1. Data Controller Information
The data controller responsible for your personal data is:
Eliminationwashv
Leppävaarankatu 3–9
02600 Espoo, Finland
Email: assist@eliminationwashv.world
Phone: +358 9 855 3350
Website: eliminationwashv.world
For any questions regarding this Privacy Policy or the processing of your personal data, please contact us using the details above. We aim to respond to all privacy-related inquiries within 30 days.
2. Scope of This Policy
This Privacy Policy applies to all personal data collected through our website at eliminationwashv.world, including when you browse our educational content, submit a contact form, subscribe to communications, book a consulting session, or interact with our cookie consent mechanism. It also applies to data collected during in-person and remote consulting services related to computer sitting guidance.
This policy does not apply to third-party websites linked from our pages. We encourage you to review the privacy policies of any external sites you visit through links on our website.
3. Categories of Personal Data We Collect
3.1 Data You Provide Directly
When you use our contact form or communicate with us by email or phone, we may collect:
- Full name
- Email address
- Phone number (if provided)
- Message content and subject of inquiry
- GDPR consent confirmation and timestamp
- Workspace details shared during consulting sessions
- Billing and payment information for paid services (processed through secure third-party payment providers)
3.2 Data Collected Automatically
When you visit our website, we may automatically collect certain technical information, including:
- IP address (anonymised where possible)
- Browser type and version
- Operating system
- Referring URL and exit pages
- Date and time of visit
- Pages viewed and time spent on each page
- Device type and screen resolution
- Cookie identifiers and consent preferences
Automatic data collection occurs only when you have provided consent for analytics or marketing cookies, except for strictly necessary technical data required for website security and functionality.
3.3 Data from Consulting Services
During workspace guidance consultations, we may collect photographs or video recordings of your desk setup (with your explicit consent), notes about your workspace configuration, and observations related to sitting habits. This information is used solely to prepare educational recommendations and personalised sitting plans. We do not collect or process health records or medical information.
4. Purposes and Legal Bases for Processing
We process your personal data only when we have a valid legal basis under Article 6 of the GDPR:
- Consent (Article 6(1)(a)): When you submit our contact form, accept non-essential cookies, or agree to receive marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
- Contract Performance (Article 6(1)(b)): When processing is necessary to deliver consulting services you have requested, manage bookings, issue invoices, and provide follow-up documentation.
- Legitimate Interests (Article 6(1)(f)): For website security, fraud prevention, improving our educational content based on aggregated usage patterns, and responding to general inquiries. We balance our interests against your rights and freedoms before relying on this basis.
- Legal Obligation (Article 6(1)(c)): When we must retain financial records for tax and accounting purposes under Finnish law.
5. How We Use Your Personal Data
We use collected personal data for the following specific purposes:
- Responding to contact form submissions and email inquiries within two business days
- Scheduling and delivering individual consultations, team workshops, and personalised sitting plans
- Preparing written summaries and educational materials following consulting sessions
- Processing payments and maintaining financial records
- Improving website content and user experience through anonymised analytics
- Complying with legal obligations and responding to lawful requests from authorities
- Protecting our website and services against unauthorised access and abuse
- Sending service-related communications such as booking confirmations and policy updates
We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.
6. Data Retention Periods
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:
- Contact form submissions: 12 months from the date of submission, unless an ongoing consulting relationship exists
- Consulting session records: 24 months from the date of the last session, including notes and workspace photographs
- Financial and billing records: 6 years as required by Finnish accounting legislation (Kirjanpitolaki 1336/1997)
- Cookie consent records: 12 months from the date consent was given or updated
- Analytics data: 14 months in anonymised or pseudonymised form
- Marketing communications preferences: Until you withdraw consent or unsubscribe
After the applicable retention period expires, personal data is securely deleted or irreversibly anonymised.
7. Data Sharing and Third-Party Processors
We do not sell, rent, or trade your personal data to third parties. We may share data with the following categories of recipients when necessary:
- Hosting providers: To store website data on secure servers located within the European Economic Area (EEA)
- Email service providers: To deliver responses to your inquiries and service communications
- Payment processors: To handle transactions for paid consulting services, subject to PCI DSS compliance
- Analytics providers: Only when you have consented to analytics cookies, and only in anonymised or pseudonymised form
- Legal and regulatory authorities: When required by applicable law, court order, or governmental request
All third-party processors are bound by data processing agreements that require GDPR-compliant handling of personal data, including appropriate technical and organisational security measures.
8. International Data Transfers
We primarily store and process data within the EEA. If any data transfer outside the EEA becomes necessary, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or transfers to countries with an adequacy decision. You may request details of any international transfers involving your data by contacting us.
9. Security Measures
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:
- HTTPS encryption for all data transmitted between your browser and our servers
- Access controls limiting personal data access to authorised personnel only
- Regular security assessments of our website and data storage systems
- Encrypted storage of sensitive data at rest
- Staff training on data protection principles and incident response procedures
- Secure deletion protocols when data retention periods expire
While we take reasonable steps to protect your data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but commit to notifying you and the relevant supervisory authority of any data breach within 72 hours where required by GDPR Article 33.
10. Your Rights Under GDPR
As a data subject, you have the following rights regarding your personal data:
- Right of access (Article 15): Request a copy of the personal data we hold about you
- Right to rectification (Article 16): Request correction of inaccurate or incomplete data
- Right to erasure (Article 17): Request deletion of your data when it is no longer necessary or when you withdraw consent
- Right to restriction of processing (Article 18): Request that we limit how we use your data in certain circumstances
- Right to data portability (Article 20): Receive your data in a structured, commonly used, machine-readable format
- Right to object (Article 21): Object to processing based on legitimate interests or for direct marketing purposes
- Right to withdraw consent: Withdraw consent at any time for processing based on consent, without affecting prior lawful processing
- Right not to be subject to automated decision-making (Article 22): Not applicable as we do not engage in such processing
To exercise any of these rights, contact us at assist@eliminationwashv.world or by post at our Espoo address. We will respond within one month, which may be extended by two additional months for complex requests. We may request proof of identity before processing your request.
11. Children's Privacy
Our website and services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 16 years of age. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information promptly. Parents or guardians who believe their child has provided us with personal data should contact us immediately.
12. Cookies and Tracking Technologies
Our website uses cookies and similar technologies. For detailed information about the cookies we use, their purposes, and how to manage your preferences, please refer to our Cookie Policy.
13. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will update the date at the top of this page and, where appropriate, notify you by email or through a prominent notice on our website. We encourage you to review this policy regularly.
14. Supervisory Authority
If you believe that our processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority. In Finland, the relevant authority is:
Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto)
Lintulahdenkuja 4, 00530 Helsinki, Finland
Website: tietosuoja.fi
You may also contact the supervisory authority in your country of residence if you are located outside Finland.
15. Contact Us About Privacy
For any privacy-related questions, requests to exercise your data subject rights, or concerns about our data practices, please contact:
Eliminationwashv
Leppävaarankatu 3–9, 02600 Espoo, Finland
Email: assist@eliminationwashv.world
Phone: +358 9 855 3350