1. Controller and Contact Details
The controller responsible for the processing of personal data on this website is:
Xiphranntrsmyx
Annastraße 68A, 45130 Essen, Germany
Phone: +49 201 408 7401
Email: informationask-@xiphranntrsmyx.world
2. Scope of This Policy
This Privacy Policy explains what personal data we collect when you visit our website at xiphranntrsmyx.world (the "Website"), why we collect it, how we process it, how long we retain it, and what rights you have under applicable data protection law — in particular the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG).
3. Data We Collect and Purposes of Processing
3.1 Visiting the Website (Server Log Files)
When you access our Website, your browser automatically transmits certain technical data to our hosting server. We process this data to maintain the security and stability of our Website and to diagnose technical errors. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR).
| Data Category | Retention Period |
|---|---|
| IP address (anonymised after 7 days) | 7 days |
| Date and time of access | 30 days |
| Browser type and version | 30 days |
| Operating system | 30 days |
| Referring URL | 30 days |
3.2 Order Form
When you submit an order via our website form, we collect your name, email address, phone number and any delivery address or message you provide. We process this data to handle your enquiry and fulfil your order. The legal basis is the performance of a contract or pre-contractual measures at your request (Art. 6(1)(b) GDPR). Your explicit consent to process this data is obtained via the GDPR checkbox on the form (Art. 6(1)(a) GDPR). You may withdraw consent at any time by contacting us, though this will not affect the lawfulness of processing already carried out.
| Data | Purpose | Retention |
|---|---|---|
| Name, email, phone | Order fulfilment, customer communication | Duration of the contractual relationship + 3 years for commercial records |
| Delivery address | Dispatching the order | Duration of the contractual relationship + 3 years |
3.3 Cookies
We use cookies on this Website. For details, please see our Cookie Policy. Strictly necessary cookies are used on the basis of our legitimate interest in operating a functional website. Optional analytics and marketing cookies are only set with your prior consent (Art. 6(1)(a) GDPR).
4. Sharing of Personal Data
We do not sell your personal data to third parties. We may share data with:
- Hosting and IT service providers acting as our data processors under a Data Processing Agreement (Art. 28 GDPR)
- Logistics partners for delivery of your order
- Payment processing partners (if applicable in future)
- Public authorities where we are legally obliged to disclose data
Where personal data is transferred to third countries outside the EEA, we ensure adequate protection through standard contractual clauses (SCCs) approved by the European Commission or other suitable safeguards.
5. Your Rights Under GDPR
You have the following rights in relation to your personal data held by us. To exercise any of these rights, please contact us using the details in Section 1.
- Right of access (Art. 15 GDPR): You may request a copy of the personal data we hold about you.
- Right to rectification (Art. 16 GDPR): You may ask us to correct inaccurate or incomplete data.
- Right to erasure (Art. 17 GDPR): You may ask us to delete your data in certain circumstances.
- Right to restriction of processing (Art. 18 GDPR): You may ask us to restrict how we use your data.
- Right to data portability (Art. 20 GDPR): You may request your data in a structured, machine-readable format.
- Right to object (Art. 21 GDPR): You may object to processing based on our legitimate interests.
- Right to withdraw consent (Art. 7(3) GDPR): Where processing is based on consent, you may withdraw it at any time.
You also have the right to lodge a complaint with a supervisory authority. The competent authority for Germany is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf.
6. Data Security
We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Our Website is served exclusively over HTTPS. Access to personal data is restricted to authorised personnel on a need-to-know basis.
7. Children's Data
Our Website and products are not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us so we can delete it promptly.
8. Automated Decision-Making
We do not carry out automated individual decision-making or profiling that produces legal or similarly significant effects, as referred to in Art. 22 GDPR.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The current version is always available at this URL. Material changes will be communicated via a prominent notice on our Website.