Privacy Policy

1. DATA CONTROLLER

IconBrush Ltd
Hannankaupantie 27, 91410 Jokirinne, Finland
Business ID: 3262790-8

2. REGISTER NAME

The name of the register is IconBrush Customer Register.

3. PURPOSE AND LEGAL BASIS FOR PROCESSING PERSONAL DATA

Personal data is collected for a specific, legitimate purpose to fulfill contractual obligations related to the customer relationship.

Personal data is processed in accordance with this privacy policy and will never be used, modified, or transferred in any way other than as described in this policy.

4. CONTENT OF THE REGISTER

The register contains personal data of the Service Provider's customers, including:

  • Name
  • Address
  • Phone number
  • Email address
  • Company name & website (if applicable)
  • Other necessary information related to customer relationship management

5. COOKIES

The Service Provider's website uses third-party analytics and marketing systems that collect anonymous visitor data through cookies. These cookies are used solely for website and service improvement purposes and are not used to identify individual users.

6. REGULAR SOURCES OF INFORMATION

Personal data is collected from the following sources:

  • Directly from customers and stakeholders.
  • Public sources, such as company websites and public address registers.

7. REGULAR DISCLOSURE OF DATA

Necessary customer data may be disclosed to authorities for legal purposes.

The Service Provider does not share customer data with third parties or external partners, unless:

  1. The customer explicitly requests it.
  2. A legal authority requires specific data disclosure.

8. TRANSFER OF DATA OUTSIDE THE EU OR TO INTERNATIONAL ORGANIZATIONS

Customer register data is not transferred outside the EU/EEA or to international organizations.

9. RIGHT TO ACCESS PERSONAL DATA

Customers have the right to access their stored personal data.

To request access, the customer must submit a written and signed request to the Service Provider’s contact person, including a copy of a valid photo ID for verification.

10. RIGHT TO RECTIFICATION AND DELETION OF DATA

The Service Provider is responsible for correcting any incorrect personal data in the register.

Customers also have the right to request deletion of their personal data from the register.

Additionally, the Service Provider proactively verifies the accuracy and relevance of the stored data.

11. OTHER RIGHTS RELATED TO PERSONAL DATA PROCESSING

Customers have the right to request restrictions on data processing and to receive their personal data in a structured, commonly used, and machine-readable format for transfer to another data controller.

Customers also have the right to object to data processing, automated decision-making, and profiling.

12. RIGHT TO FILE A COMPLAINT

If a customer believes that the Service Provider has not complied with applicable data protection regulations, they have the right to file a complaint with the relevant data protection authority.

13. DATA DELETION & RETENTION PERIOD

Customer data is deleted when there is no longer a business need for processing or upon a valid legal request for deletion.

Personal data is securely destroyed when it is no longer needed for processing or retention.

However, data will not be deleted if:

  • Legal regulations require retention.
  • A legal authority has initiated a process requiring data retention.
  • A security protection request has been made to Finnish courts regarding the data.

14. PRIVACY POLICY APPROVAL

This privacy policy is valid indefinitely and was last reviewed on 10.02.2025.