Privacy Policy

1. Introduction

Shraxellaovon ("we," "our," or "us") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website shraxellaovon.world and use our services.

This Privacy Policy is designed to comply with the General Data Protection Regulation (GDPR) (EU) 2016/679, the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG), and other applicable data protection laws.

2. Data Controller Information

The data controller responsible for your personal data is:

Shraxellaovon
71 Friedrichstraße
10117 Berlin
Germany

Email: managers@shraxellaovon.world
Website: https://shraxellaovon.world

For any data protection inquiries, please contact us using the email address above.

3. Personal Data We Collect

We may collect and process the following categories of personal data:

3.1 Information You Provide Directly:

Contact Information: Name, email address, phone number (optional)
Order Information: Shipping address, billing address, payment details
Communication Data: Messages, inquiries, and feedback you send to us
Consent Records: Records of consents you have provided

3.2 Information Collected Automatically:

Technical Data: IP address, browser type and version, operating system, device type
Usage Data: Pages visited, time spent on pages, clickstream data, referral source
Cookie Data: Information collected through cookies and similar technologies (see our Cookie Policy)

4. Legal Basis for Processing

Under the GDPR, we process your personal data based on the following legal grounds:

Contract Performance (Art. 6(1)(b) GDPR): Processing necessary to fulfill orders and provide our services
Consent (Art. 6(1)(a) GDPR): Where you have given explicit consent for specific processing activities, such as marketing communications
Legal Obligation (Art. 6(1)(c) GDPR): Processing necessary to comply with legal requirements, such as tax and accounting obligations
Legitimate Interests (Art. 6(1)(f) GDPR): Processing necessary for our legitimate interests, such as fraud prevention, website security, and improving our services, where these interests are not overridden by your rights

5. Purposes of Processing

We use your personal data for the following purposes:

Processing and fulfilling your orders for VITA-Balance products
Communicating with you about your orders, inquiries, and customer service matters
Sending marketing communications (only with your explicit consent)
Improving our website, products, and services
Analyzing website usage and user behavior to enhance user experience
Ensuring website security and preventing fraud
Complying with legal obligations and protecting our legal rights
Managing our business operations and maintaining records

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required by law.

Order Data: Retained for 10 years after the transaction date to comply with German commercial and tax law requirements (§ 147 AO, § 257 HGB)
Communication Data: Retained for 3 years after the last interaction or as required for legal purposes
Marketing Consent Records: Retained for as long as the consent is valid, plus 3 years after withdrawal
Website Analytics Data: Retained for up to 26 months, then anonymized or deleted
Cookie Consent Preferences: Retained for 12 months from the date of consent

7. Data Sharing and Recipients

We may share your personal data with the following categories of recipients:

Service Providers: Third-party companies that provide services on our behalf, such as payment processors, shipping carriers, email service providers, and cloud hosting providers
Legal and Regulatory Authorities: When required by law, court order, or governmental authority
Professional Advisors: Lawyers, accountants, and auditors when necessary

All service providers are contractually bound to protect your data and may only process it according to our instructions. We do not sell your personal data to third parties.

8. International Data Transfers

If we transfer your personal data outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as:

Transfers to countries recognized by the European Commission as providing adequate data protection
Standard Contractual Clauses (SCCs) approved by the European Commission
Other legally recognized transfer mechanisms

You may request a copy of the safeguards we use by contacting us at the email address provided above.

9. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

Right of Access (Art. 15): You have the right to request a copy of the personal data we hold about you
Right to Rectification (Art. 16): You have the right to request correction of inaccurate or incomplete personal data
Right to Erasure (Art. 17): You have the right to request deletion of your personal data under certain circumstances
Right to Restriction (Art. 18): You have the right to request restriction of processing under certain circumstances
Right to Data Portability (Art. 20): You have the right to receive your data in a structured, commonly used, machine-readable format
Right to Object (Art. 21): You have the right to object to processing based on legitimate interests or for direct marketing purposes
Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw consent at any time
Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority

To exercise any of these rights, please contact us using the contact information provided in Section 2. We will respond to your request within one month, or inform you if an extension is needed.

10. Supervisory Authority

If you are not satisfied with how we handle your personal data or your privacy rights, you have the right to lodge a complaint with a data protection supervisory authority. The competent supervisory authority in Germany is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstr. 219
10969 Berlin
Germany
Website: https://www.datenschutz-berlin.de

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit using SSL/TLS technology
Secure server infrastructure with access controls
Regular security assessments and updates
Employee training on data protection and security
Limited access to personal data on a need-to-know basis

While we take all reasonable precautions, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security of your data.

12. Children's Privacy

Our website and services are not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

13. Links to Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to read the privacy policies of any third-party websites you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on this page with a revised "Last updated" date.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Shraxellaovon
71 Friedrichstraße
10117 Berlin
Germany
Email: managers@shraxellaovon.world