Effective date: 28 October 2026.
This policy explains what personal data Biometric Technologies OÜ collects when you visit www.iriscan.com and docs.iriscan.net or contact us, why we do it and what rights you have. We keep it short because we collect very little.
The controller is Biometric Technologies OÜ (Iriscan), registry code 14735024, Ahtri 12, 10151 Tallinn, Estonia. For any privacy question write to info@iriscan.net.
When you send us a message. The contact form asks for your first and last name, company, email address and message. We use them only to answer your request and to discuss a possible cooperation. The legal basis is steps taken at your request before entering into a contract and our legitimate interest in answering business inquiries (GDPR Art. 6(1)(b) and (f)). The same applies when you write to us by email.
When you browse the site. The site is a static website. We do not use analytics, advertising or tracking cookies, and we do not build profiles of visitors. Like any web server, the hosting provider receives your IP address and technical request data to deliver the pages and to protect the service. The legal basis is our legitimate interest in operating a secure website (GDPR Art. 6(1)(f)).
When you try the converter demo. The fingerprint converter on the biometric data conversion page runs entirely in your browser. Files you open there are processed on your device and are not uploaded to us.
Some of these providers process data outside the European Economic Area. Such transfers rely on the EU-US Data Privacy Framework where the provider is certified, or on the European Commission's standard contractual clauses.
We do not set cookies. The site stores one entry in your browser's local storage to remember that you closed the notice at the bottom of the page. It contains no personal data, and you can delete it in your browser settings at any time.
We keep inquiries and related correspondence for as long as we need them to answer and follow up, and no longer than three years after our last contact. If the correspondence becomes part of a contract, the retention periods for contracts and accounting documents under Estonian law apply.
The website does not collect biometric data. When a customer uses our software or cloud services to process biometric data of its own clients or employees, the customer is the controller of that data, and we process it on the customer's behalf under a separate data processing agreement.
You can ask us for access to your personal data, for its correction or deletion, for restriction of processing and for a copy in a portable format. You can object to processing based on our legitimate interest. Write to info@iriscan.net, and we will answer within one month.
You also have the right to lodge a complaint with a supervisory authority. In Estonia this is the Data Protection Inspectorate (Andmekaitse Inspektsioon), www.aki.ee.
We will update this policy when the way we process data changes, and the effective date above will show the latest version.