Privacy Policy

Last updated:

1. Data Controller

The data controller responsible for the processing of your personal data is:

Muscleyouth
Porkkalankatu 20 A, 00180 Helsinki, Finland
Email: connect@muscleyouth.world
Website: https://muscleyouth.world

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

  • Identity data: Full name as provided in the order form.
  • Contact data: Email address and, optionally, phone number.
  • Communication data: Messages and inquiries submitted through our contact/order forms.
  • Technical data: IP address, browser type and version, operating system, time zone setting, browser plug-in types and versions, and other technology information on the devices you use to access this website.
  • Usage data: Information about how you use our website, including pages visited, time spent, and navigation patterns.
  • Consent data: Records of your consent for data processing and cookie preferences.

3. How We Collect Your Data

We collect personal data through the following methods:

  • Direct interactions: When you fill in and submit our order or contact forms.
  • Automated technologies: As you interact with our website, we may automatically collect technical data about your equipment, browsing actions, and usage patterns through cookies and similar technologies. Please see our Cookie Policy for further details.

4. Legal Basis for Processing

We process your personal data on the following legal bases under the General Data Protection Regulation (GDPR):

  • Consent (Article 6(1)(a) GDPR): Where you have given clear consent for us to process your personal data for a specific purpose, such as when you submit our order form with the consent checkbox selected.
  • Contractual necessity (Article 6(1)(b) GDPR): Where processing is necessary for the performance of a contract with you, or to take steps at your request prior to entering into a contract.
  • Legitimate interests (Article 6(1)(f) GDPR): Where processing is necessary for our legitimate interests, such as improving our website and services, provided such interests are not overridden by your rights and freedoms.
  • Legal obligation (Article 6(1)(c) GDPR): Where processing is necessary for compliance with a legal obligation to which we are subject.

5. Purposes of Processing

We use your personal data for the following purposes:

  • To process and fulfill your orders and inquiries.
  • To communicate with you regarding your orders, questions, or requests.
  • To operate, maintain, and improve our website.
  • To comply with legal and regulatory obligations.
  • To analyze website usage and improve user experience (when analytics cookies are accepted).
  • To deliver relevant advertising content (when marketing cookies are accepted).

6. Data Retention

We retain your personal data only for as long as is necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.

  • Order and contact data: Retained for up to 5 years after the last interaction, or as required by applicable law (e.g., Finnish Accounting Act).
  • Consent records: Retained for the duration of your consent plus 1 year after withdrawal.
  • Technical and usage data: Retained for up to 26 months.
  • Cookie data: Retention periods vary by cookie type. See our Cookie Policy for details.

When personal data is no longer needed, we will securely delete or anonymize it.

7. Data Sharing and Transfers

We do not sell, rent, or trade your personal data. We may share your data in the following circumstances:

  • Service providers: Trusted third-party service providers who assist us in operating our website, conducting our business, or servicing you (e.g., hosting providers, payment processors, delivery services), under appropriate contractual safeguards.
  • Legal requirements: When required by law, regulation, legal process, or governmental request.

Where personal data is transferred outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or an adequacy decision.

8. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access (Article 15): You have the right to request a copy of the personal data we hold about you.
  • Right to rectification (Article 16): You have the right to request correction of inaccurate or incomplete personal data.
  • Right to erasure (Article 17): You have the right to request deletion of your personal data, subject to certain conditions.
  • Right to restriction of processing (Article 18): You have the right to request that we restrict the processing of your personal data in certain circumstances.
  • Right to data portability (Article 20): You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
  • Right to object (Article 21): You have the right to object to the processing of your personal data based on legitimate interests or direct marketing.
  • Right to withdraw consent (Article 7(3)): Where processing is based on consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us at connect@muscleyouth.world. We will respond to your request within 30 days.

9. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Use of HTTPS encryption for all data transmission.
  • Restricted access to personal data on a need-to-know basis.
  • Regular review and updating of security practices.
  • Secure storage of data with reputable hosting providers within the EEA.

10. Cookies

Our website uses cookies and similar technologies. For detailed information about the cookies we use, their purposes, and how to manage your preferences, please refer to our Cookie Policy.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to read the privacy policy of every website you visit.

12. Children’s Privacy

Our website and products are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

13. Right to Lodge a Complaint

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In Finland, the supervisory authority is:

Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto)
Lintulahdenkuja 4, 00530 Helsinki, Finland
Website: https://tietosuoja.fi/en/home
Email: tietosuoja(at)om.fi

14. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically. Continued use of this website after any changes constitutes acceptance of the revised Privacy Policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Muscleyouth
Porkkalankatu 20 A, 00180 Helsinki, Finland
Email: connect@muscleyouth.world