Privacy Policy

How we collect, use, and protect your personal information

Last updated:

1. Introduction

Srexalonzygroz ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website at srexalonzygroz.world and use our services.

We process personal data in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and applicable Finnish data protection laws.

2. Data Controller Information

The data controller responsible for your personal data is:

  • Company Name: Srexalonzygroz
  • Address: Ketolantie, 91800 Tyrnävä, Finland
  • Email: askuse@srexalonzygroz.world
  • Business ID (Y-tunnus): 1234567-8
  • Country: Finland

For all data protection matters, including GDPR rights requests, please contact: askuse@srexalonzygroz.world.

3. Personal Data We Collect

We collect the following categories of personal data:

3.1 Information You Provide

  • Name and contact information (email address, phone number)
  • Order and shipping details
  • Communications and correspondence with us
  • Consent preferences

3.2 Information Collected Automatically

  • IP address and device information
  • Browser type and version
  • Pages visited and time spent on our website
  • Referring website addresses
  • Cookies and similar technologies (see our Cookie Policy)

4. Purposes and Legal Basis for Processing

We process your personal data for the following purposes:

4.1 Contract Performance (Article 6(1)(b) GDPR)

  • Processing and fulfilling your orders
  • Communicating about your orders and inquiries
  • Providing customer support

4.2 Consent (Article 6(1)(a) GDPR)

  • Sending marketing communications (with your explicit consent)
  • Using analytics and marketing cookies

4.3 Legitimate Interests (Article 6(1)(f) GDPR)

  • Improving our website and services
  • Preventing fraud and ensuring security
  • Analyzing website usage patterns

4.4 Legal Obligations (Article 6(1)(c) GDPR)

  • Complying with tax and accounting requirements
  • Responding to legal requests from authorities

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

  • Order data: 7 years (for tax and accounting purposes)
  • Marketing consent: Until you withdraw consent
  • Customer support inquiries: 3 years after resolution
  • Website analytics data: 26 months

6. Your Rights Under GDPR

As a data subject, you have the following rights:

  • Right of Access (Article 15): Request a copy of your personal data
  • Right to Rectification (Article 16): Request correction of inaccurate data
  • Right to Erasure (Article 17): Request deletion of your data ("right to be forgotten")
  • Right to Restriction (Article 18): Request limitation of data processing
  • Right to Data Portability (Article 20): Receive your data in a portable format
  • Right to Object (Article 21): Object to processing based on legitimate interests
  • Right to Withdraw Consent (Article 7): Withdraw consent at any time

To exercise your rights, please contact us at askuse@srexalonzygroz.world. We will respond within 30 days.

7. Data Sharing and Transfers

We may share your personal data with:

  • Service providers: Payment processors, shipping companies, and hosting providers who assist in operating our business
  • Legal authorities: When required by law or to protect our rights

If we transfer data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

Where required, data processing agreements are in place with our processors under Article 28 GDPR.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • SSL/TLS encryption for data transmission
  • Secure server infrastructure
  • Access controls and authentication
  • Regular security assessments

9. Automated Decision-Making

We do not make decisions based solely on automated processing, including profiling, that produce legal effects or similarly significant effects for individuals under Article 22 GDPR.

10. Children's Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

12. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto):

  • Website: tietosuoja.fi
  • Address: Lintulahdenkuja 4, 00530 Helsinki, Finland

13. Contact Us

For questions about this Privacy Policy or our data practices, please contact us:

  • Email: askuse@srexalonzygroz.world
  • Address: Ketolantie, 91800 Tyrnävä, Finland