MNB Exchange Rates -  Privacy Policy



Information we process:


When Odoo users request an exchange rate by pressing a button or automatically via a scheduled action it triggers a request.


The request is compiled automatically. For the request the information we use includes Odoo installation id, Token, Currencies, Start date or date range, Date skip list. The information we use for statistics purpouse includes: Odoo version, Odoo edition, MNB module version, Operating system, Python version. Information we store includes Odoo installation ID, Currencies, Date range, Results count, Request result, Request faliure reason, IAP Credit used. The information we use for statistics purpouse includes: Odoo version, Odoo edition, MNB module version, Source http client, Operating system, Phyton version.

The information above is stored in a raw format. The Odoo database UUID is stored in a hash anonymously and cannot be reversed.


How we use this information:


The IAP requests are validated by Odoo, then we provide the requested currency exchange rate(s) from our server in a response. We check if there is sufficient credit available for the request, this information is stored. Additionally we store the metadata of these requests listed above. The client's hash is stored anonymously, we do not store any personal information. This information can no longer be associated with a specific person.


Service Provider:

Odoo

https://www.odoo.com/privacy & https://www.odoo.com/security


Purpouse:

Automatic update of exchange rates via IAP service

Shared data with Odoo: 

User token, number of credits used 

Retrieved from Odoo:

IAP balance result


How the client can access his data


Access to user requests cannot be requested as the data is anonymized. We cannot provide information about our 3rd party (Odoo), only the clients have access to the stored information. The end result is stored in the client's database, this can be accessed and deleted at will.


Data retention


The data is stored in Odoo.sh, see : https://www.odoo.com/privacy, https://www.odoo.com/security .The data and metadata listed above will be kept for 12 months, after that it gets deleted.


Transfer of Data


The IAP data is processed on Odoo's servers which are located in Belgium and France.