Privacy Policy

Last updated: Dynamic Date

1. Introduction

Xlozarinvexdhor ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website xlozarinvexdhor.world or purchase our products.

This policy complies with the General Data Protection Regulation (GDPR) (EU) 2016/679, the Finnish Data Protection Act (1050/2018), and other applicable data protection laws.

2. Data Controller Information

As the data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring compliance with applicable data protection laws.

3. Personal Data We Collect

We collect and process the following categories of personal data:

3.1 Information You Provide Directly

• Contact Information: Name, email address, phone number (if provided), and postal address
• Order Information: Product orders, delivery preferences, and purchase history
• Communication Data: Messages, inquiries, and feedback you send to us
• Consent Records: Records of permissions you have given us

3.2 Information Collected Automatically

• Technical Data: IP address, browser type and version, operating system, device information
• Usage Data: Pages visited, time spent on pages, navigation paths, referring URLs
• Cookie Data: Information collected through cookies and similar technologies (see our Cookie Policy)

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR Article 6:

• Contract Performance (Art. 6(1)(b)): Processing necessary to fulfill orders and provide requested services
• Consent (Art. 6(1)(a)): Where you have given explicit consent for specific purposes, such as marketing communications
• Legitimate Interests (Art. 6(1)(f)): Processing necessary for our legitimate business interests, such as improving our services, preventing fraud, and ensuring website security
• Legal Obligation (Art. 6(1)(c)): Processing required to comply with applicable laws, such as tax and accounting requirements

5. Purposes of Data Processing

We use your personal data for the following purposes:

• Processing and fulfilling your orders
• Communicating with you about your orders and inquiries
• Providing customer support and responding to your requests
• Sending transactional emails (order confirmations, shipping updates)
• Sending marketing communications (only with your consent)
• Improving our website, products, and services
• Analyzing website usage and user behavior for optimization
• Preventing fraud and ensuring security
• Complying with legal and regulatory obligations

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Order Data: Retained for 7 years after the order date for tax and accounting purposes as required by Finnish law
• Customer Communication: Retained for 3 years after the last interaction
• Marketing Consent Records: Retained for as long as you remain subscribed, plus 3 years after unsubscription
• Website Analytics Data: Retained for 26 months
• Cookie Consent Records: Retained for 12 months

After the retention period expires, your data will be securely deleted or anonymized.

7. Data Sharing and Recipients

We may share your personal data with the following categories of recipients:

• Service Providers: Companies that help us operate our business (payment processors, shipping carriers, email service providers, hosting providers)
• Professional Advisors: Lawyers, accountants, and auditors when necessary
• Legal Authorities: When required by law or to protect our legal rights

All third-party service providers are contractually obligated to protect your data and process it only according to our instructions. We do not sell your personal data to third parties.

8. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When such transfers occur, we ensure appropriate safeguards are in place:

• Transfers to countries with an EU adequacy decision
• Standard Contractual Clauses (SCCs) approved by the European Commission
• Other legally recognized transfer mechanisms

You may request information about the specific safeguards applied to international transfers by contacting us.

9. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access (Art. 15): Request a copy of your personal data we hold
• Right to Rectification (Art. 16): Request correction of inaccurate or incomplete data
• Right to Erasure (Art. 17): Request deletion of your personal data ("right to be forgotten")
• Right to Restriction (Art. 18): Request limitation of processing of your data
• Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format
• Right to Object (Art. 21): Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent (Art. 7(3)): Withdraw consent at any time where processing is based on consent
• Right Not to be Subject to Automated Decision-Making (Art. 22): Not be subject to decisions based solely on automated processing

To exercise any of these rights, please contact us at request@xlozarinvexdhor.world. We will respond to your request within 30 days as required by law.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction:

• Secure HTTPS encryption for all data transmission
• Secure server infrastructure with access controls
• Regular security assessments and updates
• Employee training on data protection
• Data minimization practices
• Incident response procedures

11. Children's Privacy

Our website and products are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read the privacy policies of any third-party sites you visit.

13. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website with a new "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

14. Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman:

15. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: