Privacy Policy

Last updated:

1. Data Controller

The data controller responsible for your personal data is:

Zythorinaizloor
Päivärinteentie 10, 58180 Ihamaniemi, Finland
Phone: +358 40 1258992
Email: reachus@zythorinaizloor.world

2. What Data We Collect

We may collect the following categories of personal data:

  • Contact information: name, email address, and message content submitted through our contact form.
  • Technical data: IP address, browser type, operating system, referring URLs, and pages visited.
  • Cookie data: information collected through cookies and similar technologies as described in our Cookie Policy.

3. Purposes of Processing

We process your personal data for the following purposes:

  • Responding to your inquiries submitted through the contact form.
  • Ensuring the proper functioning and security of our website.
  • Analyzing website usage to improve user experience (with your consent).
  • Complying with legal obligations.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under the General Data Protection Regulation (GDPR):

  • Consent (Article 6(1)(a)): when you submit the contact form with the consent checkbox selected, or when you accept optional cookies.
  • Legitimate interest (Article 6(1)(f)): for ensuring website security, fraud prevention, and limited technical logging required to keep services stable.
  • Legal obligation (Article 6(1)(c)): when required by applicable law.

Where consent is required, you may withdraw it at any time without affecting processing carried out before withdrawal.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

  • Contact form submissions: up to 12 months after the inquiry is resolved.
  • Technical and analytics data: up to 26 months.
  • Cookie consent records: up to 12 months.

6. Data Sharing and Transfers

We do not sell your personal data. We may share data with:

  • Service providers who assist in website hosting and maintenance, under strict data processing agreements.
  • Authorities when required by law.

If data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

7. Automated Decision-Making

We do not use your personal data for solely automated decision-making, including profiling, that produces legal or similarly significant effects concerning you.

8. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access: request a copy of the data we hold about you.
  • Right to rectification: request correction of inaccurate data.
  • Right to erasure: request deletion of your data (right to be forgotten).
  • Right to restrict processing: request limitation of how we use your data.
  • Right to data portability: receive your data in a structured, machine-readable format.
  • Right to object: object to processing based on legitimate interest.
  • Right to withdraw consent: withdraw your consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at: reachus@zythorinaizloor.world. We normally respond within one month, in line with GDPR Article 12.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted data transmission (TLS/SSL), access controls, and regular security assessments.

10. Children and Young Persons

This website is intended for a general audience and is not directed to children under 16. We do not knowingly collect personal data from children under 16 without appropriate legal basis or guardian involvement where required by applicable law.

11. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In Finland, the relevant authority is:

Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto)
Lintulahdenkuja 4, 00530 Helsinki, Finland
Website: tietosuoja.fi

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any significant changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.