Privacy Policy

Cosmic Code Art's customer and member register privacy 

Policy Updated 1.12.2021

This GDPR Privacy Statement defines Cosmic Code Art as the controller of the customer, marketing and online store.
The registers contain personal data of both business representatives and individuals. For marketing communications, consent is sought from both.

Cosmic Code Art is committed to acting in accordance with the principles of the Data Protection Regulation and applicable legislation in order to serve you in the best possible way.
So please read the Privacy Policy below carefully.

1. Data controller and contact person

Name and contact information of the controller: Cosmic Code Art, business ID: FI31427736 (y-tunnus: 3142773-6), 83500 Outokumpu, Finland.

Data protection officer and contact person: Sanna Koistinen, info.cosmiccodeart(at)gmail.com. My website address is: https://www.cosmiccodeart.com

2. Name of the register

The company uses the following names from the registers:

Cosmic Code Art Customer, member and marketing register

3. Grounds for and purposes of processing personal data

The information contained in Cosmic Code Art's customer and marketing is information provided by the individual and consent to the processing of personal data. The processing is based on customer relationship management, marketing, sales, and the development of products and services.

The personal data collected will be stored indefinitely for as long as the customer relationship is in force or until the data subject requests the deletion of their data, or deletes their data themselves. Upon request, the personal data will be deleted from the marketing register within 21 days.

Only the controller has access to the register.

4. Data content of the register

Cosmic Code Art collects information in order to provide you with more personalized service. In addition to personal information such as your name, company, email and telephone number, I may ask you for additional information such as your title, job title or the organisation you work for on forms on the website or when you are ordering a custom-made artwork through email. In addition, when placing an custom-made order through email, I may ask for your address details and your payment details.

You do not need to use your personal data for the chat service on the website. 

Cookies and analytics

I use cookies to collect information about the use of the website and the number of visitors to my website. Such systems include wix.com. This information allows me to find out how many people visit my site, how visitors use my site, how long they stay, the time and number of visits, and the pages visited. The cookie on my website also contains a unique identification number that allows the user's browser to be identified the next time he or she visits my site, thus facilitating the use of my site. You can choose the level of cookie use in the cookie notice.

On the Cosmic Code Art website and shop, I use the web analytics services provided by Wix Analytics. I use the data collected by this tool to develop and monitor the use of my website and online shop.

Links from my website to third party services

My website and shop contains links to external services, such as Patreon and Instagram share buttons, and visitors to my website may be redirected to the services of partners. Through these redirects, the various service providers themselves may collect information about you and place cookies on the link user's computer that are not under the control of Cosmic Code Art. The use of these links is the responsibility of the visitor to the website and shop.

Articles on this site may also contain embedded content (e.g. videos, images, articles, etc.). Accessing embedded content from other sites is comparable to visiting a third party site.These sites may collect information about you, use cookies, embed third party tracking cookies and monitor your interactions with embedded content, including tracking your interactions if and when you are logged in as a user to the site.

Marketing automation and email marketing

Cosmic Code Art uses the marketing automation service wix.com. When a visitor fills in an order or contact form on my website cosmiccodeart.com, a cookie is stored in the Wix services, which combines the data with the information provided by the customer. The automation takes care of sending newsletters and marketing to customers.
I will distribute current information about Cosmic Code Art's products and services by email only to persons who have given their consent. As a customer, you can remove your name and email address from the mailing lists at any time via the link at the bottom of the email.

Email messages may contain cookies and trackers that allow me to know whether you have opened, read or deleted the message. If you remove your email address from the list, I will no longer be able to send you communications or offers.

I may also send newsletters and sales and marketing messages to subscribers of other newsletters.

5. Regular sources of information

In all instruments, data collection is based on information provided by the individual and consent to the use of the data. The data provider has the rights and possibilities to delete or revise their own data if they wish.

Social media:

Data may be collected in connection with campaigns, sales and marketing. The information collected is name and email. Otherwise, the activities are based on the customer's own voluntary activities. The services are also used for information and guidance. The information collected may include name and telephone number.In addition, campaigns can profile customer behavior, but with detailed information that cannot be linked or associated with a specific customer.

Satisfaction surveys:

Surveys may collect the customer's name, email address, the company they work for and their position in the company. 

Analytical services:

Cookies are used to analyse and collect information that cannot be directly linked to a specific customer. 

Websites and e-commerce:

On the website and in the online shop, information is collected through the contact form or online shopping. The information collected includes name and email, and in the online shop may also include address and payment method information such as information on purchases made as an identified customer and the different stages and transactions in the purchase process, the payment method chosen and the identification of payment methods, bank details. In addition, a personal identification number may be collected from customers in a credit relationship or a comparable relationship who purchase goods or services for payment.

Distribution services for newsletters and marketing materials:

The distribution services collect and aggregate customer name and email information from all data sources used by Cosmic Code Art. In addition, the software profiles and collects information about customer behaviour when opening newsletters and emails.

Chat service:

No detailed information is collected. 

Billing: 

For invoicing, I use Paypal and Nordea Bank, which contains all the information related to invoicing and collection. For invoicing purposes, the customer's name and address details and email can be collected, and companies are required to have a business ID.

6. Disclosures of data

The information in the personal data files is intended for Cosmic Code Art's use only. Cosmic Code Art will never disclose, sell or rent the information it receives to third parties for marketing purposes.

Your data is stored on servers located mainly in the EU. Some service providers may back up data outside the EU/EEA, for example to the United States and the United Kingdom. Backups are only made to ensure that your data is safe even in situations where the main servers may have failed.

Website and e-marketing automation systems and social media services are located outside the EU, in the US and the UK. Cosmic Code Art may disclose information to the extent permitted and required by applicable law to selected partners for the purposes of service delivery, customer relationship management and communication.

In these cases, where data is regularly transferred outside the EU or the European Economic Area, Cosmic Code Art has ensured an adequate level of protection of personal data by ensuring that all service providers comply with data protection legislation as required by EU law.

7. Principles for the protection of the register

As the data controller, the representative of Cosmic Code Art only has the right of access to the collected data. The company third parties do not have access to the data. The information is on secure sites.

8. Rights of the data subject

The data subject has the right to ask the controller for access to personal data concerning him or her. He or she also has the right to request rectification or erasure of the data and restriction of processing. He or she may also object to processing and have the right to data portability. The collection of data is voluntary.
The right to have your personal data deleted does not apply to personal data that we are required to retain for maintenance, legal or security reasons.
If you would like more information about the processing of your personal data, please send your 
request to info.cosmiccodeart(at)gmail.com.

Please attach the following information to your request:

1. The email address you used to subscribe to the newsletter, which allows me to identify you. Please also tell me in what role you are contacting me, e.g. as a recipient of my emails.
2. Tell me if you want to know what information Cosmic Code Art has about you or if you would like to change, correct or delete your information.
3. Do you wish to withdraw your consent to receive Cosmic Code Art's communications and marketing?
The data subject always has the right to withdraw his or her consent at any time. You can send your withdrawal to info.cosmiccodeart(at)gmail.com.

9. Mandatory disclosure and non-disclosure

If you do not want me to process your data in accordance with this Privacy Policy, please do not provide Cosmic Code Art with any information. In this case, I will of course not be able to serve you and you will not be able to purchase my products or services.