Privacy Policy

Last updated:

This Privacy Policy describes how Purgingyrglow ("we", "us", or "our") collects, uses, stores, and protects your personal data when you visit purgingyrglow.world (the "Website"). We are committed to complying with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the Finnish Data Protection Act (1050/2018) ("Finnish DPA"), the Finnish Act on Electronic Communications Services (917/2014) as it relates to cookies and similar technologies, and other applicable data protection and marketing legislation in Finland and the European Union.

1. Data Controller

The data controller responsible for your personal data is:

Purgingyrglow
Kappelintie 5
44500 Viitasaari
Finland
Email: callback@purgingyrglow.world
Phone: +358 300 472378

2. Personal Data We Collect

We may collect the following categories of personal data:

  • Contact data: name, email address, and message content submitted through our contact form.
  • Technical data: IP address, browser type, operating system, referring URL, pages visited, and date/time of access.
  • Cookie data: information stored via cookies and similar technologies as described in our Cookie Policy.
  • Consent records: your cookie preferences and GDPR consent choices.

We do not collect special categories of personal data (such as health data) through the Website, and we do not process national identification numbers.

3. Sources of Personal Data

We obtain personal data directly from you when you submit the contact form or make cookie choices, and automatically when you browse the Website (for example, through server logs and strictly necessary storage technologies).

4. Whether Provision of Data Is Required

Browsing the Website does not require you to provide personal data. Contact form fields are voluntary, but we cannot respond to your inquiry without the information you choose to submit. Cookie preferences can be managed through the cookie banner described in our Cookie Policy.

5. Purposes and Legal Bases for Processing

We process your personal data for the following purposes and on the following legal bases:

  • Responding to inquiries (contact form): performance of pre-contractual measures and legitimate interest in communicating with visitors. Legal basis: Article 6(1)(b) and 6(1)(f) GDPR.
  • Website functionality (strictly necessary cookies): ensuring the Website operates correctly. Legal basis: Article 6(1)(f) GDPR.
  • Analytics (with consent): understanding how visitors use the Website to improve content and usability. Legal basis: Article 6(1)(a) GDPR.
  • Marketing (with consent): delivering relevant content and measuring campaign effectiveness. Legal basis: Article 6(1)(a) GDPR.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

  • Contact form submissions: up to 24 months from the date of submission, unless a longer retention period is required by law.
  • Technical logs: up to 12 months.
  • Cookie consent records: up to 12 months.
  • Analytics data: up to 26 months, subject to your consent.

7. Data Sharing, Processors, and Transfers

We do not sell your personal data. We may share data with trusted service providers who process data on our behalf under written data processing agreements compliant with GDPR Article 28 and Chapter 2, Section 8 of the Finnish DPA. Depending on your cookie choices and how you use the Website, processors may include:

  • Website hosting provider — stores and delivers the Website; may process technical log data.
  • Content delivery providers — for example, Google Fonts and Font Awesome, which may receive technical data such as IP address when resources are loaded.
  • Analytics provider — only if you consent to analytics cookies.
  • Advertising or measurement provider — only if you consent to marketing cookies, for example when measuring online campaigns.

If data is transferred outside the European Economic Area, we ensure appropriate safeguards such as adequacy decisions or Standard Contractual Clauses approved by the European Commission are in place, and we assess supplementary measures where required under Finnish and EU law.

8. Automated Decision-Making and Profiling

We do not use automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you within the meaning of GDPR Article 22.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include HTTPS encryption, access controls, secure hosting infrastructure, and regular security reviews.

10. Your Rights Under GDPR and the Finnish DPA

As a data subject, you have the following rights under the GDPR and, where applicable, the Finnish DPA:

  • Right of access (Article 15 GDPR): request a copy of your personal data.
  • Right to rectification (Article 16 GDPR): request correction of inaccurate data.
  • Right to erasure (Article 17 GDPR): request deletion of your data where applicable.
  • Right to restriction (Article 18 GDPR): request limitation of processing.
  • Right to data portability (Article 20 GDPR): receive your data in a structured, commonly used, machine-readable format where applicable.
  • Right to object (Article 21 GDPR): object to processing based on legitimate interests, including direct marketing where applicable.
  • Right to withdraw consent (Article 7(3) GDPR): withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, contact us at callback@purgingyrglow.world. We will respond without undue delay and, in any event, within one month as required by GDPR Article 12, unless an extension is permitted by law.

11. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the supervisory authority. In Finland, the competent authority is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), Lintulahdenkuja 4, 00530 Helsinki, Finland. Website: tietosuoja.fi. You may also lodge a complaint with your local supervisory authority in another EU or EEA member state.

12. Direct Marketing

We do not send unsolicited direct marketing by email based solely on your visit to the Website. If you contact us voluntarily, we may respond to your inquiry. Where marketing cookies are used with your consent, related processing is described in our Cookie Policy.

13. Children's Privacy

The Website is not directed at children. Under Section 6 of the Finnish DPA, the age of digital consent in Finland is 13 years. We do not knowingly collect personal data from individuals under 13 years of age. If you believe we have collected data from a child, please contact us immediately so we can delete it.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Where changes materially affect how we process personal data, we will take appropriate steps to inform you where required by law.

15. Contact

For any questions regarding this Privacy Policy or our data practices, contact us at callback@purgingyrglow.world or write to Purgingyrglow, Kappelintie 5, 44500 Viitasaari, Finland.