Privacy Policy

1. Controller Identity

This Privacy Policy describes how Wloxarixvelmorin ("we", "us", "our") collects, processes, and protects personal data obtained through the website wloxarixvelmorin.world and the order process for the product Glavexor.

2. Legal Basis for Processing

We process personal data on the following legal bases as defined in Article 6 of the GDPR:

• Performance of a contract (Art. 6(1)(b)): Processing necessary to handle your order, deliver the product and manage customer service.
• Legitimate interests (Art. 6(1)(f)): Fraud prevention, website security, and statistical analysis to improve our service.
• Consent (Art. 6(1)(a)): Where you have provided explicit consent, for example for marketing communications or non-essential cookies.
• Legal obligation (Art. 6(1)(c)): Where we are required to retain data under applicable Dutch or EU law (e.g., tax records).

3. Categories of Personal Data We Collect

We may collect the following personal data:

• Name and contact details (email address, phone number)
• Delivery address
• Order information and payment confirmation (we do not store full payment card data)
• Website usage data (IP address, browser type, pages visited) via cookies — see our Cookie Policy
• Communications you send us

4. Purposes of Processing

5. Data Sharing and Recipients

We do not sell your personal data. We may share data with the following categories of recipients solely for the purposes described above:

• Logistics and courier partners for order delivery within the Netherlands and EU
• Payment service providers (compliant with PCI-DSS)
• IT infrastructure and hosting providers within the EU/EEA
• Public authorities if required by applicable law

Any third-party processors are bound by Data Processing Agreements in accordance with Art. 28 GDPR.

6. International Transfers

We primarily process data within the EU/EEA. If any transfer outside the EEA is required, we ensure it is covered by an adequacy decision, Standard Contractual Clauses (SCCs), or another appropriate safeguard under Chapter V GDPR.

7. Your Rights Under GDPR

As a data subject, you have the following rights under the GDPR:

• Right of access (Art. 15): Request a copy of the data we hold about you.
• Right to rectification (Art. 16): Request correction of inaccurate data.
• Right to erasure (Art. 17): Request deletion of your data where there is no overriding legal basis for retention.
• Right to restrict processing (Art. 18): Ask us to limit processing in certain circumstances.
• Right to data portability (Art. 20): Receive your data in a structured, machine-readable format.
• Right to object (Art. 21): Object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent (Art. 7(3)): Withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us using the details in Section 1. We will respond within 30 days. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): www.autoriteitpersoonsgegevens.nl.

8. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction. These include SSL/TLS encryption, access controls, and regular security reviews.

9. Cookies

For detailed information on how we use cookies, please refer to our Cookie Policy.

10. Changes to This Policy

We may update this Privacy Policy periodically. The updated version will be posted on this page with the revised date. We encourage you to review it regularly.