Privacy Policy

Last updated: 6 March 2025

1. Controller

The data controller responsible for the processing of your personal data in connection with this website is:

Cholmarewhrexxon
Vesterbrogade 60
1620 København
Denmark

Email: question@cholmarewhrexxon.world
Phone: +45 35 39 83 82

2. Purpose of Processing

We process your personal data for the following purposes:

To process and fulfil your orders and enquiries
To communicate with you about your orders and customer service requests
To comply with legal obligations, including tax and accounting requirements
To improve our website and services
To send marketing communications where you have given consent
To manage cookie preferences and ensure website functionality

3. Legal Basis for Processing

We process personal data on the following legal bases under the General Data Protection Regulation (GDPR) and Danish data protection law:

Contract (Article 6(1)(b) GDPR): Processing necessary for the performance of a contract to which you are a party, or to take steps at your request before entering into a contract (e.g. order fulfilment).
Legal obligation (Article 6(1)(c) GDPR): Processing necessary for compliance with a legal obligation (e.g. tax, accounting, consumer law).
Legitimate interests (Article 6(1)(f) GDPR): Processing necessary for our legitimate interests, such as improving our services and preventing fraud, where these interests are not overridden by your rights.
Consent (Article 6(1)(a) GDPR): Processing based on your consent, which you may withdraw at any time (e.g. marketing, non-essential cookies).

4. Categories of Personal Data We Collect

We may collect and process the following categories of personal data:

Identity data: name, title
Contact data: email address, telephone number, postal address
Transaction data: order details, payment information, delivery address
Technical data: IP address, browser type and version, device information, time zone, operating system
Usage data: pages visited, time spent on the website, navigation paths
Communications data: messages you send to us, correspondence records

5. Data Retention Periods

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

Order and contract data: 5 years from the end of the financial year in which the transaction occurred, in accordance with Danish accounting and tax law (Bogføringsloven).
Customer service correspondence: 3 years from the date of the last communication, unless a longer period is required for legal claims.
Marketing data (where consent given): Until you withdraw consent or unsubscribe, after which we retain a minimal record only to ensure we do not contact you again if requested.
Cookie data: As specified in our Cookie Policy.
Technical logs: Up to 12 months for security and troubleshooting purposes.

After the retention period expires, we delete or anonymise your data in a secure manner.

6. Recipients and Transfers

We may share your personal data with:

Payment service providers for the processing of payments
Shipping and logistics partners for order fulfilment
IT and hosting providers who process data on our behalf under data processing agreements
Professional advisers (lawyers, accountants) when necessary for legal or regulatory compliance
Public authorities when required by law

If we transfer personal data to countries outside the European Economic Area (EEA), we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses approved by the European Commission, or adequacy decisions).

7. Your Rights Under GDPR

Under the General Data Protection Regulation and Danish data protection law, you have the following rights:

Right of access (Article 15): You may request a copy of the personal data we hold about you.
Right to rectification (Article 16): You may request correction of inaccurate or incomplete personal data.
Right to erasure (Article 17): You may request deletion of your personal data in certain circumstances (e.g. where data is no longer necessary, or you withdraw consent where consent was the legal basis).
Right to restrict processing (Article 18): You may request that we limit the processing of your data in certain circumstances.
Right to data portability (Article 20): Where processing is based on contract or consent and is carried out by automated means, you may receive your data in a structured, commonly used format.
Right to object (Article 21): You may object to processing based on legitimate interests, including profiling. You may object to direct marketing at any time.
Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time. This does not affect the lawfulness of processing before withdrawal.
Right to lodge a complaint: You have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, or with the supervisory authority in your country of residence.

To exercise any of these rights, please contact us at question@cholmarewhrexxon.world. We will respond without undue delay and in any event within one month. We may extend this period by up to two further months where necessary, and we will inform you of any such extension.

8. Security Measures

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, including:

Encryption of data in transit using TLS/HTTPS
Access controls and authentication
Secure storage and backup procedures
Staff training on data protection
Regular review and update of security practices

Despite our efforts, no method of transmission over the Internet or electronic storage is completely secure. We encourage you to use strong passwords and protect your account credentials.

9. Children

Our website and services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately and we will take steps to delete such information.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the nature of our services. The "Last updated" date at the top indicates when the policy was last revised. We encourage you to review this page periodically. Material changes will be communicated via the website or by email where appropriate.

11. Contact

If you have questions about this Privacy Policy or our data practices, please contact us:

Cholmarewhrexxon
Vesterbrogade 60, 1620 København, Denmark
Email: question@cholmarewhrexxon.world
Phone: +45 35 39 83 82