1. Introduction
Crozelonbrex ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website crozelonbrex.world and make purchases from us.
This policy is compliant with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
Data Controller Information
Company: Crozelonbrex
Address: Eemelintie 3, 42600 Multia, Finland
Email: askuse@crozelonbrex.world
Country: Finland
If you are contacting us about data protection, please include "Privacy" in the subject line and provide enough details for us to verify your identity and locate your data.
2. Information We Collect
2.1 Personal Data You Provide
We collect personal data that you voluntarily provide when:
- Placing an order through our website
- Creating an account or registering on our site
- Contacting us via email or contact forms
- Subscribing to our newsletter
This information may include:
- Full name
- Email address
- Phone number (if provided)
- Shipping and billing address
- Payment information (processed securely by payment providers)
- Order details and purchase history
2.2 Automatically Collected Data
When you visit our website, we may automatically collect certain information:
- IP address
- Browser type and version
- Device type and operating system
- Pages visited and time spent on pages
- Referring website or source
- Date and time of access
2.3 Cookies and Similar Technologies
We use cookies and similar technologies for essential functionality and, if you consent, for analytics and marketing. For details and controls, see our Cookie Policy.
3. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Contract Performance: Processing necessary to fulfill orders and provide services you have requested.
- Legitimate Interests: Processing for our legitimate business interests, such as improving our services and website security.
- Consent: Processing based on your explicit consent, such as marketing communications.
- Legal Obligation: Processing required to comply with applicable laws and regulations.
4. How We Use Your Information
We use your personal data for the following purposes:
- Processing and fulfilling your orders
- Communicating with you about your orders and inquiries
- Sending transactional emails (order confirmations, shipping updates)
- Providing customer support
- Improving our website and services
- Analyzing website usage and trends
- Preventing fraud and ensuring security
- Complying with legal obligations
- Marketing communications (with your consent)
5. Data Sharing and Disclosure
We may share your personal data with:
- Service Providers: Third parties who assist us in operating our website, processing payments, shipping orders, and providing customer service.
- Payment Processors: Secure payment gateways that process your payment information.
- Shipping Partners: Delivery companies that fulfill your orders.
- Legal Authorities: When required by law or to protect our rights.
We do not sell your personal data to third parties.
5.1 Categories of Recipients
Depending on how you interact with our website, recipients may include hosting providers, email service providers, customer support tools, analytics providers (if enabled via consent), payment providers, and logistics/shipping partners. We only share data that is necessary for the specific purpose.
6. International Data Transfers
Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When such transfers occur, we ensure appropriate safeguards are in place, including:
- Standard contractual clauses approved by the European Commission
- Adequacy decisions by the European Commission
- Other legally approved transfer mechanisms
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:
- Order data: 7 years from the date of purchase (for tax and legal compliance)
- Account data: Until you request deletion or account closure
- Marketing data: Until you withdraw consent or unsubscribe
- Website analytics: 26 months
Retention periods may be extended where necessary to establish, exercise, or defend legal claims or to comply with legal obligations.
8. Your Rights Under GDPR
As a data subject, you have the following rights:
- Right of Access: Request a copy of your personal data we hold.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure: Request deletion of your personal data ("right to be forgotten").
- Right to Restriction: Request limitation of processing of your data.
- Right to Data Portability: Receive your data in a structured, machine-readable format.
- Right to Object: Object to processing based on legitimate interests or for marketing purposes.
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, please contact us at askuse@crozelonbrex.world. We will respond to your request within 30 days.
8.1 Identity Verification
To protect your data, we may need to verify your identity before responding to a request. If we cannot verify your identity, we may ask for additional information.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- SSL/TLS encryption for data transmission
- Secure server infrastructure
- Access controls and authentication
- Regular security assessments
- Employee training on data protection
While we strive to protect your personal data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
10. Cookies
Our website uses cookies and similar technologies. For detailed information about our use of cookies, please see our Cookie Policy.
11. Children's Privacy
Our website and services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a minor, please contact us immediately.
12. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
14. Complaints
If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In Finland, this is:
Office of the Data Protection Ombudsman
Lintulahdenkuja 4, 00530 Helsinki, Finland
Website: tietosuoja.fi
15. Contact Us
For any questions or concerns regarding this Privacy Policy or our data practices, please contact us:
Email: askuse@crozelonbrex.world
Address: Eemelintie 3, 42600 Multia, Finland