Privacy Policy

1. Introduction

Xefralexsrozelon ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website xefralexsrozelon.world and use our services.

This policy is designed to comply with the General Data Protection Regulation (GDPR) (EU) 2016/679 and other applicable data protection laws.

2. Data Controller Information

The data controller responsible for your personal data is:

Xefralexsrozelon
Birkevej 13
5450 Otterup
Denmark

Email: partnership@xefralexsrozelon.world

3. Personal Data We Collect

We may collect the following categories of personal data:

3.1 Information You Provide

• Full name
• Email address
• Phone number (if provided)
• Messages or inquiries you submit
• Any other information you choose to provide

3.2 Automatically Collected Information

• IP address
• Browser type and version
• Operating system
• Referring website
• Pages visited and time spent
• Device identifiers

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you have given explicit consent for processing for specific purposes (Article 6(1)(a) GDPR)
• Contract Performance: When processing is necessary to fulfill a contract with you (Article 6(1)(b) GDPR)
• Legal Obligation: When we are legally required to process your data (Article 6(1)(c) GDPR)
• Legitimate Interests: When processing is necessary for our legitimate business interests (Article 6(1)(f) GDPR)

5. Purposes of Processing

We use your personal data for the following purposes:

• Processing and fulfilling your orders
• Communicating with you about your orders and inquiries
• Providing customer support
• Improving our website and services
• Analyzing website usage and trends
• Complying with legal obligations
• Protecting against fraud and unauthorized transactions

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Order data: Retained for the duration required by tax and accounting laws (typically 5-7 years)
• Communication records: Retained for up to 3 years after your last interaction
• Analytics data: Retained for up to 26 months
• Cookie consent records: Retained for the duration of consent validity

After the retention period expires, we securely delete or anonymize your data.

7. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of Access: You can request a copy of your personal data we hold
• Right to Rectification: You can request correction of inaccurate data
• Right to Erasure: You can request deletion of your data ("right to be forgotten")
• Right to Restriction: You can request limitation of processing
• Right to Data Portability: You can receive your data in a structured, machine-readable format
• Right to Object: You can object to processing based on legitimate interests
• Right to Withdraw Consent: You can withdraw consent at any time

To exercise any of these rights, please contact us using the information provided in Section 2.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• SSL/TLS encryption for data transmission
• Secure data storage with access controls
• Regular security assessments
• Employee training on data protection
• Incident response procedures

9. Data Sharing and Transfers

We may share your personal data with:

• Service Providers: Third parties who assist in operating our website and business
• Payment Processors: For secure transaction processing
• Delivery Partners: For order fulfillment
• Legal Authorities: When required by law

Any data transfers outside the EEA are conducted in compliance with GDPR requirements, using appropriate safeguards such as Standard Contractual Clauses.

10. Cookies

We use cookies and similar technologies on our website. For detailed information about the cookies we use and how to manage them, please refer to our Cookie Policy.

11. Children's Privacy

Our website and services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a minor, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

13. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with a supervisory authority. In Denmark, this is:

Datatilsynet
Carl Jacobsens Vej 35
2500 Valby, Denmark
Website: www.datatilsynet.dk