Privacy Policy

How we collect, use, and protect your personal information

1. Introduction

Slryxellaeshun ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website slryxellaeshun.world and purchase our products, including Cardigestor.

This policy complies with the General Data Protection Regulation (GDPR) (EU) 2016/679 and applicable Finnish data protection laws.

2. Data Controller Information

The data controller responsible for your personal data is:

  • Company Name: Slryxellaeshun
  • Address: Puolangantie 9, 88300 Paltamo, Finland
  • Email: response@slryxellaeshun.world
  • Country: Finland

3. Personal Data We Collect

We collect the following categories of personal data when you use our Website, place an order, or contact us:

3.1 Information You Provide Directly

  • Contact Information: Name, email address, phone number (optional), and physical address
  • Order Information: Product orders, payment details, delivery preferences, and order history
  • Communication Data: Messages, inquiries, and correspondence you send to us
  • Consent Records: Records of your consent to our privacy practices

3.2 Information Collected Automatically

  • Device Information: IP address, browser type, operating system, and device identifiers
  • Usage Data: Pages visited, time spent on pages, click patterns, and referral sources
  • Cookie and Tracking Data: Information collected through cookies, local storage, and similar technologies (see our Cookie Policy)
  • Server Log Data: Technical logs automatically generated by our hosting environment (such as IP address, request URLs, timestamps, HTTP status codes, and user agent) for security and troubleshooting purposes

3.3 Sensitive Data

We do not intentionally collect or process special categories of personal data (such as health data) through this Website. Please do not include medical history or other health information in free text fields. For questions regarding the suitability of our products, consult a healthcare professional.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR Article 6:

  • Contract Performance (Art. 6(1)(b)): Processing necessary to fulfill your orders, communicate with you about your purchase, and provide customer support
  • Consent (Art. 6(1)(a)): Where you have given explicit consent for specific processing activities, such as receiving marketing communications or allowing analytics and marketing cookies
  • Legitimate Interests (Art. 6(1)(f)): Processing necessary for our legitimate business interests, such as improving our services, maintaining IT security (including server logs), and preventing fraud, provided that such interests are not overridden by your rights and freedoms
  • Legal Obligation (Art. 6(1)(c)): Processing required to comply with applicable laws and regulations, including accounting, tax, and consumer protection laws in Finland

Where we rely on consent, you are free to withdraw it at any time as described in section 7. Where we rely on legitimate interests, you have the right to object to such processing.

5. Purposes of Data Processing

We use your personal data for the following purposes:

  • Processing and fulfilling your orders for Cardigestor and other products
  • Communicating with you about your orders, inquiries, and support requests
  • Sending transactional emails (order confirmations, shipping updates)
  • Improving our website, products, and customer experience
  • Analyzing website usage and performance
  • Preventing fraud and ensuring security
  • Complying with legal obligations and regulatory requirements
  • Marketing communications (only with your explicit consent)

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

  • Order and Transaction Data: 7 years (as required by Finnish accounting and tax laws)
  • Customer Account Data: Until account deletion or 3 years of inactivity
  • Marketing Consent Records: Until consent is withdrawn, plus 3 years for compliance documentation
  • Website Analytics Data: 26 months
  • Communication Records: 3 years after the last interaction

7. Your Rights Under GDPR

As a data subject, you have the following rights:

  • Right of Access (Art. 15): Request a copy of your personal data we hold
  • Right to Rectification (Art. 16): Request correction of inaccurate or incomplete data
  • Right to Erasure (Art. 17): Request deletion of your personal data ("right to be forgotten")
  • Right to Restrict Processing (Art. 18): Request limitation of how we process your data
  • Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format
  • Right to Object (Art. 21): Object to processing based on legitimate interests or for marketing
  • Right to Withdraw Consent (Art. 7): Withdraw consent at any time without affecting prior processing
  • Right to Lodge a Complaint: File a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi)

To exercise any of these rights, please contact us at response@slryxellaeshun.world. We will respond within 30 days.

8. Data Sharing and Recipients

We may share your personal data with:

  • Payment Processors: To securely process your payments
  • Shipping Partners: To deliver your orders
  • IT Service Providers: For website hosting and technical support
  • Analytics Providers: To analyze website usage (with your consent)
  • Legal Authorities: When required by law or to protect our legal rights

We require all third parties to respect the security of your data and process it in accordance with GDPR.

9. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When this occurs, we ensure appropriate safeguards are in place, such as:

  • EU Standard Contractual Clauses
  • Adequacy decisions by the European Commission
  • Binding Corporate Rules where applicable

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • SSL/TLS encryption for data transmission
  • Secure server infrastructure
  • Access controls and authentication
  • Regular security assessments
  • Employee training on data protection

11. Children's Privacy

Our website and products are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

12. Updates to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by posting the updated policy on our website with a new effective date. We encourage you to review this policy regularly.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

  • Email: response@slryxellaeshun.world
  • Address: Puolangantie 9, 88300 Paltamo, Finland

For complaints regarding data protection, you may also contact the Finnish Data Protection Ombudsman at tietosuoja.fi.