Privacy Policy

1. Introduction

Quivranxphun ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website quivranxphun.world and use our services.

This policy complies with the General Data Protection Regulation (GDPR) (EU) 2016/679, the Finnish Data Protection Act (1050/2018), and other applicable data protection laws.

2. Data Controller Information

The data controller responsible for your personal data is:

3. Personal Data We Collect

We collect the following categories of personal data:

• Identity Data: Full name as provided in order forms
• Contact Data: Email address and phone number (if provided)
• Communication Data: Messages and inquiries you send us
• Technical Data: IP address, browser type and version, time zone setting, browser plug-in types, operating system, and platform
• Usage Data: Information about how you use our website
• Cookie Data: Data collected through cookies and similar technologies (see our Cookie Policy)

4. How We Collect Your Data

We collect personal data through:

• Direct interactions: When you fill out forms, place orders, or contact us
• Automated technologies: Through cookies and similar tracking technologies when you browse our website
• Third parties: We may receive data from analytics providers, payment processors, and advertising networks

Where consent is required under applicable law, we collect analytics and marketing data only after you provide consent through our cookie banner.

5. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR:

• Consent (Article 6(1)(a)): When you explicitly agree to the processing of your data, such as for marketing communications
• Contract (Article 6(1)(b)): When processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract
• Legal Obligation (Article 6(1)(c)): When we must comply with a legal obligation
• Legitimate Interests (Article 6(1)(f)): When processing is necessary for our legitimate interests or those of a third party, provided your rights do not override those interests

6. Purposes of Processing

We use your personal data for the following purposes:

• To process and fulfill your orders
• To communicate with you about your orders and inquiries
• To provide customer support
• To improve our website and services
• To send marketing communications (with your consent)
• To comply with legal obligations
• To prevent fraud and ensure security
• To analyze website usage and performance

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• Order data: 7 years from the date of transaction (for tax and accounting purposes)
• Marketing consent: Until you withdraw consent
• Technical data: 26 months from collection
• Customer inquiries: 3 years from the last interaction

After the retention period expires, we securely delete or anonymize your personal data.

8. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
• Right to Lodge a Complaint: File a complaint with a supervisory authority

To exercise any of these rights, please contact us using the details provided in this policy. We will respond to your request within one month.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit using SSL/TLS (HTTPS)
• Secure storage of personal data
• Access controls limiting who can view personal data
• Regular security assessments and updates
• Staff training on data protection

While we strive to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

10. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When such transfers occur, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Binding corporate rules

11. Third-Party Disclosure

We may share your personal data with:

• Service providers: Companies that help us operate our business (e.g., payment processors, shipping companies)
• Analytics providers: To help us understand website usage
• Legal authorities: When required by law or to protect our rights

We do not sell your personal data to third parties.

12. Automated Decision-Making

We do not use your personal data to make solely automated decisions, including profiling, that produce legal effects or similarly significant effects on you.

13. Children's Privacy

Our website and services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

15. Supervisory Authority

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman:

16. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: