Last updated: 2026-01-15
Welcome to Colossal Order’s Privacy Policy (the “Policy”). In this Policy, Colossal Order is referred to as “we,” “us,” or “our.”
We may periodically update this Policy by posting an updated version online, so please review it regularly.
This policy applies when you visit our website, participate in surveys, contests, or social events (online or in-person) hosted by us, apply for a job, or contact us via email or physical mail. We refer to these collectively as “Services.”
In this Policy, “personal data” refers to any information that can identify you, directly or indirectly. This includes but is not limited to information such as your name, contact information, and online identifiers (such as usernames). Information that cannot be linked to your identity is not considered personal data.
We do not maintain user accounts and do not build user profiles.
Sharing of Personal Data
We do not sell your personal data. We may share personal data with third parties only when necessary and in accordance with applicable data protection laws, including:
In all cases, we share only the personal data that is necessary for the specific purpose.
We do not use your personal data for automated decision-making or profiling.
We may also receive personal data about you from our partners when needed for support, technical investigations, community activities, or collaborations. We use this information only for the purpose for which it was shared with us.
Our partners operate under their own privacy policies. Please refer to their individual privacy policies for more information about how they process personal data.
Please refer to the following additional policies for more details on the personal data we collect in specific situations:
Please note
We process personal data only when we have a lawful reason to do so. The lawful bases for processing your data may include:
Consent
When you voluntarily provide personal data to us, such as submitting a screenshot for our social media or participating in a voluntary community activity, you agree that we may process it for the stated purpose. You can withdraw your consent at any time.
Legitimate Interest
When it is necessary for us to manage our Services, such as responding to your questions, managing social media submissions, improving our Services, and protecting the security and integrity of our systems. We ensure that any processing based on legitimate interests is balanced against your rights and does not unfairly affect you.
Legal Obligation
When we are required to process data to comply with applicable laws. Legal obligations may include retaining recruitment or tax records and responding to lawful requests from authorities.
We take appropriate technical and organizational measures to protect personal data and ensure it is processed securely.
Data Retention
We retain personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable law.
Retention periods may vary depending on the context, such as recruitment processes, responding to messages, or community activities. When personal data is no longer needed, it is deleted or anonymized.
Data Processors
We may use trusted third-party service providers (“data processors”) to help us operate our Services. These processors may include providers of email services, cloud storage, recruitment tools, and social media platforms.
Our processors process personal data only on our instructions and are subject to appropriate contractual and security obligations in accordance with data protection law.
International Data Transfers
Some of our service providers may process personal data outside the EU/EEA. When personal data is transferred outside the EU/EEA, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
Our Services are not directed to children, and we do not intentionally collect personal data from children. If a child contacts us (for example, by email or social media), we only use the personal data provided to respond to the message. We delete the message as soon as it is no longer needed. If you believe a child has provided us with personal data that should be removed, please contact us.
Cookies are text files placed on your computer to collect standard internet log information and visitor behavior information. When you visit our websites, we may collect information automatically through cookies or similar technology.
To learn more about cookies, visit allaboutcookies.org.
How we use cookies
Like most online services, our website uses first-party and third-party cookies for various purposes. First-party cookies are mostly necessary for the website to function correctly and do not collect personally identifiable information.
Third-party cookies help us understand how the website performs and how you interact with it. They help us improve the user experience and make future interactions with our website faster and more customized.
We want you to be fully aware of your data protection rights. Every user is entitled to the following:
Access, correction, or erasure
You may request copies of your personal data, ask us to correct information you believe is inaccurate or incomplete, or request that we erase your personal data under certain conditions.
Restrict or object to processing
You may request that we restrict the processing of your personal data or object to certain types of processing, under certain conditions.
Transfer your personal data
You may request that we transfer your personal data to another organization or directly to you, under certain conditions.
If you submit a request, we will respond within one month. To ensure the security of your data, we may ask you to provide additional information to confirm your identity.
If you would like to exercise any of these rights, please contact us using the information below.
You have the right to file a complaint with your local data protection authority. In Finland, this is the Office of the Data Protection Ombudsman.
If you have any questions about this Policy, the personal data we hold about you, or if you wish to exercise your privacy rights, please contact us at: company@colossalorder.fi
If you prefer, you can also send us a letter to:
Colossal Order Oy
Pellavatehtaankatu 10B, 33100 Tampere, Finland
