Privacy Policy

1. Introduction

This Privacy Policy describes how Quivranxvul ("we", "our", "the controller") collects, uses, stores and protects personal data obtained through the website quivranxvul.world (the "Website") and related ordering processes. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) and applicable Finnish data protection legislation.

2. Personal Data We Collect

We collect the following categories of personal data:

• Contact and order data: full name, email address, telephone number, delivery address, order details and any message you include in the enquiry form.
• Technical data: IP address, browser type, operating system, referring URLs, pages visited and timestamps, collected automatically via server logs and, where consented, analytics cookies.
• Cookie and preference data: your cookie consent choices, stored in a browser cookie.

We do not collect special categories of personal data (such as health or biometric data) and we do not process data relating to children under 16 years of age.

3. Legal Basis for Processing

We rely on the following legal bases under Article 6 GDPR:

• Performance of a contract (Art. 6(1)(b)): to process and fulfil your order and communicate with you about it.
• Legal obligation (Art. 6(1)(c)): to comply with applicable Finnish and EU legislation, including consumer law and tax obligations.
• Legitimate interests (Art. 6(1)(f)): to detect and prevent fraud, maintain website security and improve our services. Our legitimate interest does not override your fundamental rights.
• Consent (Art. 6(1)(a)): for analytics and marketing cookies, where you have given your explicit consent via the cookie consent tool.

4. How We Use Your Data

Your personal data is used for the following purposes:

• Processing and fulfilling orders and responding to enquiries.
• Communicating order status, delivery information and customer service matters.
• Complying with legal obligations, including tax, accounting and consumer protection requirements.
• Analysing website usage in aggregate to improve the Website (analytics, where consented).
• Detecting and preventing fraudulent activity and ensuring Website security.

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

5. Data Retention

We retain personal data only for as long as necessary for the purposes described:

• Order and contact data: retained for 7 years from the end of the calendar year in which the transaction occurred, as required by Finnish Accounting Act (Kirjanpitolaki 1336/1997).
• Technical/log data: retained for up to 12 months.
• Cookie consent records: retained for 13 months.

Data is deleted or anonymised when the applicable retention period expires.

6. Sharing and Transfers of Data

We do not sell or rent your personal data to third parties. We may share data with:

• Logistics partners: to fulfil and deliver your order within Finland.
• Payment processors: who process payments under their own security standards (PCI-DSS).
• IT service providers: for website hosting and email delivery, acting as data processors under written data processing agreements.
• Regulatory authorities: where required by Finnish or EU law.

Where we use processors outside the European Economic Area (EEA), we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses under Art. 46 GDPR).

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of access (Art. 15): to obtain a copy of the personal data we hold about you.
• Right to rectification (Art. 16): to have inaccurate data corrected.
• Right to erasure (Art. 17): to request deletion of your data where it is no longer necessary or where you withdraw consent (subject to legal obligations).
• Right to restriction of processing (Art. 18): to request that we limit processing of your data in certain circumstances.
• Right to data portability (Art. 20): to receive your data in a structured, machine-readable format.
• Right to object (Art. 21): to object to processing based on legitimate interests.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact us at: call-us-info@quivranxvul.world. We will respond within 30 days. You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto): tietosuoja.fi.

8. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss or destruction. These measures include HTTPS encryption for all data in transit, access controls, regular security reviews and data minimisation practices. No transmission over the internet is guaranteed to be completely secure; however, we take all reasonable steps to protect your information.

9. Cookies

We use cookies and similar technologies. For detailed information about the cookies we use, their purpose and how to manage your preferences, please see our Cookie Policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates when the policy was last revised. We encourage you to review it periodically. Continued use of the Website following any changes constitutes your acknowledgement of the updated policy.

11. Contact

For any questions or requests relating to this Privacy Policy or your personal data, please contact: