Privacy Policy

1. Introduction

Vunarexxxychrele ("we", "us", or "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website vunarexxxychrele.world and purchase our products.

This policy is designed to comply with the General Data Protection Regulation (GDPR) (EU) 2016/679, the Dutch Implementation Act (Uitvoeringswet Algemene Verordening Gegevensbescherming, UAVG), and other applicable data protection laws in the Netherlands and the European Union.

2. Data Controller Information

The data controller responsible for your personal data is:

• Company Name: Vunarexxxychrele
• Address: Kapelstraat 43-A, 1404 HW Bussum, Netherlands
• Email: hello@vunarexxxychrele.world
• Country: Netherlands

3. Personal Data We Collect

We may collect and process the following categories of personal data:

3.1 Data You Provide Directly

• Contact Information: Name, email address, phone number (optional), and delivery address
• Order Information: Product orders, purchase history, and payment details
• Communication Data: Messages, inquiries, and correspondence with our team
• Consent Records: Records of consents you have provided

3.2 Data Collected Automatically

• Technical Data: IP address, browser type and version, operating system, device information
• Usage Data: Pages visited, time spent on pages, click patterns, referral sources
• Cookie Data: Information collected through cookies and similar technologies (see our Cookie Policy)

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR Article 6:

• Consent (Art. 6(1)(a)): Where you have given explicit consent for marketing communications and optional cookies
• Contract Performance (Art. 6(1)(b)): To process and fulfill your orders, deliver products, and provide customer service
• Legal Obligation (Art. 6(1)(c)): To comply with legal requirements such as tax and accounting obligations
• Legitimate Interests (Art. 6(1)(f)): For fraud prevention, website security, and improving our services

5. Purposes of Data Processing

We use your personal data for the following purposes:

• Processing and fulfilling your orders
• Communicating with you about your orders and inquiries
• Providing customer support and responding to your requests
• Sending marketing communications (only with your consent)
• Improving our website, products, and services
• Analyzing website usage and performance
• Preventing fraud and ensuring website security
• Complying with legal and regulatory requirements

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Order Data: 7 years from the date of transaction (to comply with tax and accounting requirements)
• Marketing Consent: Until you withdraw your consent
• Communication Records: 3 years from the last interaction
• Cookie Data: As specified in our Cookie Policy
• Website Analytics: 26 months

After the retention period expires, your data will be securely deleted or anonymized.

7. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of Access (Art. 15): Request a copy of your personal data
• Right to Rectification (Art. 16): Request correction of inaccurate data
• Right to Erasure (Art. 17): Request deletion of your data ("right to be forgotten")
• Right to Restriction (Art. 18): Request limitation of data processing
• Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format
• Right to Object (Art. 21): Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent (Art. 7): Withdraw previously given consent at any time
• Right to Lodge a Complaint (Art. 77): You have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), the supervisory authority in the Netherlands for the enforcement of the GDPR and the UAVG.

We will respond to requests to exercise your rights without undue delay and in any event within one month (subject to any extension permitted under GDPR Article 12(3)). To exercise any of these rights, please contact us using the details provided below.

8. Data Sharing and Transfers

We may share your personal data with:

• Service Providers: Payment processors, shipping companies, and IT service providers who assist in our operations
• Legal Authorities: When required by law or to protect our legal rights

We do not sell your personal data to third parties. When we transfer data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• SSL/TLS encryption for data in transit
• Secure server infrastructure with access controls
• Regular security assessments and updates
• Staff training on data protection
• Limited access to personal data on a need-to-know basis

Despite our efforts, no method of transmission over the internet is 100% secure. We encourage you to protect your account credentials.

10. Children's Privacy

Our website and products are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a minor, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top indicates when the policy was last revised. Where changes materially affect how we process your personal data, we will provide notice (e.g. by email or a prominent notice on the website) where required by applicable law. We encourage you to review this policy periodically.

12. Applicable Law (Netherlands)

This Privacy Policy and our processing of your personal data are governed by the GDPR and the UAVG (Uitvoeringswet Algemene Verordening Gegevensbescherming). The Dutch Data Protection Authority (Autoriteit Persoonsgegevens) is the competent supervisory authority for the Netherlands.