1. Introduction
Welcome to Chraxellavorb. We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website chraxellavorb.world and purchase our products.
This policy is compliant with the General Data Protection Regulation (GDPR) (EU) 2016/679, the Finnish Data Protection Act (1050/2018), and other applicable data protection laws.
Data Controller Information
The data controller responsible for your personal data is:
- Company Name: Chraxellavorb
- Address: Alvar Aallon katu 5, 00100 Helsinki, Finland
- Email: question@chraxellavorb.world
- Website: https://chraxellavorb.world
2. Information We Collect
We collect information that you provide directly to us and information that is collected automatically when you use our website.
2.1 Information You Provide
When you place an order or contact us, we may collect the following personal data:
- Identity Data: Full name
- Contact Data: Email address, phone number (if provided), delivery address
- Transaction Data: Details about payments and orders
- Communication Data: Messages and correspondence with us
2.2 Information Collected Automatically
When you visit our website, we may automatically collect:
- Technical Data: IP address, browser type and version, time zone setting, browser plug-in types, operating system
- Usage Data: Pages visited, time spent on pages, page interaction information, and navigation patterns
- Cookie Data: Information collected through cookies and similar technologies (see our Cookie Policy)
3. Legal Basis for Processing
Under the GDPR, we must have a legal basis for processing your personal data. We rely on the following legal bases:
| Purpose | Legal Basis |
|---|---|
| Processing and fulfilling orders | Performance of a contract (Article 6(1)(b) GDPR) |
| Communicating with you about your order | Performance of a contract (Article 6(1)(b) GDPR) |
| Complying with legal obligations | Legal obligation (Article 6(1)(c) GDPR) |
| Improving our website and services | Legitimate interests (Article 6(1)(f) GDPR) |
| Marketing communications (with consent) | Consent (Article 6(1)(a) GDPR) |
| Analytics and website optimization | Consent (Article 6(1)(a) GDPR) |
4. How We Use Your Information
We use your personal data for the following purposes:
- To process and fulfill your orders, including delivery and payment processing
- To communicate with you about your orders, including order confirmations and shipping updates
- To respond to your inquiries and provide customer support
- To improve our website, products, and services
- To comply with legal and regulatory requirements
- To prevent fraud and ensure the security of our website
- To send marketing communications (only with your explicit consent)
5. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.
| Data Category | Retention Period |
|---|---|
| Order and transaction data | 6 years (for tax and accounting purposes) |
| Customer communication records | 3 years from last interaction |
| Marketing consent records | Until consent is withdrawn, plus 1 year |
| Website analytics data | 26 months |
| Cookie consent preferences | 12 months |
6. Data Sharing and Transfers
We may share your personal data with the following categories of recipients:
- Service Providers: Payment processors, shipping companies, and IT service providers who assist in delivering our products and services
- Legal Authorities: When required by law or to protect our legal rights
- Business Transfers: In connection with a merger, acquisition, or sale of assets
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes.
International Transfers
Your personal data may be transferred to, and processed in, countries outside the European Economic Area (EEA). When we transfer data outside the EEA, we ensure adequate protection through:
- EU Standard Contractual Clauses
- Adequacy decisions by the European Commission
- Other legally recognized transfer mechanisms
7. Your Rights Under GDPR
Under the GDPR, you have the following rights regarding your personal data:
- Right of Access: You have the right to request a copy of the personal data we hold about you.
- Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data.
- Right to Erasure: You have the right to request deletion of your personal data in certain circumstances ("right to be forgotten").
- Right to Restrict Processing: You have the right to request that we limit the processing of your personal data.
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used format.
- Right to Object: You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw that consent at any time.
To exercise any of these rights, please contact us at question@chraxellavorb.world. We will respond to your request within one month, as required by GDPR.
8. Data Security
We have implemented appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit using SSL/TLS (HTTPS)
- Secure storage of personal data on protected servers
- Access controls limiting data access to authorized personnel only
- Regular security assessments and updates
- Employee training on data protection and security
While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
9. Cookies
Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyze website traffic. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.
10. Children's Privacy
Our website and products are not intended for children under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected information from a child, please contact us immediately so we can delete such information.
11. Links to Third-Party Websites
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on this page with a new "Last updated" date. We encourage you to review this policy periodically.
13. Complaints
If you have any concerns about how we handle your personal data, you have the right to lodge a complaint with the supervisory authority in your country of residence. In Finland, the supervisory authority is:
- Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto)
- Address: Lintulahdenkuja 4, 00530 Helsinki, Finland
- Website: www.tietosuoja.fi
14. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
- Email: question@chraxellavorb.world
- Address: Alvar Aallon katu 5, 00100 Helsinki, Finland