Privacy Policy
1 Data Controller
Under the EU General Data Protection Regulation (GDPR) and Finnish data protection law:
2 Data We Collect
We collect the following categories of personal data:
- Contact information (name, email address)
- Order and communication data (messages, order details)
- Technical data (IP address, browser type, device information)
- Usage data (pages visited, time spent on site)
3 Purposes of Data Use
Your data is processed for:
- Order fulfillment and customer service
- Website functionality and security
- Analytics to improve our services (with consent)
- Legal compliance
4 Legal Basis
We process your data based on:
- Contract: Order processing
- Consent: Marketing, analytics, non-essential cookies
- Legitimate interest: Security, fraud prevention
5 Data Retention
We retain your data only as long as necessary:
- Order data: 7 years (legal requirement)
- Marketing data: Until consent withdrawn
- Analytics: Up to 26 months
- Logs: Up to 12 months
6 Your Rights (GDPR)
You have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Restrict processing
- Data portability
- Object to processing
- Withdraw consent at any time
- Lodge a complaint with a supervisory authority
To exercise these rights, contact us at: chat@whrixxenththrane.world
You may also lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto): tietosuoja.fi
7 Security Measures
We implement appropriate technical and organizational measures:
- HTTPS encryption for all data transmission
- Secure storage and access controls
- Regular security assessments
8 International Transfers
Data may be transferred within the EU/EEA. Any transfers outside this area use appropriate safeguards (e.g., Standard Contractual Clauses).
9 Contact
For privacy-related inquiries: