Privacy Policy

1. Introduction

Chroxxenvychit ("we", "us", or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website chroxxenvychit.world and use our services.

This policy complies with the General Data Protection Regulation (GDPR) (EU) 2016/679 and other applicable data protection laws.

2. Data Controller Information

The data controller responsible for your personal data is:

• Company Name: Chroxxenvychit
• Address: Aatoksenkatu, 40720 Jyväskylä, Finland
• Email: response@chroxxenvychit.world
• Country: Finland

3. Personal Data We Collect

We may collect the following categories of personal data:

• Identity Data: Full name as provided in order forms
• Contact Data: Email address, phone number (if provided), delivery address
• Transaction Data: Details about orders and payments
• Technical Data: IP address, browser type and version, time zone setting, browser plug-in types, operating system
• Usage Data: Information about how you use our website
• Communication Data: Messages and correspondence you send to us

4. How We Collect Your Data

We collect personal data through:

• Direct interactions when you fill in forms, place orders, or contact us
• Automated technologies such as cookies and similar tracking technologies
• Third-party sources including analytics providers and payment processors

5. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR:

• Consent (Article 6(1)(a)): Where you have given clear consent for us to process your personal data for specific purposes
• Contract Performance (Article 6(1)(b)): Where processing is necessary to perform a contract with you or take steps at your request before entering into a contract
• Legal Obligation (Article 6(1)(c)): Where processing is necessary to comply with legal obligations
• Legitimate Interests (Article 6(1)(f)): Where processing is necessary for our legitimate interests, provided these do not override your rights

6. Purposes of Processing

We use your personal data for the following purposes:

• Processing and fulfilling your orders
• Communicating with you about your orders and inquiries
• Providing customer support
• Improving our website and services
• Analyzing website usage and performance
• Sending marketing communications (with your consent)
• Complying with legal and regulatory requirements
• Protecting against fraudulent or illegal activity

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Order data: 7 years from the date of purchase (for tax and accounting purposes)
• Communication records: 3 years from the last interaction
• Marketing consent records: Until consent is withdrawn, plus 1 year
• Website analytics data: 26 months

After these periods, we will securely delete or anonymize your data.

8. Data Sharing and Disclosure

We may share your personal data with:

• Service providers: Companies that provide services such as payment processing, shipping, and email delivery
• Professional advisers: Lawyers, accountants, and auditors when necessary
• Regulatory authorities: When required by law or to protect our legal rights

We require all third parties to respect the security of your personal data and process it in accordance with applicable law. We do not sell your personal data to third parties.

9. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Transfers to countries with adequacy decisions
• Other lawful transfer mechanisms as permitted under GDPR

10. Your Rights Under GDPR

Under GDPR, you have the following rights regarding your personal data:

• Right of Access (Article 15): Request a copy of your personal data
• Right to Rectification (Article 16): Request correction of inaccurate or incomplete data
• Right to Erasure (Article 17): Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing (Article 18): Request limitation of how we use your data
• Right to Data Portability (Article 20): Receive your data in a structured, commonly used format
• Right to Object (Article 21): Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
• Right to Lodge a Complaint: File a complaint with a supervisory authority

To exercise any of these rights, please contact us using the details provided below. We will respond to your request within one month.

11. Data Security

We have implemented appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit using SSL/TLS
• Secure storage systems with access controls
• Regular security assessments and updates
• Staff training on data protection practices
• Incident response procedures

12. Cookies

Our website uses cookies and similar technologies. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

13. Children's Privacy

Our website is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

15. Supervisory Authority

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutettu):

• Website: tietosuoja.fi
• Address: PO Box 800, 00531 Helsinki, Finland