Privacy Policy

This Privacy Policy describes how we collect, use, store, and protect your personal data. We comply with the EU General Data Protection Regulation (GDPR) and the Dutch implementation thereof (UAVG), as well as applicable law in the Netherlands and the EEA.

Data controller

The data controller responsible for your personal data is:

Crexalonphel.world
Gerard Terborgstraat 46, 1071 TP Amsterdam, The Netherlands.
Email: office@crexalonphel.world

We are established in the Netherlands and operate in accordance with Dutch and EU data protection law.

Personal data we collect

We may collect the following categories of personal data:

• Contact data: name, email address, and any message you send via our order or contact forms.
• Technical data: IP address, browser type, device information, and similar data when you use our website (see our Cookie Policy).
• Communication records: copies of correspondence if you contact us.

Purposes and legal basis

We process your data for the following purposes and legal bases:

• Processing your orders and enquiries: performance of a contract or steps at your request (Art. 6(1)(b) GDPR).
• Compliance with legal obligations: e.g. tax, accounting (Art. 6(1)(c) GDPR).
• Legitimate interests: improving our website, security, and defending legal claims (Art. 6(1)(f) GDPR), where not overridden by your rights.
• Consent: where we ask for your consent (e.g. marketing or non-essential cookies), you may withdraw it at any time (Art. 6(1)(a) GDPR).

Retention periods

We keep your data only as long as necessary:

• Order and contact data: typically up to 7 years for legal and accounting requirements, unless a shorter period is required by law.
• Marketing and consent-based processing: until you withdraw consent or object, or as stated when we collect the data.
• Technical and access logs: as described in our Cookie Policy, usually no longer than necessary for the stated purpose.

Your rights under GDPR

You have the right to:

• Access: obtain confirmation and a copy of your personal data (Art. 15 GDPR).
• Rectification: have inaccurate data corrected (Art. 16 GDPR).
• Erasure: request deletion where applicable (Art. 17 GDPR).
• Restriction: request limited processing in certain cases (Art. 18 GDPR).
• Data portability: receive your data in a structured, machine-readable format where applicable (Art. 20 GDPR).
• Object: object to processing based on legitimate interests or for direct marketing (Art. 21 GDPR).
• Withdraw consent: at any time where processing is based on consent.

To exercise these rights, contact us at office@crexalonphel.world. If you are in the Netherlands, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl). You may also contact the supervisory authority in your country of residence.

Sharing and transfers

We may share data with service providers (e.g. hosting, email) who act as processors under our instructions. We do not sell your personal data. If we transfer data outside the EEA, we ensure appropriate safeguards (e.g. adequacy decisions or standard contractual clauses).

Security

We use appropriate technical and organisational measures to protect your data (e.g. HTTPS, access controls, secure storage). Despite our efforts, no transmission over the internet is completely secure; we encourage you to use secure channels when sending sensitive information.

Changes

We may update this policy from time to time. The current version is always on this page; the date at the top reflects the last update. Continued use of the site after changes constitutes acceptance of the updated policy where permitted by law.