Privacy Policy

Last updated:

1. Data Controller

Cartilagecrlumin
Artturi Kanniston tie 10, 00320 Helsinki, Finland
Email: ask@cartilagecrlumin.world
Phone: +358 40 7359177

2. What Data We Collect

We may collect the following categories of personal data:

• Name and email address (when you submit the contact form)
• Message content submitted through the contact form
• Technical data: IP address, browser type, operating system, referring URL
• Usage data: pages visited, time spent on pages, click patterns
• Cookie and tracking data (subject to your consent preferences)

3. Purposes of Data Processing

We process your personal data for the following purposes:

• To respond to your inquiries submitted through the contact form
• To operate and maintain the website
• To analyze website usage and improve our content (with your consent)
• To comply with legal obligations

3A. Advertising and Measurement Transparency

We may run online advertising campaigns to promote this website. We do not sell personal data. Where advertising measurement technologies are used, they are enabled only according to your cookie choices.

• No sensitive profiling: We do not intentionally build advertising profiles based on sensitive health data.
• Consent-based measurement: Non-essential advertising or measurement technologies are used only after your consent.
• Withdrawal: You can withdraw or change consent at any time through the cookie settings.

4. Legal Basis for Processing

We process personal data based on:

• Consent (Article 6(1)(a) GDPR): For analytics and marketing cookies, and when you submit the contact form with the GDPR consent checkbox
• Legitimate interest (Article 6(1)(f) GDPR): For website security, fraud prevention, and basic website functionality
• Legal obligation (Article 6(1)(c) GDPR): When required by applicable law

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described above:

• Contact form submissions: up to 12 months after the last communication
• Analytics data: up to 26 months
• Technical logs: up to 90 days

6. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access: Request a copy of personal data we hold about you
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your personal data
• Right to restrict processing: Request limitation of data processing
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interest
• Right to withdraw consent: Withdraw consent at any time without affecting prior processing

To exercise any of these rights, contact us at ask@cartilagecrlumin.world.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encrypted data transmission (HTTPS/TLS)
• Access controls and authentication
• Regular security reviews
• Data minimization practices

8. Third-Party Services

We may use third-party services that process personal data on our behalf:

• Web hosting provider (for website operation)
• Analytics services (with your consent)
• Content delivery networks (for fonts and icons)

All third-party processors are bound by data processing agreements in compliance with the GDPR.

9. International Transfers

Some third-party services may transfer data outside the European Economic Area (EEA). In such cases, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

10. Data Subject Request Handling

We respond to verifiable privacy requests without undue delay and, in any event, within one month as required by Article 12 GDPR. Where legally permitted, this period may be extended by up to two additional months for complex requests, and we will inform you of the reason for any extension.

11. Cookies

For detailed information about our use of cookies, please refer to our Cookie Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

13. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto) under the GDPR and Finnish Data Protection Act (Tietosuojalaki 1050/2018), or with the supervisory authority in your country of residence.

14. Contact

For any questions regarding this Privacy Policy or your personal data, please contact us:

Cartilagecrlumin
Artturi Kanniston tie 10, 00320 Helsinki, Finland
Email: ask@cartilagecrlumin.world
Phone: +358 40 7359177