Privacy Policy

Last updated:

1. Introduction

Quelthorix ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website quelthorix.world and use our services.

We process personal data in compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and other applicable data protection laws.

2. Data Controller Information

The data controller responsible for your personal data is:

  • Company Name: Quelthorix
  • Address: Orastie 7, 71750 Maaninka, Finland
  • Email: online@quelthorix.world
  • Country: Finland

3. Personal Data We Collect

We may collect and process the following categories of personal data:

3.1 Information You Provide

  • Contact Information: Name, email address, phone number (optional)
  • Communication Data: Messages, inquiries, and correspondence
  • Order Information: Details related to product orders and preferences

3.2 Automatically Collected Information

  • Technical Data: IP address, browser type and version, operating system
  • Usage Data: Pages visited, time spent on pages, navigation paths
  • Cookie Data: Information collected through cookies and similar technologies

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR Article 6:

  • Consent (Article 6(1)(a)): When you have given clear consent for us to process your personal data for specific purposes
  • Contract Performance (Article 6(1)(b)): When processing is necessary for the performance of a contract or to take steps at your request before entering into a contract
  • Legal Obligation (Article 6(1)(c)): When processing is necessary for compliance with a legal obligation
  • Legitimate Interests (Article 6(1)(f)): When processing is necessary for our legitimate interests, provided these are not overridden by your rights and interests

5. Purposes of Data Processing

We use your personal data for the following purposes:

  • Processing and fulfilling your orders
  • Responding to your inquiries and providing customer support
  • Sending order confirmations and updates
  • Improving our website, products, and services
  • Analyzing website usage and performance
  • Complying with legal obligations
  • Preventing fraud and ensuring security

5A. Data Minimization and Accuracy

We collect only personal data that is necessary for the purposes listed in this policy. We take reasonable steps to keep personal data accurate and up to date, and we encourage you to notify us if your data changes.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

  • Order Data: Retained for 7 years to comply with tax and accounting obligations
  • Communication Records: Retained for 3 years after last contact
  • Cookie Data: Retained according to our Cookie Policy
  • Marketing Consent: Retained until consent is withdrawn

After the retention period expires, we will securely delete or anonymize your personal data.

7. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

  • Right of Access (Article 15): You have the right to request a copy of your personal data
  • Right to Rectification (Article 16): You have the right to request correction of inaccurate personal data
  • Right to Erasure (Article 17): You have the right to request deletion of your personal data ("right to be forgotten")
  • Right to Restriction (Article 18): You have the right to request restriction of processing
  • Right to Data Portability (Article 20): You have the right to receive your data in a structured, machine-readable format
  • Right to Object (Article 21): You have the right to object to processing based on legitimate interests or for direct marketing
  • Right to Withdraw Consent (Article 7(3)): Where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at online@quelthorix.world. We will respond to your request within 30 days.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, including:

  • SSL/TLS encryption for data transmission
  • Secure storage systems with access controls
  • Regular security assessments and updates
  • Staff training on data protection
  • Data minimization practices

9. Data Sharing and Transfers

We may share your personal data with:

  • Service Providers: Third parties who assist with website hosting, payment processing, and delivery services
  • Legal Authorities: When required by law or to protect our legal rights

When transferring data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

9A. Categories of Recipients

Depending on your interaction with our website, recipients of personal data may include:

  • Hosting and technical infrastructure providers
  • Payment and transaction service providers
  • Logistics and delivery partners
  • Customer support and communication providers
  • Analytics and advertising partners, where you have consented

10. Cookies

We use cookies and similar tracking technologies on our website. For detailed information about our use of cookies, please see our Cookie Policy.

10A. Withdrawal of Consent

Where processing is based on consent (for example, optional analytics or marketing cookies), you may withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before withdrawal.

11. Children's Privacy

Our website and services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child, we will take steps to delete such information.

11A. Automated Decision-Making

We do not use your personal data to make solely automated decisions that produce legal effects concerning you or similarly significantly affect you within the meaning of GDPR Article 22.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by the "Last updated" date at the top of this page. We encourage you to review this Privacy Policy periodically.

13. Right to Lodge a Complaint

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement. In Finland, the supervisory authority is:

Office of the Data Protection Ombudsman
Lintulahdenkuja 4, 00530 Helsinki, Finland
Website: tietosuoja.fi

14. Contact Us

If you have any questions about this Privacy Policy or our data protection practices, please contact us:

  • Email: online@quelthorix.world
  • Address: Orastie 7, 71750 Maaninka, Finland

If your request concerns data protection rights, please include enough information to verify your identity and process your request securely.