Privacy Policy

Last updated:

1. Data Controller Information

This website is operated by Chimvlexuz (hereinafter referred to as "we," "us," or "our").

Registered Address: Immenbergweg 34, 7361 GP Beekbergen, Netherlands

Contact Email: assist@chimvlexuz.world

We are committed to protecting your privacy and ensuring the security of your personal data in accordance with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679), the Dutch Implementation Act (UAVG — Uitvoeringswet Algemene verordening gegevensbescherming), and other applicable Dutch and EU data protection laws.

2. Data We Collect

We collect and process the following categories of personal data:

  • Identity Data: Name, surname
  • Contact Data: Email address, phone number (optional), delivery address
  • Transaction Data: Order details, payment information
  • Technical Data: IP address, browser type, device information, cookies
  • Communication Data: Messages, inquiries, and correspondence with us

3. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR Article 6:

  • Contract Performance (Art. 6(1)(b)): To fulfill your orders and provide our services
  • Consent (Art. 6(1)(a)): For marketing communications and analytics cookies
  • Legitimate Interests (Art. 6(1)(f)): To improve our services and ensure website security
  • Legal Obligation (Art. 6(1)(c)): To comply with tax and accounting requirements

4. Purposes of Data Processing

We use your personal data for the following purposes:

  • Processing and fulfilling your orders
  • Communicating with you about your orders and inquiries
  • Sending marketing communications (with your consent)
  • Improving our website and services
  • Analyzing website traffic and user behavior
  • Complying with legal and regulatory requirements
  • Preventing fraud and ensuring website security

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

  • Order Data: 7 years (for tax and accounting purposes)
  • Marketing Consent: Until you withdraw your consent
  • Website Analytics: 26 months
  • Communication Records: 3 years after the last contact

After the retention period expires, we securely delete or anonymize your data.

6. Your Rights Under GDPR

As a data subject, you have the following rights:

  • Right of Access (Art. 15): Request a copy of your personal data
  • Right to Rectification (Art. 16): Request correction of inaccurate data
  • Right to Erasure (Art. 17): Request deletion of your personal data
  • Right to Restriction (Art. 18): Request limitation of processing
  • Right to Data Portability (Art. 20): Receive your data in a portable format
  • Right to Object (Art. 21): Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent at any time

To exercise any of these rights, please contact us at assist@chimvlexuz.world. We will respond to your request without undue delay and in any event within one month of receipt. For complex or numerous requests, this period may be extended by a further two months; we will inform you of any extension and the reasons for delay within one month.

7. Data Sharing and Third Parties

We may share your personal data with:

  • Payment Processors: To process your payments securely
  • Shipping Partners: To deliver your orders
  • Analytics Providers: To analyze website usage (with your consent)
  • Legal Authorities: When required by law

We require all third parties to respect the security of your data and treat it in accordance with GDPR. We do not sell your personal data to third parties.

8. International Data Transfers

Your data is primarily stored within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses approved by the European Commission
  • Adequacy decisions by the European Commission
  • Binding Corporate Rules for intra-group transfers

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

  • SSL/TLS encryption for all data transmission
  • Secure server infrastructure with access controls
  • Regular security assessments and updates
  • Employee training on data protection
  • Incident response procedures

10. Cookies

We use cookies and similar technologies on our website. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

11. Automated Decision-Making and Profiling

We do not use automated decision-making (including profiling) that produces legal effects concerning you or similarly significantly affects you. All decisions regarding your personal data are made by our staff.

12. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

13. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, AP):

Website: autoriteitpersoonsgegevens.nl

Postal address: Postbus 93374, 2509 AJ Den Haag, Netherlands

We encourage you to contact us first so we can address your concerns directly.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

15. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: assist@chimvlexuz.world

Address: Immenbergweg 34, 7361 GP Beekbergen, Netherlands