Khelvornchim

Privacy Policy

Last updated:

1. Data Controller

The data controller responsible for your personal data is:

Khelvornchim
Piispansilta 11, 02230 Espoo, Finland
Email: serviceteam@khelvornchim.world
Website: https://khelvornchim.world

2. What Personal Data We Collect

We collect the following categories of personal data when you interact with our website:

  • Contact information: Full name, email address, and phone number (if provided) submitted through our order form.
  • Communication data: Messages and inquiries submitted through our contact or order forms.
  • Technical data: IP address, browser type, operating system, device information, referring URLs, and pages visited.
  • Cookie data: Information collected through cookies and similar technologies as described in our Cookie Policy.
  • Consent records: Records of the consents you have provided, including timestamps and scope of consent.

3. Purposes and Legal Bases for Processing

We process your personal data for the following purposes and on the corresponding legal bases under Article 6 of the GDPR:

  • Order processing and fulfillment: To process and fulfill your orders, communicate with you about your orders, and provide customer support. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
  • Responding to inquiries: To respond to your messages and requests submitted through our forms. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
  • Website functionality: To ensure the proper functioning and security of our website. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
  • Analytics: To understand how visitors use our website and to improve our services (only when you have consented to analytics cookies). Legal basis: consent (Art. 6(1)(a) GDPR).
  • Marketing: To deliver relevant information about our products (only when you have consented to marketing cookies). Legal basis: consent (Art. 6(1)(a) GDPR).
  • Legal compliance: To comply with applicable laws, regulations, and legal obligations. Legal basis: legal obligation (Art. 6(1)(c) GDPR).

4. Data Recipients and Transfers

We may share your personal data with the following categories of recipients:

  • Service providers: Hosting providers, email service providers, and analytics platforms that process data on our behalf under data processing agreements.
  • Legal authorities: Government agencies or law enforcement when required by applicable law.

We do not sell your personal data to third parties. If any data transfer occurs outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or adequacy decisions.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

  • Order data: Retained for the duration required to fulfill the order and for up to 5 years thereafter for legal and accounting purposes, as required by Finnish bookkeeping legislation (Kirjanpitolaki 1336/1997).
  • Contact form inquiries: Retained for up to 12 months after the inquiry is resolved.
  • Cookie consent records: Retained for up to 12 months from the date of consent.
  • Technical/analytics data: Retained for up to 26 months, subject to your cookie preferences.

After the retention period expires, data is securely deleted or anonymized.

6. Your Rights Under GDPR

As a data subject, you have the following rights under the General Data Protection Regulation:

  • Right of access (Art. 15): You have the right to obtain confirmation as to whether personal data concerning you is being processed and, if so, to access that data.
  • Right to rectification (Art. 16): You have the right to request the correction of inaccurate personal data.
  • Right to erasure (Art. 17): You have the right to request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, among other grounds.
  • Right to restriction (Art. 18): You have the right to request restriction of processing in certain circumstances.
  • Right to data portability (Art. 20): You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
  • Right to object (Art. 21): You have the right to object to processing based on legitimate interests.
  • Right to withdraw consent (Art. 7(3)): Where processing is based on consent, you have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us at serviceteam@khelvornchim.world. We will respond to your request within 30 days.

7. Right to Lodge a Complaint

If you believe that our processing of your personal data violates the GDPR, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto):

Office of the Data Protection Ombudsman
Lintulahdenkuja 4, 00530 Helsinki, Finland
Website: https://tietosuoja.fi/en
Email: tietosuoja@om.fi

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • HTTPS encryption for all data transmitted through our website.
  • Access controls limiting data access to authorized personnel only.
  • Regular review and updating of our security practices.
  • Secure storage of personal data with encryption at rest where applicable.

9. Automated Decision-Making

We do not use automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.

10. Children's Privacy

Our website and products are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child under 18, we will take steps to delete such data promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Khelvornchim
Piispansilta 11, 02230 Espoo, Finland
Email: serviceteam@khelvornchim.world