Privacy Policy

This Privacy Policy explains how Trozelonaosnyx ("we", "us", "our") collects, uses, stores and protects personal data when you visit trozelonaosnyx.world (the "Website") or submit an enquiry through our order form. We are committed to protecting your privacy and complying with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable German data protection law.

1. Data Controller

The data controller responsible for processing your personal data is:

2. Personal Data We Collect

We collect the following categories of personal data:

2.1 Data You Provide Directly

• Contact and order data: Full name, email address, telephone number (optional), and any message or delivery address you provide when submitting the order form.
• Communication records: Any correspondence you initiate with us by email or phone.

2.2 Data Collected Automatically

• Technical data: IP address, browser type and version, operating system, referring URL, pages visited and time spent on site.
• Cookie data: Data stored through cookies and similar technologies as described in our Cookie Policy.

3. Purposes and Legal Basis for Processing

Purpose	Legal Basis (Art. 6 GDPR)	Retention Period
Processing your order enquiry and responding to your message	Art. 6(1)(b) – performance of a (pre-)contractual obligation	3 years from last contact
Responding to general enquiries and customer service	Art. 6(1)(f) – legitimate interest in providing customer support	3 years from last contact
Compliance with legal and statutory obligations (e.g. tax, accounting records)	Art. 6(1)(c) – legal obligation (§ 147 AO, § 257 HGB)	10 years from end of fiscal year
Analytics and website improvement (only with consent)	Art. 6(1)(a) – your explicit consent via the cookie banner	Until consent is withdrawn
Marketing communications (only with consent)	Art. 6(1)(a) – your explicit consent	Until consent is withdrawn

4. Data Sharing and Recipients

We do not sell your personal data. We may share data with the following categories of recipients:

• Fulfilment and logistics partners — to process and deliver your order (data limited to name, address, phone number).
• Payment service providers — to process payments securely (we do not store full payment card details).
• IT and hosting providers — for website hosting and technical infrastructure, bound by data processing agreements.
• Analytics providers — only if you consent to analytics cookies.
• Competent authorities — where required by law or to protect our legal rights.

Where we transfer data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses approved by the European Commission).

5. Cookies

We use cookies and similar tracking technologies. Please refer to our Cookie Policy for a detailed breakdown of the cookies used, their purpose and how to manage your preferences.

6. Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR): You may request a copy of the personal data we hold about you.
• Right to rectification (Art. 16 GDPR): You may request that inaccurate or incomplete data be corrected.
• Right to erasure (Art. 17 GDPR): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal obligations.
• Right to restriction of processing (Art. 18 GDPR): You may request that we limit how we process your data under certain circumstances.
• Right to data portability (Art. 20 GDPR): Where processing is based on consent or a contract, you may request your data in a structured, machine-readable format.
• Right to object (Art. 21 GDPR): You may object to processing based on legitimate interests at any time.
• Right to withdraw consent (Art. 7(3) GDPR): Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us using the details in Section 1. We will respond within one calendar month as required by Art. 12 GDPR.

You also have the right to lodge a complaint with the competent supervisory authority. The supervisory authority for data protection in the state of North Rhine-Westphalia (Nordrhein-Westfalen) is:

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. All data transmitted between your browser and our website is encrypted using TLS (HTTPS). Access to personal data is restricted to authorised personnel only.

8. Data Retention

We retain personal data only for as long as necessary for the purposes described above or as required by applicable law. Specific retention periods are listed in Section 3. When data is no longer required, it is securely deleted or anonymised.

9. Automated Decision-Making

We do not use automated decision-making or profiling as defined in Art. 22 GDPR in connection with the processing described in this policy.

10. Children's Privacy

Our Website and products are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 16. If you believe we have inadvertently collected such data, please contact us so we can delete it promptly.

11. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page will be revised accordingly. Continued use of the Website after any changes constitutes acceptance of the updated policy.

12. Contact

For any questions, requests or concerns relating to this Privacy Policy or your personal data, please contact us: