Privacy Policy

Data controller

The controller responsible for processing is Xlaxyronhrozghol, with a contact address at Keskuskatu 7, 00100 Helsinki, Finland, telephone +358 9 621 3663, and email contact@xlaxyronhrozghol.world. For general privacy correspondence, using the email address is often the fastest route; you may also send a letter if you need a paper trail.

Categories of personal data

When you complete the contact form, we process the identity and contact details you type (such as name and email), the content of your message, and any phone number if you include it voluntarily. Technical data from the delivery path can include routing metadata and time stamps associated with the transmission of your email or form payload, depending on how your message reaches us.

When you browse the site, server and security systems may log the Internet protocol address associated with your connection, the pages or files requested, approximate timing, browser type where available, and similar technical information used to operate and protect the service. If you accept optional cookies or similar storage through our consent interface, additional identifiers may be processed as described in the Cookie Policy.

We do not ask you to send sensitive categories of data through the public contact form. If such information appears in a message by accident, we treat it carefully and usually suggest a more private channel for any follow-up that might be needed, without encouraging unnecessary disclosure in writing.

Purposes and legal bases

We use personal data to respond to inquiries, to maintain reliable communication with people who work with us on informational projects, to secure the site against misuse, to measure aggregate interest in our pages when you consent to analytics, and to test layout improvements for informational campaigns when you consent to the marketing category described in the cookie layer.

Typical legal bases under the GDPR include: performance of a contract or steps you request before a contract (Article 6(1)(b)), legitimate interests in operating a public website, protecting systems, and understanding aggregate readership (Article 6(1)(f)), and consent for optional tracking technologies where consent is the appropriate ground (Article 6(1)(a)). We assess each processing activity against these principles and keep internal notes so we can answer supervisory questions in a proportionate way.

We do not use personal or technical data to infer health status, to build profiles of medical conditions, or to market therapeutic or regulated health services. Optional analytics, when enabled, are intended for aggregate interest in pages and layout, not for individual health scoring.

How long we keep data

Contact messages and related email threads are usually stored for up to twenty-four months after the last substantive message in a conversation, unless a longer period is required for legal claims, tax records, or an ongoing project you have joined. Web server logs are kept in rotating files for a period that normally does not exceed twelve months, except for isolated security copies used in an investigation, which are then deleted in line with a case-by-case schedule.

Consent records stored in your browser or in our systems are updated when you make new choices, and we retain proof of the prior state only as long as needed to show that consent was obtained and that preference changes were honored. Where erasure is requested and no overriding law applies, we delete or anonymize the relevant records within a practical timeline that we document when handling your request.

Recipients and processors

We share personal data with service providers that host files, send email, or provide security monitoring, and only insofar as they need the data to perform their tasks for us. We use written agreements with processors where Article 28 GDPR requires them, and we check that subprocessors meet baseline expectations. We do not sell your personal data, and we do not permit recipients to use it for their own marketing unless you are explicitly informed in a specific context and can decline.

International transfers

When data is stored or accessed outside the European Economic Area, we rely on appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission, adequacy decisions, or other tools recognized under Chapter V GDPR, depending on the provider and product in use. You may request additional information on transfers that concern your data when this is a reasonable part of responding to a rights request, subject to security and business confidentiality needs.

Security measures

We apply access controls, separation of environments, encryption in transit for connections that support it, and updates to third-party components on a regular cycle. We train people who can access data on confidentiality and on responding to suspected incidents. No online service can promise absolute security; if we become aware of an incident that is likely to affect you, we follow applicable notification and documentation duties.

Your rights

Depending on your situation, you may have the right to access, rectify, erase, restrict processing, receive portable data, object to certain processing, and withdraw consent for consent-based features. You may also lodge a complaint with the Office of the Data Protection Ombudsman in Finland or, if you are outside Finland, with another European supervisory authority under applicable rules. We respond to requests without undue delay and, where the GDPR requires, within one month, with a possible extension in complex cases that we will explain in writing.

Automated decision-making and profiling

We do not use the information described in this policy to make legal or similarly significant decisions about you based solely on automated processing. Optional analytics or marketing measurement may involve aggregated reporting, but it does not determine whether you may access core informational pages on this site.

Children

Our public materials are aimed at a general adult audience. If you believe a child’s personal data was submitted without an appropriate ground, contact us and we will take reasonable steps, including deletion where appropriate, once we can verify the situation.

How to contact us or a supervisory authority

Email contact@xlaxyronhrozghol.world or write to the postal address in the controller section. You may also use the website of the Office of the Data Protection Ombudsman for more information on filing a complaint. We welcome calm, factual questions and will do our best to respond constructively, including when you are unsure which right applies in your case.

Changes to this policy

We review this text when we change tools, add services, or adjust legal guidance. The date in the document hero reflects the last substantive edit pass; minor wording or formatting refinements can occur without a change to that line when they do not alter your rights or our practices in a material way. If a change is significant, we may place a short notice on the home page and, where we rely on consent, refresh the consent process when required by law.