Privacy Policy

1. Introduction

Quarrionshaklyra ("we," "us," or "our") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website quarrionshaklyra.world and use our services.

This policy complies with the General Data Protection Regulation (GDPR) (EU) 2016/679, the Finnish Data Protection Act (Tietosuojalaki 1050/2018), and other applicable data protection laws in Finland and the European Economic Area. By using our website, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller Information

The data controller responsible for your personal data is:

3. Personal Data We Collect

We may collect and process the following categories of personal data:

• Identity Data: Full name as provided in order forms.
• Contact Data: Email address and phone number (if provided).
• Communication Data: Messages and correspondence you send to us.
• Technical Data: IP address, browser type, device information, operating system, and browsing patterns on our website.
• Usage Data: Information about how you use our website, products, and services.
• Cookie Data: Information collected through cookies and similar technologies (see our Cookie Policy).

4. How We Collect Your Data

We collect personal data through:

• Direct interactions: When you fill out forms on our website, place an order, or contact us.
• Automated technologies: As you navigate our website, we automatically collect technical data using cookies and similar technologies.
• Third parties: We may receive technical data from analytics providers such as Google Analytics.

5. Legal Basis for Processing

We process your personal data based on the following legal grounds under Article 6 of the GDPR:

• Consent (Article 6(1)(a)): Where you have given explicit consent for specific processing activities, such as marketing communications.
• Contract Performance (Article 6(1)(b)): Processing necessary for the performance of a contract with you, such as processing your orders.
• Legal Obligation (Article 6(1)(c)): Processing necessary for compliance with legal obligations we are subject to.
• Legitimate Interests (Article 6(1)(f)): Processing necessary for our legitimate interests, such as improving our services and website functionality, provided these interests do not override your fundamental rights.

6. Purposes of Processing

We use your personal data for the following purposes:

• To process and fulfill your orders and provide customer support.
• To communicate with you about your orders, inquiries, and our services.
• To improve our website, products, and services based on usage patterns.
• To send marketing communications (only with your explicit consent).
• To comply with legal obligations and protect our legal rights.
• To prevent fraud and ensure the security of our website.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Order Data: Retained for 7 years to comply with accounting and tax regulations.
• Communication Data: Retained for 3 years after our last interaction.
• Marketing Data: Retained until you withdraw consent or 3 years of inactivity.
• Technical Data: Retained for up to 26 months for analytics purposes.

8. Data Sharing and Disclosure

We may share your personal data with:

• Service Providers: Third-party companies that help us operate our business (payment processors, shipping companies, hosting providers).
• Legal Authorities: When required by law or to protect our legal rights.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.

We do not sell your personal data to third parties. All service providers are contractually obligated to protect your data and process it only as instructed.

9. Advertising and Remarketing

We may use your data for advertising purposes, including:

• Online advertising: We may work with advertising partners such as Google to show you relevant ads based on your visit to our website. This may include Google Ads and remarketing.
• Cookies and similar technologies: Advertising partners may use cookies and similar technologies to deliver and measure ads. See our Cookie Policy for details.
• Your choices: You can control personalized advertising from Google at adssettings.google.com. You can opt out of interest-based advertising via the cookie banner on our site by choosing "Reject" or adjusting Cookie Settings.

We do not sell your personal data to third parties for their advertising. When we use advertising services, we comply with applicable laws including GDPR and obtain consent where required.

10. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:

• EU Standard Contractual Clauses approved by the European Commission.
• Transfers to countries with an adequacy decision from the European Commission.
• Other legally recognized transfer mechanisms under GDPR.

11. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data in certain circumstances.
• Right to Restriction: Request restriction of processing in certain circumstances.
• Right to Data Portability: Receive your data in a structured, commonly used format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at support@quarrionshaklyra.world. We will respond to your request without undue delay and in any event within one month of receipt, as required by Article 12(3) of the GDPR. That period may be extended by two further months where necessary; we will inform you of any such extension.

We do not use automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you (Article 22 GDPR).

12. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit using SSL/TLS technology.
• Secure storage systems with access controls.
• Regular security assessments and updates.
• Staff training on data protection practices.

13. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In Finland, the relevant authority is:

You may lodge a complaint in the EU member state of your habitual residence, place of work, or place of the alleged infringement. In Finland, the Office of the Data Protection Ombudsman is the competent supervisory authority.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically to stay informed about how we protect your data.

15. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: