Privacy Policy

Last updated: 17 March 2025

1. Controller and contact details

The controller responsible for the processing of your personal data in connection with this website is:

Khimreonstrxepea
Rokin 64A, 1012 KW Amsterdam, Netherlands
Email: managers@khimreonstrxepea.world
Phone: +31 20 624 4331

2. Scope and legal basis

This Privacy Policy applies to the website khimreonstrxepea.world and to all personal data we collect and process when you use our site, place orders, or contact us. We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the Dutch Implementation Act (UAVG), and other applicable data protection laws in the Netherlands and the European Union.

3. Personal data we collect

We may collect and process the following categories of personal data:

• Identity and contact data: name, email address, telephone number, and postal address when you place an order or contact us.
• Transaction data: details of orders, payments, and delivery information.
• Technical and usage data: IP address, browser type and version, device type, time zone, pages visited, and how you use our website (including via cookies where you have consented).
• Communication data: copies of correspondence when you contact us by email or through our contact form.

4. Purposes and legal grounds for processing

We use your personal data for the following purposes and on the following legal bases:

• Performance of a contract: to process and fulfil your orders, manage deliveries, and provide customer support (Art. 6(1)(b) GDPR).
• Legitimate interests: to operate and improve our website, prevent fraud, ensure security, and defend legal claims (Art. 6(1)(f) GDPR).
• Legal obligation: to comply with tax, accounting, and other legal obligations (Art. 6(1)(c) GDPR).
• Consent: where we use non-essential cookies or send marketing communications, we do so only with your consent (Art. 6(1)(a) GDPR). You may withdraw consent at any time.

5. Data retention

We retain your personal data only for as long as necessary for the purposes set out in this policy:

• Order and transaction data: for the duration of the contractual relationship and thereafter for up to 7 years for legal, tax, and accounting requirements.
• Contact and enquiry data: for the time needed to handle your request and, where relevant, for a reasonable period for follow-up (typically up to 2 years unless a longer period is required by law).
• Cookie and usage data: as specified in our Cookie Policy; session data may be deleted when you close your browser; analytics and marketing data may be retained for up to 24 months depending on the type of cookie and your choices.
• Marketing data: until you withdraw consent or object, and then only as needed for proof of consent or legal obligations.

After the retention period, we delete or anonymise your data so that it can no longer identify you.

6. Your rights under the GDPR

Under the GDPR you have the following rights in relation to your personal data:

• Right of access (Art. 15): you may request a copy of the personal data we hold about you.
• Right to rectification (Art. 16): you may request correction of inaccurate or incomplete data.
• Right to erasure (Art. 17): you may request deletion of your data where the legal grounds for processing no longer apply (e.g. consent withdrawn, data no longer necessary).
• Right to restriction of processing (Art. 18): you may ask us to restrict processing in certain situations (e.g. while accuracy is verified or you object to processing).
• Right to data portability (Art. 20): where processing is based on contract or consent and carried out by automated means, you may receive your data in a structured, commonly used, machine-readable format.
• Right to object (Art. 21): you may object to processing based on legitimate interests or to processing for direct marketing at any time.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
• Right to lodge a complaint: you have the right to lodge a complaint with a supervisory authority. In the Netherlands, this is the Autoriteit Persoonsgegevens (Dutch Data Protection Authority), autoriteitpersoonsgevens.nl.

To exercise any of these rights, please contact us using the contact details in section 1. We will respond within one month, extendable by two further months where necessary. We may ask you to verify your identity before processing your request.

7. Recipients and international transfers

We may share your personal data with:

• Payment and delivery service providers necessary to fulfil your order.
• IT and hosting providers that support our website and systems, under strict data processing agreements.
• Professional advisers (e.g. lawyers, accountants) where required by law or to protect our rights.
• Public authorities when required by law.

Where we transfer data outside the European Economic Area (EEA), we ensure an adequate level of protection via an adequacy decision, standard contractual clauses, or other approved mechanisms under the GDPR.

8. Security measures

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, including:

• Use of HTTPS and encryption for data in transit.
• Access controls and authentication for our systems.
• Regular review of our security practices and, where applicable, data processing agreements with processors.

Despite these measures, no transmission or storage over the internet can be guaranteed to be completely secure. We encourage you to use strong passwords and to keep your login details confidential.

9. Children

Our website and services are not directed at individuals under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will delete it promptly.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in the law. The "Last updated" date at the top will be revised when we make changes. We encourage you to review this page periodically. Where changes are material, we may notify you by email or by a notice on our website.

11. Contact

For any questions about this Privacy Policy or our processing of your personal data, please contact us at managers@khimreonstrxepea.world or by post at Rokin 64A, 1012 KW Amsterdam, Netherlands, or by phone at +31 20 624 4331.