Privacy Policy

1. Data Controller

Sparkvivflora is the data controller responsible for your personal data. Our contact details are:

Address: Haikkoontie 114, 06400 Porvoo, Finland
Phone: +358 40 6628520
Email: chat@sparkvivflora.world
Website: https://sparkvivflora.world

2. Applicable Law

We process personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR), the Finnish Data Protection Act (Tietosuojalaki 1050/2018), and other applicable Finnish and EU legislation. This policy explains how we comply with these requirements when you use our website.

3. Data We Collect

We may collect and process the following categories of personal data:

Identity data: name as provided through our contact form
Contact data: email address as provided through our contact form
Communication data: message content submitted via the contact form
Technical data: IP address, browser type and version, time zone, operating system, and platform
Usage data: information about how you use our website, including pages visited, time spent, and navigation paths

4. How We Collect Your Data

We collect data through the following methods:

Direct interactions: when you fill in our contact form or correspond with us
Automated technologies: as you navigate our website, we may automatically collect technical and usage data through cookies and similar technologies

5. Purposes of Processing

We process your personal data for the following purposes:

To respond to your inquiries submitted through the contact form
To administer and protect our website, including troubleshooting and data analysis
To analyze website usage patterns and improve our content and services
To comply with legal obligations applicable to our operations

6. Legal Basis for Processing

We process your personal data based on the following legal grounds under the GDPR:

Consent (Article 6(1)(a)): when you submit the contact form with the consent checkbox selected, and when you accept optional cookies as described in our Cookie Policy
Legitimate interests (Article 6(1)(f)): for website security, fraud prevention, and limited technical administration, where such interests are not overridden by your rights
Legal obligation (Article 6(1)(c)): where processing is necessary to comply with applicable laws, including Finnish accounting, tax, or regulatory requirements where relevant

Providing contact form data is voluntary. If you do not provide required fields, we cannot respond to your inquiry.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

Contact form submissions: retained for up to 12 months after the inquiry is resolved
Technical and usage data: retained for up to 24 months
Cookie data: retention periods vary by cookie type as described in our Cookie Policy

8. Data Sharing and Processors

We do not sell your personal data. We may share your data with the following categories of recipients, who process data only on our documented instructions and under data processing agreements where required:

Website hosting and infrastructure providers
Analytics service providers (only if you have consented to analytics cookies)
Advertising and measurement partners (only if you have consented to marketing cookies)
Professional advisers (legal, accounting) where necessary
Public authorities when required by law or to protect our legal rights

9. International Transfers

Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission or adequacy decisions.

10. Your Rights Under GDPR

Under the GDPR and Finnish data protection law, you have the following rights regarding your personal data:

Right of access: request a copy of the personal data we hold about you
Right to rectification: request correction of inaccurate or incomplete data
Right to erasure: request deletion of your personal data under certain conditions
Right to restrict processing: request limitation of how we use your data
Right to data portability: request transfer of your data in a structured, machine-readable format where processing is based on consent or contract and carried out by automated means
Right to object: object to processing based on legitimate interests, including profiling where applicable
Right to object to direct marketing: where applicable, you may object at any time to processing for direct marketing purposes
Right to withdraw consent: withdraw your consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at chat@sparkvivflora.world. We will respond without undue delay and, in any event, within one month of receiving your request, as required by Article 12 GDPR. That period may be extended by two further months where necessary, taking into account the complexity and number of requests; we will inform you of any extension and the reasons.

11. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you.

12. Children's Data

Our website is intended for adults. We do not knowingly collect personal data from children under 16 without appropriate parental consent. If you believe we have collected data from a child, please contact us and we will delete it promptly.

13. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted data transmission (HTTPS), secure data storage, and regular security assessments.

14. Cookies

Our website uses cookies and similar technologies. Optional cookies are placed only after you have given consent through our cookie banner. For detailed information, please refer to our Cookie Policy.

15. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically. Material changes will be communicated where required by law.

16. Supervisory Authority and Complaints

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In Finland, the competent authority is:

Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto)
Address: Lintulahdenkuja 4, 00530 Helsinki, Finland
Website: tietosuoja.fi

You may also lodge a complaint with the supervisory authority in the EU member state of your habitual residence, place of work, or place of the alleged infringement.