Privacy Policy

Ifolor Oy, Vantaa (Finland)

Summary

We have created this privacy policy to show you that we process your photos and personal data in an appropriate manner. Each of our customers is considered a data subject as specified by the EU General Data Protection Regulation.

In order to use Ifolor services, you must agree to the terms and conditions contained in this privacy policy.

This document describes the types of personal data (data associated with a specific person or data that allows a specific person to be identified) that we collect about you both when visiting the Ifolor website and when placing an order with us as well as the ways with which we use and process this data. Additionally, this document describes how we use cookies.

We use personal data to:

  • provide easy-to-use and secure services,
  • improve our customer services and marketing and
  • further develop our online storefront.

Data file controller and the controller’s contact details

The customer register that stores personal data is controlled by

Ifolor Oy (Business ID: 0871712-9)
Karhumäenkuja 2
FI-01530 Vantaa
Finland

Contact details for further information about data protection and personal data processing:

E-mail: dataprotectionofficer@ifolor.fi
Mail:
Ifolor Oy
Data protection officer
Karhumäenkuja 2
FI-01530 Vantaa
Finland

What personal data does Ifolor collect about me?

We collect and process only data that is absolutely necessary for maintaining our relationship with you and processing your orders in a professional manner.

Information you have provided personally or that can be used to identify you:

  • your name and other similar identification data
  • your contact details, such as your address, e-mail address and a telephone number used to manage the customer relationship, which will also be provided to Finnish Post (Posti) for delivery notification.
  • your payment details, such as your billing information.
    • We do not store your full credit card information.
  • By your consent, we may store your location data, which we use to estimate delivery times.
  • By your consent, we may store your birth date, which we use for targeted marketing e.g. birthday congratulations.
  • Account number (only when refund to account)

Data collected when you use our services and data derived from analytics:

  • your purchase history, including the products you have ordered and the associated price data,
  • delivery details, such as the delivery method you have selected and the delivery address you have provided
  • access and browsing data associated with our online storefront and your terminal’s (device’s/browser’s) details, such as the IP address.

How will Ifolor use my personal data?

We use your personal data to:

  • process your orders and deliver the products you have ordered
  • customer care and maintenance
  • improve your customer experience
  • develop our operations and services
  • generate statistics
  • produce personalised content and marketing
  • prevent misconduct
  • provide better customer service.

We will process your personal data in a confidential manner. We will not disclose your data to third party processors. However, Ifolor reserves the right to disclose personal data to processors operating in Switzerland or in EU member states in cases where this is required in order to process your order. In such cases, we will ensure an adequate level of protection by following the instructions specified in the EU General Data Protection Regulation and by concluding GDPR-compliant agreements with our suppliers.

How does Ifolor store and protect my personal data?

The Ifolor data file where your personal data is stored is continuously protected with appropriate technical and organisational measures that prevent both data loss and the misuse of personal data. Your personal data is stored in a safe environment that is inaccessible to the public. We maintain a very high level of technical and organisational security across our data centres, processes and online storefront data systems. Our servers are protected against unauthorised access and denial of service attacks.

If we need to transmit your personal data, for example, when you log in or make a payment, we encrypt your personal data using Secure Socket Layer (SSL) technology. What this means in practice is that as long as your web browser supports SSL (https) technology, the communications between your computer and Ifolor’s server is protected by the most widely-adopted encryption method in the world.

Whenever possible, we observe good data protection practices (such as data consolidation and anonymisation) in personal data processing and incorporate them in our data processing planning. We have updated our data processing operations to meet the requirements of the EU General Data Protection Regulation, which came into effect on 25 May 2018.

Who is allowed to process my personal data?

Only Ifolor Oy’s internal staff will have access to our customer data. Furthermore, our staff is trained in the safe and ethical use of personal data.

We use a number of trusted contract partners to whom we may transmit personal data. These partners are contractually bound to the requirements specified in the EU General Data Protection Regulation and other applicable data protection laws.

Our electronic payment process (excluding paying by invoice) is handled by a certified payment service provider, Datatrans AG Zürich. Your payment details are transmitted directly to this company, which will store your personal data for a short period of time for processing your payment and any reimbursement you might require.

Online payment is provided by Paytrail Oyj (Business ID: 2552865-3), Innova 2, Lutakonaukio 7, FI-40100 Jyväskylä. Following information is collected to Paytrail registry during payment:

  • Payment method 
  • Date/time of payment 
  • IP address 
  • Bank account number

Paytrail’s privacy policy: https://www.paytrail.com/en/data-privacy-notice-paytrail-payment-service.

Your e-mail address and other personal data necessary for delivery e-mail newsletters may be disclosed to Selligent, the company responsible for the technical aspects of our newsletter.

We also use Selligent to send other electronic messages/emails to you. Accordingly, Selligent may receive your personal data as part of our existing order processing arrangements. The data will be stored there for the duration for which it is otherwise lawful to store it for the purposes set out in this data protection declaration, i.e. in particular for contractual communication contracts with you or for advertising communication.

The applicable Selligent Privacy Policy can be found at https://www.selligent.com/privacy-policy-europe/.

The company responsible for managing personal data:

Ifolor Oy (Business ID: 0871712-9)
Karhumäenkuja 2
FI-01530 Vantaa
Finland

How long will Ifolor store my personal data?

We will store your personal data and image files only as long as necessary to fulfil the purposes indicated in this privacy policy. However, we may store some of your data for a longer period of time to fulfil certain statutory obligations (such as those concerning accounting and consumer transactions) and to demonstrate that we have appropriately fulfilled our obligations.

You may request us to anonymise your personal data or remove the data from our system or prohibit us from using the data for the purposes specified in this privacy policy.

We are required by law to retain certain types of data for a longer period of time. Some examples are provided below: 

  • The Accounting Act (Finlex 1336/1997) specifies an extensive retention period for accounting materials regardless of whether they include personal data.
  • In order to provide a legitimate and secure online storefront for our clients, we collect and store system log data in accordance with statutory requirements.
  • We make sufficient backups of our online storefront’s databases and systems to prevent data loss, to support failure recovery and to ensure data security and service continuity.

Images and related data of customer orders are automatically deleted no later than 30 days after the delivery of the order, unless a different procedure has been specifically agreed between the parties.

What are my rights?

As a customer, you have the right to:

receive the details of the personal data we store about you (by written request)

request us to rectify any inaccurate personal data concerning you

notify us, in writing, that you wish to prohibit us from continuing to process your personal data, with the reservation that we will retain the right to process personal data to the extent necessary (for invoicing purposes, for instance).

If your personal data is processed solely based on your consent, you will have the right to withdraw your consent at any time. Please note, that this will not have any bearing in the legality of any processing that has taken place before withdrawing your consent.

If you wish to make a request concerning the exercise of your rights, please contact our customer services. Ifolor reserves the right to ask you to identify yourself appropriately before processing any requests concerning the rights specified above.

If you notice any deficiencies in the processing of your personal data or find it to be unlawful, you will have the right to file a complaint with the Data Protection Ombudsman.

How do I find out what personal data Ifolor holds about me?

To request us to provide you with the personal data stored in our systems, please contact us via e-mail, address: dataprotectionofficer@ifolor.fi. We will process your request within 30 days of receiving the request.

How do I change how my information is used?

Ifolor Oy is committed to providing its customers with opportunities to determine to what extent their data is collected and used.

You can personally determine what kind of personalised marketing we will send you or to completely opt out of marketing communications from us. If you do not wish to receive any marketing communications from us, please contact our customer services. To unsubscribe from our newsletter, simply click on the link provided in any of our newsletter e-mails.

Will my personal data be disclosed to third parties?

We use customer data with third parties for analytical purposes and research as well as for providing personalised content. We may disclose purchase behaviour and browsing data to our partners in order to keep you up to date with products and promotions relevant to you. Whenever possible, the information used for research, analysis and creating personalised content will be anonymised or pseudonymised. Only we can associate your pseudonymised data with your name.

You can limit the scope of personal data disclosed for marketing purposes by contacting our customer services.

If necessary, we will also fulfil requests for personal data by public authorities. Law permitting, we will notify you of any such request.

Does your online storefront use cookies and what are they?

The Ifolor website is designed to be as user-friendly and streamlined as possible. To achieve this, we use cookies and Flash Local Shared Objects (LSOs) on our website. You can personally determine whether you will allow our software to place cookies on your computer. By changing the settings on your web browser, you can disable cookies completely, allow only certain websites to place cookies or set the browser to prompt you to accept or reject cookies. Please note, that blocking cookies from the Ifolor website may limit or prevent access to some of the website’s functions or services. For your own convenience, we would advise you to enable cookies in your web browser. The cookies placed by our server on your browser will persist for up to 30 days.

Google Tag Manager

This website uses Google Tag Manager.The Tool Tag Manager itself (which implements the tags) is a domain without cookies which does not collect any personal details.The tool ensures the activation of other tags which themselves potentially collect data.

Google Tag Manager does not access these data.If a deactivation is carried out at domain or cookie level, this shall remain in effect for all tracking tags that are implemented with Google Tag Manager.

In the following the required legal basis for the processing of data is listed:
- Art. 6 para. 1 s. 1 lit. a GDPR

Meta Pixel / Facebook Pixel

This website uses Facebook Pixel to analyse your use of our website. The service is provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Irland (‘Facebook’). It is used to track interactions of visitors with websites ("Events") after they have clicked on an ad placed on Facebook or other services provided by Meta ("Conversion").

Our legal basis for setting the cookie and the connected data processing is your consent (Article 6 (1) a) GDPR).

Here you can find the way to contact Data Protection Officer of the processing company: https://www.facebook.com/help/contact/1650115808681298

LinkedIn Insight Tag

The LinkedIn Insight Tag is a lightweight JavaScript tag that is added to our website to enable in-depth campaign reporting and to help us to optimize our LinkedIn campaigns.

The LinkedIn Insight Tag creates a unique LinkedIn browser cookie on a visitor's browser and enables the collection of the following metadata with the cookie:

  • IP address 
  • timestamp 
  • page events e.g. page views.

LinkedIn does not share personal data with Ifolor. It only provides reports about our website visitors and ad performance. These reports do not identify individual users at any point. LinkedIn users can control the use of their data for advertising purposes through their account settings. The data controller is LinkedIn Ireland Unlimited Company Company, Wilton Place, Dublin 2, Ireland.

Legal basis for this process is your consent, Article 6 (1) (a), Article 7 GDPR. You can object the measuring of your usage during your visit by clicking on the following link https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy.

Pinterest-Tag

Our online offering uses the “Pinterest Tag” of Pinterest Inc., 808 Brannan St, San Francisco, CA 94103, USA. If a Pinterest user sees or clicks on an advert, other actions and target groups that have shown interest are compiled and tracked. Using them allows us to ensure that Pinterest adverts are only shown to Pinterest users who have already shown an interest in our offering and that they also match the potential interest of the user. This data helps us to measure the conversion of the respective campaign. It is used for statistical and market research purposes and helps to optimise campaigns.

If you log into your Pinterest account after visiting our website or if you visit our website while you are still logged in, your data may be stored and processed by Pinterest. Pinterest is able to connect this data to your Pinterest account and use it for advertising purposes.

To do this, information is collected, evaluated and transmitted by your browser each time you visit. It is collected via a Java script and cookies. The following information is collected anonymously and processed for statistical purposes:

  • Browser used 
  • Operating system used 
  • Time of visit 
  • Type and content of campaign 
  • Reaction to the respective campaign (e.g. transaction, newsletter registration) 
  • etc.

If you are directed by a Pin on Pinterest to our online offering, we store a cookie on your computer that interacts via JavaScript code with a “Tag” that has also been implemented by Pinterest. These cookies become invalid after 180 days and are not used for personal identification.

You can object to this particular data processing at any time at https://help.pinterest.com/en/article/personalization-and-data, either by turning off the settings for this under “Personalization” in your Pinterest account, or by selecting “Do Not Track” in your browser.

You can access Pinterest’s current Privacy Policy at https://policy.pinterest.com/en/privacy-policy.

In the following the required legal basis for the processing of data is listed:
- Art. 6 para. 1 s. 1 lit. a GDPR

VWO

To continously improve our online offers/selection, we regularly carry out A/B and multivariate tests on our website. During these tests, we collect information on visitor hits and your interaction with our online offering which is recorded anonymously and evaluated for statistical purposes. For this purpose, we process tasks using the technology Visual Website Optimizer ("VWO"), operated by Wingfy (14th Floor, KLJ Tower North, Netaji Subhash Place, Pitam Pura, Delhi 110034, India).

The legal basis for the processing of personal data, using cookies for analysis purposes, is Article 6(1)(a) GDPR, given consent by the data subject to this processing.

To do this, information is collected, evaluated and transmitted by your browser each time you visit. This is collected via a Java script and cookies. The following information is collected anonymously and processed for statistical purposes:

  • browser use 
  • number of pages seen 
  • number of visits 
  • sequence of the visit 
  • duration of the visit 
  • interactive actions, such as filling or emptying a shopping basket 
  • recording use of individual websites (except e.g. in the checkout and registration process) 
  • transactions carried out 
  • etc.

VWO uses your IP address to carry out geolocation (regional details of your location). Following the geolocation, which is done directly when you visit the site, your IP address is immediately deleted.

During use of VWO, the following cookies are set, which last as long as shown?:

  • session cookie (for session recognition, service life: one session, i.e. until the browser is closed) 
  • long-time cookie (for pseudonymous recognition of returning visitors: 10 years) 
  • opt-out cookie (for objection to tracking: 10000 days)

If you do not agree to the measuring of your usage during your visit being stored and evaluated, you can object to it by clicking on the following link: https://vwo.com/opt-out/. This allows you to store a so-called opt-out cookie in your browser. This is used to prevent the service from setting any cookies to measure usage and from collecting any session data. Please note: If you delete your cookies, the opt-out cookie is also deleted, and you may need to re-activate it.

The applicable VWO Privacy Policy can be found at https://vwo.com/privacy-policy/.

TikTok

Our online offer uses “TikTok Pixel” from TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (“TikTok”). TikTok Pixel enables TikTok to determine website visitors as target groups to display ads. Accordingly, we use TikTok Pixel to display our TikTok ads only to TikTok users who have also shown an interest in our online offerings or who exhibit certain characteristics that we communicate to TikTok. TikTok Pixel also allows us to statistically analyse our TikTok ads. Data processing by TikTok is carried out within the framework of TikTok’s data use policy.

Each time you access our website, information transmitted by your browser is collected and evaluated for this purpose. The collection takes place via a JavaScript as well as cookies. The following information is collected anonymously and processed statistically:

  • browser used
  • operating system used
  • access time
  • type as well as content of the campaign
  • the reaction to the respective campaign (e.g. purchase, newsletter subscription)

Cookies are set to recognize returning visitors in pseudonymised form. These cookies lose their validity after 13 months and are not used for personal identification. If you do not agree to the storage and evaluation of usage measurement from your visit, you can object to this by clicking on the circular fingerprint icon in the bottom left corner of the page.

This will allow you to place a so-called opt-out cookie in your browser. This means that the service will not set cookies for usage measurement and no session data will be collected. Please note: If you delete your cookies, the opt-out cookie will also be deleted and you may have to activate it again.

TikTok also processes your personal data outside of Switzerland/EEA and has entered into standard contractual clauses to ensure an adequate level of data protection. TikTok’s current privacy policy can be found at https://www.tiktok.com/legal/privacy-policy.

Required legal basis for the processing of data is listed Art. 6 para. 1 s. 1 lit. a GDPR.

Xandr

We use this cookie to target advertising that is appropriate for you online. The domain is owned by Xandr Inc., which provides a variety of online advertising services. A cookie allows a service provider to associate information about its partners with a cookie. Information that the cookie collects: IP address, browser and device information, ISP, analytical information about the visitor's movement on the site, and demographic information.

In the following the required legal basis for the processing of data is listed:
- Art. 6 para. 1 s. 1 lit. a GDPR

You can influence the processing of your data and withdraw your consent by editing your settings from cookie manager on this site or from the service provider's website. More information: https://www.xandr.com/privacy/platform-privacy-policy

Further information about cookies and browser settings can be found by clicking on the circular fingerprint icon in the bottom left corner of the page.

Does your online store or ordering software make use of analytics services?

Our goal is to provide as user-friendly and streamlined online experience as possible. To achieve this, we use online analytics services that allow us to keep track of the number of visitors to our website, their visit frequency and the devices and software they use to access the website. Ifolor does not use this software to collect personal data or unique IP addresses. Instead, this information is used anonymously and in summary form for statistical purposes and to further develop our website.

Webtrekk

Visits to our website are evaluated pseudonymised for marketing and optimisation purposes to collect statistical data on the use of our websites and improve it accordingly. Within the framework of order processing, we use technology from Webtrekk GmbH Robert-Koch-Platz 4, 10115 Berlin, Germany. This automatically collects and saves data. Pseudonymous usage profiles are also created here. Webtrekk uses them to provide us with reports on user activity and other services related to the use of our websites.

Webtrekk abbreviates the IP address as soon as it is received and only uses it on our behalf to recognise sessions and for geolocalization only. The abbreviated IP address does not allow for any conclusions to be drawn about you as a visitor to our websites.

Every time you access our website, information that is transmitted by your browser is collected and evaluated. It is collected using a pixel, which is integrated on each page, and / or a Java script as well as cookies. For further information about what cookies are and how you can remove or block them, please click on the circular fingerprint icon in the bottom left corner of the page.

The following information is collected and processed:

  • Name of the retrieved file, time stamp
  • Operating system used
  • Device ID
  • Information (type / version) about the browser used
  • Screen / browser resolution and colour depth
  • Browser language
  • Referrer URL (previously visited page)
  • IP address
  • Clicks
  • Java on / off 
  • Cookies on / off
  • Plug-ins
  • If applicable, information about your shopping basket (e.g. number of products or currency used)
  • Possibly pseudonymised user ID and new customer status

Opt-out disclosure:

If you do not agree with the storage and analysis of the analysis data from your visit, you can object to this by clicking the following link:

Click here to deactivate Webtrekk for this domain.  

This places a so-called opt-out cookie on your browser. The result is that the service does not place any web analytics cookies or collect any session data. Note: If you delete your cookies, the opt-out cookie will also be deleted and you may need to reactivate it.

However, we would appreciate if you would agree to the use of analytics tools, as they will help us to regularly improve our website and services and to optimise them to your needs.

The legal basis is our legitimate interest, Art. 6(1) point f GDPR, to provide you with a smooth order process and to make our website more user-friendly and effective overall.

In addition to the above, Ifolor utilises the Adjust analysis service to track visits to our ordering software. This service helps us to improve our services and optimise them to customer needs. This tracking data is collected anonymously. If you do not wish to collect this kind of tracking data, many browsers include the option to block tracking.

Can this privacy policy be revised?

We reserve the right to revise this privacy policy to account for service improvements or changes in applicable laws and regulations. We will notify you of any material changes to our privacy policy whenever we update their terms and conditions.

This privacy policy supersedes our previous Privacy Policy.

Who should I contact?

If you have any questions about this privacy policy, please contact us via e-mail, address: dataprotectionofficer@ifolor.fi

or mail, address:

Ifolor Oy
Data protection officer
Karhumäenkuja 2
FI-01530 Vantaa
Finland