Privacy Policy

1. Introduction

Floxarixshex ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website floxarixshex.world and use our services.

This policy is designed to comply with the General Data Protection Regulation (GDPR) (EU) 2016/679, the Finnish Data Protection Act (1050/2018), and other applicable data protection laws.

2. Data Controller Information

The data controller responsible for your personal data is:

• Company Name: Floxarixshex
• Address: Puistokatu 41, 85800 Haapajärvi, Finland
• Email: question@floxarixshex.world
• Country: Finland

3. Personal Data We Collect

We may collect and process the following categories of personal data:

3.1 Information You Provide Directly

• Contact Information: Name, email address, phone number (optional)
• Order Information: Details provided when placing an order
• Communication Data: Messages and correspondence you send to us
• Consent Records: Records of consents you have given

3.2 Information Collected Automatically

• Technical Data: IP address, browser type, device information, operating system
• Usage Data: Pages visited, time spent on pages, navigation paths
• Cookie Data: Information collected through cookies and similar technologies (see our Cookie Policy)

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR Article 6:

• Consent (Art. 6(1)(a)): Where you have given explicit consent for specific processing activities, such as marketing communications
• Contract Performance (Art. 6(1)(b)): Processing necessary to fulfill orders and provide our services
• Legal Obligation (Art. 6(1)(c)): Processing required to comply with legal requirements
• Legitimate Interests (Art. 6(1)(f)): Processing necessary for our legitimate business interests, such as improving our services and ensuring security

5. Purposes of Data Processing

We use your personal data for the following purposes:

• Processing and fulfilling your orders
• Communicating with you about your orders and inquiries
• Providing customer support
• Improving our website and services
• Analyzing website usage and trends
• Ensuring website security and preventing fraud
• Complying with legal obligations
• Sending marketing communications (with your consent)

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Order Data: Retained for 7 years for tax and accounting purposes as required by Finnish law
• Marketing Consent: Retained until you withdraw consent
• Website Analytics: Aggregated data retained for up to 26 months
• Customer Inquiries: Retained for 3 years after resolution

After the retention period expires, we securely delete or anonymize your personal data.

7. Data Sharing and Transfers

We may share your personal data with:

• Service Providers: Third parties who assist in operating our website, processing payments, and delivering orders
• Legal Authorities: When required by law or to protect our legal rights

We do not sell your personal data to third parties.

7.1 International Transfers

If we transfer your data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Transfers to countries with adequacy decisions
• Other legally recognized transfer mechanisms

8.1 Profiling and Automated Decisions

We do not use fully automated decision-making, including profiling, that produces legal or similarly significant effects on you within the meaning of GDPR Article 22.

9. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access (Art. 15): Request a copy of your personal data
• Right to Rectification (Art. 16): Request correction of inaccurate data
• Right to Erasure (Art. 17): Request deletion of your data ("right to be forgotten")
• Right to Restriction (Art. 18): Request limitation of processing
• Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format
• Right to Object (Art. 21): Object to processing based on legitimate interests
• Right to Withdraw Consent (Art. 7): Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at question@floxarixshex.world. We will respond within 30 days.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit using SSL/TLS
• Secure storage with access controls
• Regular security assessments
• Staff training on data protection
• Incident response procedures

While we strive to protect your data, no transmission over the internet is completely secure. We encourage you to take precautions when sharing personal information online.

11. Cookies and Tracking

Our website uses cookies and similar tracking technologies. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

12. Children's Privacy

Our website and services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

14. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In Finland, the relevant authority is:

• Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto)
• Address: Lintulahdenkuja 4, 00530 Helsinki, Finland
• Website: tietosuoja.fi