Privacy Policy

1. Introduction

This Privacy Policy explains how Quexylanzitel ("we", "us", "our") collects, uses, discloses, and protects your personal information when you visit our website at quexylanzitel.world (the "Website") or purchase our products. We are committed to protecting your privacy and ensuring that your personal data is handled in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

By using our Website or services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein.

2. Data Controller Information

The data controller responsible for your personal information is:

Quexylanzitel
Claude Debussylaan 88
1082 MD Amsterdam
Netherlands
Email: message@quexylanzitel.world
Phone: +31 20 573 5735

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us using the information provided above.

3. Information We Collect

3.1 Information You Provide Directly

We collect personal information that you voluntarily provide to us when you:

• Place an order for our products
• Fill out contact forms on our Website
• Subscribe to our newsletter or marketing communications
• Create an account on our Website
• Contact our customer service team
• Participate in surveys, promotions, or contests

The types of personal information we may collect include:

• Full name
• Email address
• Phone number
• Billing and shipping address
• Payment information (processed securely through third-party payment processors)
• Order history and preferences
• Any other information you choose to provide in messages or forms

3.2 Information Collected Automatically

When you visit our Website, we automatically collect certain information about your device and browsing behavior, including:

• IP address
• Browser type and version
• Operating system
• Device identifiers
• Pages visited and time spent on pages
• Referring website or source
• Date and time of visits
• Clickstream data

This information is collected through cookies, web beacons, and similar tracking technologies. For more information about our use of cookies, please refer to our Cookies Policy.

3.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment processors and financial institutions
• Shipping and logistics providers
• Marketing and analytics service providers
• Social media platforms (if you interact with us through social media)
• Publicly available sources

4. How We Use Your Information

We use your personal information for the following purposes:

4.1 Order Processing and Fulfillment

• Processing and fulfilling your orders
• Communicating with you about your orders
• Arranging shipping and delivery
• Processing payments and preventing fraud
• Handling returns and refunds

Legal Basis: Performance of a contract (GDPR Article 6(1)(b))

4.2 Customer Service and Support

• Responding to your inquiries and requests
• Providing customer support
• Resolving disputes and troubleshooting issues
• Sending service-related communications

Legal Basis: Performance of a contract and legitimate interests (GDPR Article 6(1)(b) and (f))

4.3 Marketing and Communications

• Sending promotional emails and newsletters (with your consent)
• Informing you about new products, special offers, and updates
• Conducting market research and surveys
• Personalizing your experience on our Website

Legal Basis: Consent (GDPR Article 6(1)(a)) and legitimate interests (GDPR Article 6(1)(f))

4.4 Website Improvement and Analytics

• Analyzing how visitors use our Website
• Improving our Website's functionality and user experience
• Testing new features and services
• Conducting data analysis and research

Legal Basis: Legitimate interests (GDPR Article 6(1)(f))

4.5 Legal Compliance and Protection

• Complying with legal obligations and regulations
• Protecting our rights, property, and safety
• Preventing fraud, abuse, and illegal activities
• Enforcing our terms and conditions
• Responding to legal requests from authorities

Legal Basis: Legal obligation (GDPR Article 6(1)(c)) and legitimate interests (GDPR Article 6(1)(f))

5. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information with the following categories of recipients:

5.1 Service Providers

We engage trusted third-party service providers to perform functions on our behalf, including:

• Payment processing companies
• Shipping and logistics providers
• Email service providers
• Web hosting and cloud storage providers
• Analytics and marketing platforms
• Customer relationship management (CRM) systems

These service providers have access to your personal information only to perform specific tasks on our behalf and are obligated to protect your information and use it only for the purposes for which it was disclosed.

5.2 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity. We will notify you of any such change and provide you with choices regarding your personal information.

5.3 Legal Requirements

We may disclose your personal information if required to do so by law or in response to valid requests by public authorities, including to meet national security or law enforcement requirements. This includes:

• Complying with court orders, subpoenas, or legal processes
• Responding to requests from government agencies or regulatory bodies
• Protecting our rights, property, or safety, or that of our users or the public
• Investigating and preventing fraud, security issues, or illegal activities

5.4 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

6. International Data Transfers

Your personal information may be transferred to and processed in countries other than the Netherlands, including countries outside the European Economic Area (EEA) that may have different data protection laws. When we transfer your personal information internationally, we ensure appropriate safeguards are in place to protect your data, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Binding Corporate Rules
• Other legally recognized transfer mechanisms

By using our Website and services, you acknowledge and consent to the transfer of your personal information as described in this section.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The specific retention periods depend on the nature of the information and the purposes for which it is processed:

• Order and Transaction Data: We retain order information for 7 years to comply with tax and accounting regulations.
• Customer Account Information: We retain account information for as long as your account is active or as needed to provide you with services. If you request account deletion, we will delete or anonymize your information within 30 days, except where retention is required by law.
• Marketing Communications: We retain your contact information for marketing purposes until you unsubscribe or withdraw consent, after which we will remove you from our marketing lists within 30 days.
• Website Analytics Data: We typically retain analytics data for 26 months.
• Customer Service Records: We retain customer service communications for 3 years to improve our services and resolve disputes.

After the retention period expires, we will securely delete or anonymize your personal information in accordance with applicable laws and our internal data retention policies.

8. Your Rights Under GDPR

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal information:

8.1 Right of Access

You have the right to request access to the personal information we hold about you and to receive a copy of that information. You can also request information about how we process your data.

8.2 Right to Rectification

You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.

8.3 Right to Erasure (Right to be Forgotten)

You have the right to request that we delete your personal information in certain circumstances, such as when the information is no longer necessary for the purposes for which it was collected, or when you withdraw your consent.

8.4 Right to Restriction of Processing

You have the right to request that we restrict the processing of your personal information in certain circumstances, such as when you contest the accuracy of the data or object to our processing.

8.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit that information to another controller.

8.6 Right to Object

You have the right to object to our processing of your personal information based on legitimate interests or for direct marketing purposes. If you object to marketing, we will stop processing your data for such purposes.

8.7 Right to Withdraw Consent

Where we rely on your consent to process your personal information, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

8.8 Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, particularly in the EU member state of your habitual residence, place of work, or place of the alleged infringement. In the Netherlands, the supervisory authority is the Autoriteit Persoonsgegevens (Dutch Data Protection Authority).

8.9 Exercising Your Rights

To exercise any of these rights, please contact us at message@quexylanzitel.world or write to us at the address provided in Section 2. We will respond to your request within one month, although this period may be extended by two additional months in complex cases. We may request additional information to verify your identity before processing your request.

9. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption: We use SSL/TLS encryption to protect data transmitted between your browser and our servers. All pages on our Website use HTTPS protocol.
• Access Controls: We restrict access to personal information to employees, contractors, and service providers who need to know that information to process it on our behalf and who are subject to strict contractual confidentiality obligations.
• Secure Storage: Personal information is stored on secure servers with restricted access and protected by firewalls and other security technologies.
• Payment Security: We do not store complete credit card information on our servers. Payment processing is handled by PCI-DSS compliant third-party payment processors.
• Regular Security Assessments: We conduct regular security audits and vulnerability assessments to identify and address potential security risks.
• Employee Training: Our employees receive training on data protection and security best practices.
• Incident Response: We have procedures in place to detect, respond to, and report data breaches in accordance with GDPR requirements.

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. Therefore, we cannot guarantee absolute security. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately.

10. Children's Privacy

Our Website and services are not directed to children under the age of 16, and we do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16 without parental consent, we will take steps to delete that information as soon as possible. If you believe that we may have collected information from a child under 16, please contact us at message@quexylanzitel.world.

11. Third-Party Links

Our Website may contain links to third-party websites, services, or applications that are not operated by us. This Privacy Policy does not apply to those third-party sites. We are not responsible for the privacy practices or content of third-party websites. We encourage you to review the privacy policies of any third-party sites you visit before providing any personal information.

12. Automated Decision-Making and Profiling

We may use automated decision-making and profiling techniques to personalize your experience on our Website, such as recommending products based on your browsing history or previous purchases. These automated processes do not produce legal effects concerning you or similarly significantly affect you. You have the right to object to such processing and to request human intervention in the decision-making process. If you wish to exercise this right, please contact us at message@quexylanzitel.world.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes, we will update the "Last Updated" date at the top of this policy. If we make material changes that significantly affect your rights, we will provide prominent notice on our Website or send you an email notification (if you have provided your email address).

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your personal information. Your continued use of our Website and services after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

14. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Quexylanzitel
Claude Debussylaan 88
1082 MD Amsterdam
Netherlands
Email: message@quexylanzitel.world
Phone: +31 20 573 5735

We will respond to your inquiry as soon as possible, typically within 5 business days.

15. Supervisory Authority

If you have concerns about how we handle your personal data and are not satisfied with our response, you have the right to lodge a complaint with the Dutch Data Protection Authority:

Autoriteit Persoonsgegevens
Postbus 93374
2509 AJ Den Haag
Netherlands
Website: autoriteitpersoonsgegevens.nl
Phone: +31 70 888 8500