Privacy Policy

Ifolor Oy, Kerava (Finland)

Summary

We have created this privacy policy to show you that we process your photos and personal data in an appropriate manner. Each of our customers is considered a data subject as specified by the EU General Data Protection Regulation.

In order to use Ifolor services, you must agree to the terms and conditions contained in this privacy policy.

This document describes the types of personal data (data associated with a specific person or data that allows a specific person to be identified) that we collect about you both when visiting the Ifolor website and when placing an order with us as well as the ways with which we use and process this data. Additionally, this document describes how we use cookies.

We use personal data to:

  • provide easy-to-use and secure services,
  • improve our customer services and marketing and
  • further develop our online storefront.

Data file controller and the controller’s contact details

The customer register that stores personal data is controlled by

Ifolor Oy (Business ID: 0871712-9)
Posliinitehtaankatu 1
FI-04260 Kerava
Finland

Contact details for further information about data protection and personal data processing:

E-mail: dataprotectionofficer@ifolor.fi
Mail: Ifolor Oy Data protection officer
Posliinitehtaankatu 1
FI-04260 Kerava
Finland

What personal data does Ifolor collect about me?

We collect and process only data that is absolutely necessary for maintaining our relationship with you and processing your orders in a professional manner.

Information you have provided personally or that can be used to identify you:

  • your name and other similar identification data,
  • your contact details, such as your address, e-mail address and phone number and
  • your payment details, such as your billing information.
    • We do not store your full credit card information.
  • By your consent, we may store your location data, which we use to estimate delivery times.

Data collected when you use our services and data derived from analytics:

  • your purchase history, including the products you have ordered and the associated price data,
  • delivery details, such as the delivery method you have selected and the delivery address you have provided
  • access and browsing data associated with our online storefront and your terminal’s (device’s/browser’s) details, such as the IP address.

How will Ifolor use my personal data?

We use your personal data to:

  • process your orders and deliver the products you have ordered
  • maintain your customer relationship
  • improve your customer experience
  • develop our operations and services
  • generate statistics
  • produce personalised content and marketing
  • prevent misconduct
  • provide better customer service.

We will process your personal data in a confidential manner. We will not disclose your data to third party processors. However, Ifolor reserves the right to disclose personal data to processors operating in Switzerland or in EU member states in cases where this is required in order to process your order. In such cases, we will ensure an adequate level of protection by following the instructions specified in the EU General Data Protection Regulation and by concluding GDPR-compliant agreements with our suppliers.

How does Ifolor store and protect my personal data?

The Ifolor data file where your personal data is stored is continuously protected with appropriate technical and organisational measures that prevent both data loss and the misuse of personal data. Your personal data is stored in a safe environment that is inaccessible to the public. Ifolor Oy stores its customer data in Finland. We maintain a very high level of technical and organisational security across our data centres, processes and online storefront data systems. Our servers are protected against unauthorised access and denial of service attacks.

If we need to transmit your personal data, for example, when you log in or make a payment, we encrypt your personal data using Secure Socket Layer (SSL) technology. What this means in practice is that as long as your web browser supports SSL (https) technology, the communications between your computer and Ifolor’s server is protected by the most widely-adopted encryption method in the world.

Whenever possible, we observe good data protection practices (such as data consolidation and anonymisation) in personal data processing and incorporate them in our data processing planning. We have updated our data processing operations to meet the requirements of the EU General Data Protection Regulation, which came into effect on 25 May 2018.

Who is allowed to process my personal data?

Only Ifolor Oy’s internal staff will have access to our customer data. Furthermore, our staff is trained in the safe and ethical use of personal data.

We use a number of trusted contract partners to whom we may transmit personal data. These partners are contractually bound to the requirements specified in the EU General Data Protection Regulation and other applicable data protection laws.

Our electronic payment process (excluding paying by invoice) is handled by a certified payment service provider, Datatrans AG Zürich. Your payment details are transmitted directly to this company, which will store your personal data for a short period of time for processing your payment and any reimbursement you might require.

Your e-mail address and other personal data necessary for delivery e-mail newsletters may be disclosed to Koodiviidakko Oy, the company responsible for the technical aspects of our newsletter.

The company responsible for managing personal data:

Ifolor Oy (Business ID: 0871712-9)
Posliinitehtaankatu 1
FI-04260 Kerava
Finland

How long will Ifolor store my personal data?

We will store your personal data and image files only as long as necessary to fulfil the purposes indicated in this privacy policy. However, we may store some of your data for a longer period of time to fulfil certain statutory obligations (such as those concerning accounting and consumer transactions) and to demonstrate that we have appropriately fulfilled our obligations.

You may request us to anonymise your personal data or remove the data from our system or prohibit us from using the data for the purposes specified in this privacy policy.

We are required by law to retain certain types of data for a longer period of time. Some examples are provided below: 

  • The Accounting Act (Finlex 1336/1997) specifies an extensive retention period for accounting materials regardless of whether they include personal data.
  • In order to provide a legitimate and secure online storefront for our clients, we collect and store system log data in accordance with statutory requirements.
  • We make sufficient backups of our online storefront’s databases and systems to prevent data loss, to support failure recovery and to ensure data security and service continuity.

Your image files will be automatically removed from our system within 30 days of order delivery.

What are my rights?

As a customer, you have the right to:

receive the details of the personal data we store about you (by written request)

request us to rectify any inaccurate personal data concerning you

notify us, in writing, that you wish to prohibit us from continuing to process your personal data, with the reservation that we will retain the right to process personal data to the extent necessary (for invoicing purposes, for instance).

If your personal data is processed solely based on your consent, you will have the right to withdraw your consent at any time. Please note, that this will not have any bearing in the legality of any processing that has taken place before withdrawing your consent.

If you wish to make a request concerning the exercise of your rights, please contact our customer services. Ifolor reserves the right to ask you to identify yourself appropriately before processing any requests concerning the rights specified above.

If you notice any deficiencies in the processing of your personal data or find it to be unlawful, you will have the right to file a complaint with the Data Protection Ombudsman.

How do I find out what personal data Ifolor holds about me?

To request us to provide you with the personal data stored in our systems, please contact us via e-mail, address: dataprotectionofficer@ifolor.fi. We will process your request within 30 days of receiving the request.

How do I change how my information is used?

Ifolor Oy is committed to providing its customers with opportunities to determine to what extent their data is collected and used.

You can personally determine what kind of personalised marketing we will send you or to completely opt out of marketing communications from us. If you do not wish to receive any marketing communications from us, please contact our customer services. To unsubscribe from our newsletter, simply click on the link provided in any of our newsletter e-mails.

When I upload image files from Facebook or other internet services, what kind of data is transferred to Ifolor?

Instead of sending images directly from your own terminal to Ifolor for processing, you have the option to upload them from various internet services, such as Facebook, OneDrive, Dropbox or Flickr. When you upload images from any of these services, Ifolor does not receive any login data associated with these services or access to any other data you have uploaded in the service.

Our ordering software has access only to data and images you have shared or that which you have posted in your public profile. Each of these services provides detailed information about what kind of data they allow others to access. We would advise you to read the privacy policies of the services you use.

Will my personal data be disclosed to third parties?

We use customer data with third parties for analytical purposes and research as well as for providing personalised content. We may disclose purchase behaviour and browsing data to our partners in order to keep you up to date with products and promotions relevant to you. Whenever possible, the information used for research, analysis and creating personalised content will be anonymised or pseudonymised. Only we can associate your pseudonymised data with your name.

You can limit the scope of personal data disclosed for marketing purposes by contacting our customer services.

If necessary, we will also fulfil requests for personal data by public authorities. Law permitting, we will notify you of any such request.

Does your online storefront use cookies and what are they?

The Ifolor website is designed to be as user-friendly and streamlined as possible. To achieve this, we use cookies and Flash Local Shared Objects (LSOs) on our website. You can personally determine whether you will allow our software to place cookies on your computer. By changing the settings on your web browser, you can disable cookies completely, allow only certain websites to place cookies or set the browser to prompt you to accept or reject cookies. Please note, that blocking cookies from the Ifolor website may limit or prevent access to some of the website’s functions or services. For your own convenience, we would advise you to enable cookies in your web browser. The cookies placed by our server on your browser will persist for up to 30 days. For further information about cookies and browser settings, please read our Cookie Policy.

Does your online store or ordering software make use of analytics services?

Our goal is to provide as user-friendly and streamlined online experience as possible. To achieve this, we use online analytics services that allow us to keep track of the number of visitors to our website, their visit frequency and the devices and software they use to access the website. Ifolor does not use this software to collect personal data or unique IP addresses. Instead, this information is used anonymously and in summary form for statistical purposes and to further develop our website.

You can prohibit us from collecting such information from your visit. Read more about the use of analytics from our Web Analytics Policy.

In addition to the above, Ifolor utilises the Adjust analysis service to track visits to our ordering software. This service helps us to improve our services and optimise them to customer needs. This tracking data is collected anonymously. If you do not wish to collect this kind of tracking data, many browsers include the option to block tracking.

Can this privacy policy be revised?

We reserve the right to revise this privacy policy to account for service improvements or changes in applicable laws and regulations. We will notify you of any material changes to our privacy policy whenever we update their terms and conditions.

This privacy policy supersedes our previous Privacy Policy.

Who should I contact?

If you have any questions about this privacy policy, please contact us via e-mail, address: dataprotectionofficer@ifolor.fi

or mail, address:

Ifolor Oy
Data protection officer
Posliinitehtaankatu 1
FI-04260 Kerava
Finland