Updated: 30.11.2023
Contents
We have created this privacy policy to show you that we process your photos and personal data in an appropriate manner. Each of our customers is considered a data subject as specified by the EU General Data Protection Regulation.
In order to use Ifolor services, you must agree to the terms and conditions contained in this privacy policy.
This document describes the types of personal data (data associated with a specific person or data that allows a specific person to be identified) that we collect about you both when visiting the Ifolor website and when placing an order with us as well as the ways with which we use and process this data. Additionally, this document describes how we use cookies.
We use personal data to:
The customer register that stores personal data is controlled by
Ifolor Oy (Business ID: 0871712-9)
Karhumäenkuja 2
FI-01530 Vantaa
Finland
Contact details for further information about data protection and personal data processing:
E-mail: dataprotectionofficer@ifolor.fi
Mail:
Ifolor Oy
Data protection officer
Karhumäenkuja 2
FI-01530 Vantaa
Finland
We collect and process only data that is absolutely necessary for maintaining our relationship with you and processing your orders in a professional manner.
Information you have provided personally or that can be used to identify you:
Data collected when you use our services and data derived from analytics:
We use your personal data to:
We will process your personal data in a confidential manner. We will not disclose your data to third party processors. However, Ifolor reserves the right to disclose personal data to processors operating in Switzerland or in EU member states in cases where this is required in order to process your order. In such cases, we will ensure an adequate level of protection by following the instructions specified in the EU General Data Protection Regulation and by concluding GDPR-compliant agreements with our suppliers.
The Ifolor data file where your personal data is stored is continuously protected with appropriate technical and organisational measures that prevent both data loss and the misuse of personal data. Your personal data is stored in a safe environment that is inaccessible to the public. We maintain a very high level of technical and organisational security across our data centres, processes and online storefront data systems. Our servers are protected against unauthorised access and denial of service attacks.
If we need to transmit your personal data, for example, when you log in or make a payment, we encrypt your personal data using Secure Socket Layer (SSL) technology. What this means in practice is that as long as your web browser supports SSL (https) technology, the communications between your computer and Ifolor’s server is protected by the most widely-adopted encryption method in the world.
Whenever possible, we observe good data protection practices (such as data consolidation and anonymisation) in personal data processing and incorporate them in our data processing planning. We have updated our data processing operations to meet the requirements of the EU General Data Protection Regulation, which came into effect on 25 May 2018.
Only Ifolor Oy’s internal staff will have access to our customer data. Furthermore, our staff is trained in the safe and ethical use of personal data.
We use a number of trusted contract partners to whom we may transmit personal data. These partners are contractually bound to the requirements specified in the EU General Data Protection Regulation and other applicable data protection laws.
Our electronic payment process (excluding paying by invoice) is handled by a certified payment service provider, Datatrans AG Zürich. Your payment details are transmitted directly to this company, which will store your personal data for a short period of time for processing your payment and any reimbursement you might require.
Online payment is provided by Paytrail Oyj (Business ID: 2552865-3), Innova 2, Lutakonaukio 7, FI-40100 Jyväskylä. Following information is collected to Paytrail registry during payment:
Paytrail’s privacy policy: https://www.paytrail.com/en/data-privacy-notice-paytrail-payment-service.
Your e-mail address and other personal data necessary for delivery e-mail newsletters may be disclosed to Selligent, the company responsible for the technical aspects of our newsletter.
We also use Selligent to send other electronic messages/emails to you. Accordingly, Selligent may receive your personal data as part of our existing order processing arrangements. The data will be stored there for the duration for which it is otherwise lawful to store it for the purposes set out in this data protection declaration, i.e. in particular for contractual communication contracts with you or for advertising communication.
The applicable Selligent Privacy Policy can be found at https://www.selligent.com/privacy-policy-europe/.
The company responsible for managing personal data:
Ifolor Oy (Business ID: 0871712-9)
Karhumäenkuja 2
FI-01530 Vantaa
Finland
We will store your personal data and image files only as long as necessary to fulfil the purposes indicated in this privacy policy. However, we may store some of your data for a longer period of time to fulfil certain statutory obligations (such as those concerning accounting and consumer transactions) and to demonstrate that we have appropriately fulfilled our obligations.
You may request us to anonymise your personal data or remove the data from our system or prohibit us from using the data for the purposes specified in this privacy policy.
We are required by law to retain certain types of data for a longer period of time. Some examples are provided below:
Images and related data of customer orders are automatically deleted no later than 30 days after the delivery of the order, unless a different procedure has been specifically agreed between the parties.
As a customer, you have the right to:
receive the details of the personal data we store about you (by written request)
request us to rectify any inaccurate personal data concerning you
notify us, in writing, that you wish to prohibit us from continuing to process your personal data, with the reservation that we will retain the right to process personal data to the extent necessary (for invoicing purposes, for instance).
If your personal data is processed solely based on your consent, you will have the right to withdraw your consent at any time. Please note, that this will not have any bearing in the legality of any processing that has taken place before withdrawing your consent.
If you wish to make a request concerning the exercise of your rights, please contact our customer services. Ifolor reserves the right to ask you to identify yourself appropriately before processing any requests concerning the rights specified above.
If you notice any deficiencies in the processing of your personal data or find it to be unlawful, you will have the right to file a complaint with the Data Protection Ombudsman.
To request us to provide you with the personal data stored in our systems, please contact us via e-mail, address: dataprotectionofficer@ifolor.fi. We will process your request within 30 days of receiving the request.
Ifolor Oy is committed to providing its customers with opportunities to determine to what extent their data is collected and used.
You can personally determine what kind of personalised marketing we will send you or to completely opt out of marketing communications from us. If you do not wish to receive any marketing communications from us, please contact our customer services. To unsubscribe from our newsletter, simply click on the link provided in any of our newsletter e-mails.
We use customer data with third parties for analytical purposes and research as well as for providing personalised content. We may disclose purchase behaviour and browsing data to our partners in order to keep you up to date with products and promotions relevant to you. Whenever possible, the information used for research, analysis and creating personalised content will be anonymised or pseudonymised. Only we can associate your pseudonymised data with your name.
You can limit the scope of personal data disclosed for marketing purposes by contacting our customer services.
If necessary, we will also fulfil requests for personal data by public authorities. Law permitting, we will notify you of any such request.
The Ifolor website is designed to be as user-friendly and streamlined as possible. To achieve this, we use cookies and Flash Local Shared Objects (LSOs) on our website. You can personally determine whether you will allow our software to place cookies on your computer. By changing the settings on your web browser, you can disable cookies completely, allow only certain websites to place cookies or set the browser to prompt you to accept or reject cookies. Please note, that blocking cookies from the Ifolor website may limit or prevent access to some of the website’s functions or services. For your own convenience, we would advise you to enable cookies in your web browser. The cookies placed by our server on your browser will persist for up to 30 days.
Google Tag Manager
This website uses Google Tag Manager.The Tool Tag Manager itself (which implements the tags) is a domain without cookies which does not collect any personal details.The tool ensures the activation of other tags which themselves potentially collect data.
Google Tag Manager does not access these data.If a deactivation is carried out at domain or cookie level, this shall remain in effect for all tracking tags that are implemented with Google Tag Manager.
In the following the required legal basis for the processing of data is listed:
- Art. 6 para. 1 s. 1 lit. a GDPR
LinkedIn Insight Tag
The LinkedIn Insight Tag is a lightweight JavaScript tag that is added to our website to enable in-depth campaign reporting and to help us to optimize our LinkedIn campaigns.
The LinkedIn Insight Tag creates a unique LinkedIn browser cookie on a visitor's browser and enables the collection of the following metadata with the cookie:
LinkedIn does not share personal data with Ifolor. It only provides reports about our website visitors and ad performance. These reports do not identify individual users at any point. LinkedIn users can control the use of their data for advertising purposes through their account settings. The data controller is LinkedIn Ireland Unlimited Company Company, Wilton Place, Dublin 2, Ireland.
Legal basis for this process is your consent, Article 6 (1) (a), Article 7 GDPR. You can object the measuring of your usage during your visit by clicking on the following link https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy.
Pinterest-Tag
Our online offering uses the “Pinterest Tag” of Pinterest Inc., 808 Brannan St, San Francisco, CA 94103, USA. If a Pinterest user sees or clicks on an advert, other actions and target groups that have shown interest are compiled and tracked. Using them allows us to ensure that Pinterest adverts are only shown to Pinterest users who have already shown an interest in our offering and that they also match the potential interest of the user. This data helps us to measure the conversion of the respective campaign. It is used for statistical and market research purposes and helps to optimise campaigns.
If you log into your Pinterest account after visiting our website or if you visit our website while you are still logged in, your data may be stored and processed by Pinterest. Pinterest is able to connect this data to your Pinterest account and use it for advertising purposes.
To do this, information is collected, evaluated and transmitted by your browser each time you visit. It is collected via a Java script and cookies. The following information is collected anonymously and processed for statistical purposes:
If you are directed by a Pin on Pinterest to our online offering, we store a cookie on your computer that interacts via JavaScript code with a “Tag” that has also been implemented by Pinterest. These cookies become invalid after 180 days and are not used for personal identification.
You can object to this particular data processing at any time at https://help.pinterest.com/en/article/personalization-and-data, either by turning off the settings for this under “Personalization” in your Pinterest account, or by selecting “Do Not Track” in your browser.
You can access Pinterest’s current Privacy Policy at https://policy.pinterest.com/en/privacy-policy.
In the following the required legal basis for the processing of data is listed:
- Art. 6 para. 1 s. 1 lit. a GDPR
VWO
To continously improve our online offers/selection, we regularly carry out A/B and multivariate tests on our website. During these tests, we collect information on visitor hits and your interaction with our online offering which is recorded anonymously and evaluated for statistical purposes. For this purpose, we process tasks using the technology Visual Website Optimizer ("VWO"), operated by Wingfy (14th Floor, KLJ Tower North, Netaji Subhash Place, Pitam Pura, Delhi 110034, India).
The legal basis for the processing of personal data, using cookies for analysis purposes, is Article 6(1)(a) GDPR, given consent by the data subject to this processing.
To do this, information is collected, evaluated and transmitted by your browser each time you visit. This is collected via a Java script and cookies. The following information is collected anonymously and processed for statistical purposes:
VWO uses your IP address to carry out geolocation (regional details of your location). Following the geolocation, which is done directly when you visit the site, your IP address is immediately deleted.
During use of VWO, the following cookies are set, which last as long as shown?:
If you do not agree to the measuring of your usage during your visit being stored and evaluated, you can object to it by clicking on the following link: https://vwo.com/opt-out/. This allows you to store a so-called opt-out cookie in your browser. This is used to prevent the service from setting any cookies to measure usage and from collecting any session data. Please note: If you delete your cookies, the opt-out cookie is also deleted, and you may need to re-activate it.
The applicable VWO Privacy Policy can be found at https://vwo.com/privacy-policy/.
TikTok
Our online offer uses “TikTok Pixel” from TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (“TikTok”). TikTok Pixel enables TikTok to determine website visitors as target groups to display ads. Accordingly, we use TikTok Pixel to display our TikTok ads only to TikTok users who have also shown an interest in our online offerings or who exhibit certain characteristics that we communicate to TikTok. TikTok Pixel also allows us to statistically analyse our TikTok ads. Data processing by TikTok is carried out within the framework of TikTok’s data use policy.
Each time you access our website, information transmitted by your browser is collected and evaluated for this purpose. The collection takes place via a JavaScript as well as cookies. The following information is collected anonymously and processed statistically:
Cookies are set to recognize returning visitors in pseudonymised form. These cookies lose their validity after 13 months and are not used for personal identification. If you do not agree to the storage and evaluation of usage measurement from your visit, you can object to this by clicking on the circular fingerprint icon in the bottom left corner of the page.
This will allow you to place a so-called opt-out cookie in your browser. This means that the service will not set cookies for usage measurement and no session data will be collected. Please note: If you delete your cookies, the opt-out cookie will also be deleted and you may have to activate it again.
TikTok also processes your personal data outside of Switzerland/EEA and has entered into standard contractual clauses to ensure an adequate level of data protection. TikTok’s current privacy policy can be found at https://www.tiktok.com/legal/privacy-policy.
Required legal basis for the processing of data is listed Art. 6 para. 1 s. 1 lit. a GDPR.
Xandr
We use this cookie to target advertising that is appropriate for you online. The domain is owned by Xandr Inc., which provides a variety of online advertising services. A cookie allows a service provider to associate information about its partners with a cookie. Information that the cookie collects: IP address, browser and device information, ISP, analytical information about the visitor's movement on the site, and demographic information.
In the following the required legal basis for the processing of data is listed:
- Art. 6 para. 1 s. 1 lit. a GDPR
You can influence the processing of your data and withdraw your consent by editing your settings from cookie manager on this site or from the service provider's website. More information: https://www.xandr.com/privacy/platform-privacy-policy
Further information about cookies and browser settings can be found by clicking on the circular fingerprint icon in the bottom left corner of the page.
Our goal is to provide as user-friendly and streamlined online experience as possible. To achieve this, we use online analytics services that allow us to keep track of the number of visitors to our website, their visit frequency and the devices and software they use to access the website. Ifolor does not use this software to collect personal data or unique IP addresses. Instead, this information is used anonymously and in summary form for statistical purposes and to further develop our website.
Webtrekk
Visits to our website are evaluated pseudonymised for marketing and optimisation purposes to collect statistical data on the use of our websites and improve it accordingly. Within the framework of order processing, we use technology from Webtrekk GmbH Robert-Koch-Platz 4, 10115 Berlin, Germany. This automatically collects and saves data. Pseudonymous usage profiles are also created here. Webtrekk uses them to provide us with reports on user activity and other services related to the use of our websites.
Webtrekk abbreviates the IP address as soon as it is received and only uses it on our behalf to recognise sessions and for geolocalization only. The abbreviated IP address does not allow for any conclusions to be drawn about you as a visitor to our websites.
Every time you access our website, information that is transmitted by your browser is collected and evaluated. It is collected using a pixel, which is integrated on each page, and / or a Java script as well as cookies. For further information about what cookies are and how you can remove or block them, please click on the circular fingerprint icon in the bottom left corner of the page.
The following information is collected and processed:
Opt-out disclosure:
If you do not agree with the storage and analysis of the analysis data from your visit, you can object to this by clicking the following link:
Click here to deactivate Webtrekk for this domain.
This places a so-called opt-out cookie on your browser. The result is that the service does not place any web analytics cookies or collect any session data. Note: If you delete your cookies, the opt-out cookie will also be deleted and you may need to reactivate it.
However, we would appreciate if you would agree to the use of analytics tools, as they will help us to regularly improve our website and services and to optimise them to your needs.
The legal basis is our legitimate interest, Art. 6(1) point f GDPR, to provide you with a smooth order process and to make our website more user-friendly and effective overall.
In addition to the above, Ifolor utilises the Adjust analysis service to track visits to our ordering software. This service helps us to improve our services and optimise them to customer needs. This tracking data is collected anonymously. If you do not wish to collect this kind of tracking data, many browsers include the option to block tracking.
We reserve the right to revise this privacy policy to account for service improvements or changes in applicable laws and regulations. We will notify you of any material changes to our privacy policy whenever we update their terms and conditions.
This privacy policy supersedes our previous Privacy Policy.
If you have any questions about this privacy policy, please contact us via e-mail, address: dataprotectionofficer@ifolor.fi
or mail, address:
Ifolor Oy
Data protection officer
Karhumäenkuja 2
FI-01530 Vantaa
Finland