers through Payroll24.

Data Controller: when processing account information for purposes such as authentication, billing, customer support, service administration, security and optional analytics.

Customers remain responsible for determining the lawful basis for processing employee and payroll information through Payroll24.

Data we collect

Customer data

Customer Data means information entered, uploaded, imported or managed by customers through Payroll24. This may include:

• employee names and personal identifiers;
• employment and salary information;
• working time records;
• vacations and other absences;
• payroll calculations;
• payroll tax information;
• payroll reports;
• payment-related information;
• documents and other information required for payroll administration.

Other information

We may also collect information generated through use of Payroll24, including:

• IP addresses and login times;
• browser, device and operating system information;
• actions performed within Payroll24;
• account preferences and settings;
• technical and security logs;
• website analytics and cookie information where permitted.

Data use

We process information to:

• provide and operate Payroll24;
• manage user accounts and access;
• process payroll-related Customer Data according to customer instructions;
• manage billing and subscriptions;
• provide customer support;
• maintain service security;
• detect misuse or unauthorised access;
• maintain and improve service performance;
• comply with applicable legal obligations.

We do not sell personal data.

Legal basis for processing

Where Margn OÜ acts as a Data Controller, we may rely on:

Performance of a contract, GDPR Art. 6(1)(b): to provide and administer Payroll24.

Legal obligation, GDPR Art. 6(1)(c): where processing is required by law.

Legitimate interest, GDPR Art. 6(1)(f): for service security, support, fraud prevention and service improvement.

Consent, GDPR Art. 6(1)(a): where required, such as for certain optional cookies or communications.

Data sharing and disclosure

We may share data only where necessary, including:

• with authorised users within the customer’s organisation;
• with hosting, infrastructure and technical service providers;
• with payment or billing providers;
• with third-party services enabled by the customer;
• with professional advisers;
• with public authorities where legally required.

Service providers processing personal data on our behalf are required to apply appropriate confidentiality and data-protection safeguards.

Data retention

Customer Data is retained while the customer has an active relationship with Payroll24 and may be retained afterwards where necessary for legal, contractual, security or dispute-resolution purposes.

System logs and technical information may be retained for security, service monitoring and support.

Aggregated or anonymised information that no longer identifies individuals may be retained for statistical and service-improvement purposes.

International data transfers

Where personal data is transferred outside the European Economic Area, appropriate safeguards are used as required by applicable law, including:

• Standard Contractual Clauses;
• adequacy decisions adopted by the European Commission;
• other lawful transfer mechanisms permitted under GDPR.

Security measures

We use appropriate technical and organisational safeguards designed to protect data, including:

• encrypted data transmission;
• access controls;
• authentication measures;
• infrastructure security;
• monitoring;
• backups and recovery procedures.

No online service can guarantee absolute security, and customers are also responsible for protecting their account credentials.

Your rights under GDPR

Where applicable, you may have the right to:

• access your personal data;
• correct inaccurate information;
• request deletion;
• restrict processing;
• request data portability;
• object to certain processing;
• withdraw consent where processing is based on consent;
• lodge a complaint with the competent data protection authority.

Where Margn OÜ acts only as a Data Processor, requests concerning Customer Data should normally be directed to the customer acting as Data Controller.

Contact: support@payroll24.ee

Cookies and tracking

Payroll24 may use cookies and similar technologies to:

• provide secure website functionality;
• maintain user preferences;
• support authentication;
• understand website usage where permitted.

Where consent is required, optional cookies are used only after consent has been provided.

Third-party integrations

When a customer connects a third-party service to Payroll24, information may be exchanged as necessary for that integration to function.

Third-party services operate under their own privacy policies and terms. Customers should review those policies before enabling an integration.

Data export and deletion

Customers may request an available structured export of their data.

Customers may also request deletion of their account data, subject to applicable legal, contractual and technical retention requirements.

Requests can be sent to support@payroll24.ee.

Changes to this policy

We may update this Privacy Policy to reflect legal, technical or operational changes.

Where changes are significant, we may provide notice through Payroll24, email or another appropriate method.

The effective date shown above indicates when the current version became effective.