Privacy Policy
Last updated: 5 June 2026
This Privacy Policy (register description / rekisteriseloste) explains how Energbloomstrain.ddd ("we", "us", "our") collects and processes personal data when you visit our website or contact us. We comply with:
- Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR)
- Finnish Data Protection Act (Tietosuojalaki 1050/2018)
- Finnish Act on the Protection of Privacy in Electronic Communications (Tietoyhteiskuntakaari 917/2014), where applicable
- Finnish Act on Electronic Direct Marketing (Laki sähköisestä suoramarkkinoinnista 1016/2004), where applicable
1. Data Controller
Controller: Energbloomstrain.ddd
Address: Eerikinkatu 26, 20100 Turku, Finland
Email: cooperation@energbloomstrain.world
Phone: +358 40 356 8110
Country of establishment: Finland
For data protection enquiries, contact us using the details above. We have not appointed a Data Protection Officer (DPO) as processing does not require one under Art. 37 GDPR; privacy matters are handled by the controller.
2. Name and Description of the Register
Register name: Website and Customer Contact Register
Description: Personal data collected through this website, contact forms, cookie consent, and related communication regarding lifestyle nutrition education and enquiries.
3. Personal Data We Collect and Sources
| Data category | Examples | Source |
|---|---|---|
| Identity and contact data | Name, email address | Provided by you via contact form |
| Communication content | Message text | Provided by you |
| Consent records | GDPR checkbox, cookie choices | Provided by you; stored in browser |
| Technical and usage data | IP address, browser, device, pages visited | Automatic, with analytics consent only |
We do not collect special categories of data (Art. 9 GDPR) through this website. Please do not submit sensitive health information via the contact form.
4. Purposes, Legal Bases, and Necessity
| Purpose | Legal basis | Necessity |
|---|---|---|
| Responding to enquiries | Legitimate interest (Art. 6(1)(f)); pre-contract steps (Art. 6(1)(b)) | Voluntary; required to receive a reply |
| Website security and core functions | Legitimate interest (Art. 6(1)(f)) | Required for safe operation |
| Analytics | Consent (Art. 6(1)(a)) | Optional |
| Marketing cookies | Consent (Art. 6(1)(a)) | Optional |
| Legal compliance | Legal obligation (Art. 6(1)(c)) | Where Finnish law requires |
Legitimate interest: Enquiry data is limited, used only for correspondence, and retained for a defined period. You may object under Art. 21 GDPR.
Direct marketing: We do not send electronic marketing without separate consent under the Finnish Act on Electronic Direct Marketing. Form consent covers enquiry response only.
5. Data Retention Periods
- Contact form data: up to 24 months from the last message, unless longer retention is required under the Finnish Accounting Act (Kirjanpitolaki 1336/1997) or other law.
- Analytics data: up to 26 months; anonymised where possible after 14 months.
- Cookie consent: in browser local storage until cleared or withdrawn.
- Legal claims: longer retention if necessary under the Finnish Limitations Act.
After retention periods, data is deleted or irreversibly anonymised.
6. Recipients and Data Processors
We do not sell personal data. Recipients may include hosting and IT providers, email services, analytics providers (with consent), and public authorities when required by Finnish or EU law. Processors are bound by Art. 28 GDPR agreements.
Data is primarily processed in Finland and the EEA. Transfers outside the EEA use GDPR Chapter V safeguards (adequacy decisions or Standard Contractual Clauses). Contact us for transfer details.
7. Automated Decision-Making
We do not use automated decision-making or profiling with legal or similarly significant effects (Art. 22 GDPR).
8. Security Measures
We apply HTTPS encryption, access controls, security updates, confidentiality duties, and processor due diligence. In case of a breach likely to risk your rights, we notify the Data Protection Ombudsman and affected individuals as required by Arts. 33–34 GDPR.
9. Your Rights Under GDPR and Finnish Law
You have the right to access, rectification, erasure, restriction, portability, objection (including to direct marketing), withdrawal of consent, and not to be subject to solely automated decisions with significant effects.
Contact: cooperation@energbloomstrain.world. We respond within one month (extendable by two months for complex requests, with notice). Identity verification may be requested where reasonable.
Supervisory authority: Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto)
Lintulahdenkuja 4, 00530 Helsinki, Finland
tietosuoja.fi · tietosuoja@om.fi
10. Children
Under Section 4 of the Finnish Data Protection Act, consent-based processing for information society services offered directly to a child is lawful only from age 13. This site is not directed at children under 13. Contact us for deletion if a child has submitted data.
11. Cookies
See our Cookie Policy. Non-essential cookies are placed only after consent, per Finnish communications law and GDPR.
12. Changes to This Policy
We may update this policy. The current version is always on this page with the "Last updated" date. Material changes may be announced on the site where appropriate.