Legal
Privacy policy
Last updated: 14 May 2026.
Controller (rekisterinpitäjä): Zorvynexieshran.world, Y-tunnus (Finnish Business ID): 3112773-3, postal address: Oulu, 90100, Finland. Privacy contact: feedback@zorvynexieshran.world, telephone +358 44 0188486. We have not appointed a Data Protection Officer (DPO); use the email address above for requests about your personal data. Email is preferred so requests can be documented.
This policy describes how we process personal data when you use this website or contact us. We apply Regulation (EU) 2016/679 (GDPR) and the Finnish Data Protection Act (Tietosuojalaki 1050/2018, as amended), which supplements the GDPR in Finland. This document is for transparency; it is not personal legal advice. We do not operate a telemedicine service or sell medicinal products through the site.
For consumers and authorities in Finland, the trader is identified by the business name above, postal address in Oulu, and Y-tunnus 3112773-3. That identifier appears on invoices and other accounting documents when required under Finnish tax and bookkeeping rules.
1. Categories of personal data
Identification and contact: name, email address, telephone number if you give it, message text, and confirmation that you accepted the privacy notice when sending the form. Technical logs: IP address, date and time, requested page, browser type, and similar fields created by the hosting environment. Cookies and local storage: strictly necessary storage for cookie choices; optional analytics or marketing tools only if you opt in (see cookie policy). Future client files: if you buy coaching, we may process billing and session notes under a separate description or contract.
Please do not send special categories of data (for example detailed health information) in the public contact form. If you voluntarily include such data, we process it only to answer you or to comply with law and delete or anonymise it when no longer needed, unless a separate explicit consent or agreement applies under Article 9 GDPR.
2. Purposes, legal bases, and retention
Responding to messages and pre-contract steps (Article 6(1)(b) GDPR): we use your contact details to reply and, where relevant, to prepare a coaching agreement. Retention: typically up to 24 months after the last contact, unless a dispute, legal claim, or bookkeeping rule requires longer storage.
Optional cookies and similar technologies (Article 6(1)(a) GDPR): activated only after consent via the banner. You may withdraw consent at any time with future effect.
Legal obligations (Article 6(1)(c) GDPR): for example accounting and tax records under Finnish law—commonly 6 years from the end of the financial year (subject to legislative change).
Legitimate interests (Article 6(1)(f) GDPR): network and website security, prevention of misuse, and aggregated statistics that do not identify you, weighed against your rights. Log retention typically follows the hosting provider’s default, often 30–90 days, unless a longer period is justified for a specific security review.
3. Sources of data
Data is collected directly from you (forms, email, calls) or generated automatically when you use the site.
4. Recipients, processors, and international transfers
Hosting, email, and (if you consent) analytics or marketing vendors act as processors under Article 28 GDPR and may only process data on our instructions. We do not sell personal data. Processing is mainly in the EEA. If data is transferred outside the EEA, we use appropriate safeguards under Chapter V GDPR (for example standard contractual clauses or an adequacy decision).
We do not use automated decision-making, including profiling, that produces legal or similarly significant effects concerning you.
5. Embedded services
Pages may include embedded content such as Google Maps. Those providers may process technical data under their own policies. Where Finnish and EU rules require consent for non-essential storage or access on your device, your choices in the cookie banner apply together with our cookie policy.
6. Your rights
Where the GDPR and Finnish law allow, you have the right of access, rectification, erasure, restriction, data portability (for data you provided where processing is based on consent or contract and is automated), and to object to processing based on legitimate interests, including direct marketing. You may withdraw consent at any time without affecting the lawfulness of earlier processing.
Requests: email the privacy contact above. We will normally respond within one month and may extend by up to two further months where permitted under Article 12(3) GDPR, informing you of reasons.
You may lodge a complaint with the Office of the Data Protection Ombudsman (Tietosuojavaltuutettu), Lintulahdenkuja 4, 00530 Helsinki, Finland. Website: tietosuoja.fi/en. You may also contact the supervisory authority in another EU/EEA state where you live or work.
7. Security and personal data breaches
We use appropriate technical and organisational measures such as TLS, limited admin access, and processor agreements. If a breach is likely to risk your rights and freedoms, we will notify the supervisory authority without undue delay and, when required by Article 34 GDPR, inform you.
8. Children
The site is intended for adults. If you believe we have received a child’s personal data without appropriate authority, contact us and we will delete it unless a legal obligation requires retention.
9. Changes
We update this policy when our processing or the law changes. The “Last updated” date shows the current version.