1. Controller Identity and Contact
The controller responsible for the processing of your personal data within the meaning of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) is:
Quezrionkrozphex
Roßlenbroichstraße 40
41541 Dormagen, Germany
Phone: +49 213 328 74016
Email: information-@quezrionkrozphex.world
Website: https://quezrionkrozphex.world
2. Scope and Purpose of This Policy
This Privacy Policy explains what personal data we collect when you visit our website or interact with our services, why we collect it, how we use and protect it, and what rights you have in relation to your data. It applies to all processing activities carried out through this website.
3. Legal Bases for Processing
We process your personal data only where we have a valid legal basis. The legal bases we rely on under the GDPR are:
- Art. 6(1)(a) GDPR – Consent: Where you have given clear, informed consent (e.g. cookie preferences, marketing communications).
- Art. 6(1)(b) GDPR – Contract performance: Processing necessary to fulfil or prepare to enter into a contract with you (e.g. processing your order).
- Art. 6(1)(c) GDPR – Legal obligation: Processing required to comply with a legal obligation to which we are subject (e.g. tax and accounting records).
- Art. 6(1)(f) GDPR – Legitimate interests: Processing necessary for our legitimate interests, provided these are not overridden by your rights and freedoms (e.g. website security, fraud prevention).
4. Data We Collect and How
4.1 Contact and Order Form
When you submit our order or contact form, we collect: full name, email address, telephone number, and any message content you provide. This data is processed for the purpose of responding to your enquiry and processing your order (Art. 6(1)(b) GDPR).
4.2 Automatically Collected Technical Data
When you visit our website, our web server automatically records: IP address (anonymised where possible), browser type and version, operating system, referrer URL, date and time of access, and pages visited. This data is processed on the basis of legitimate interests (Art. 6(1)(f) GDPR) for security and performance purposes. It is not linked to specific individuals and is deleted after 7 days.
4.3 Cookies and Tracking Technologies
We use cookies and similar technologies as described in our Cookie Policy. Strictly necessary cookies are set on the basis of Art. 6(1)(f) GDPR. Optional analytical and marketing cookies are set only with your prior consent (Art. 6(1)(a) GDPR).
5. Purposes of Processing
- Processing and fulfilment of product orders
- Responding to customer enquiries
- Website operation, security, and improvement
- Compliance with legal and regulatory obligations
- Analytics to understand how visitors use our website (with consent)
- Marketing communications (with consent, and opt-out available at any time)
6. Data Retention Periods
| Data Category | Retention Period | Legal Basis |
|---|---|---|
| Order and contact form data | 3 years after last contact | Art. 6(1)(b) GDPR |
| Commercial and billing records | 10 years (§ 257 HGB / § 147 AO) | Art. 6(1)(c) GDPR |
| Web server access logs | 7 days | Art. 6(1)(f) GDPR |
| Cookie consent records | 3 years | Art. 6(1)(c) GDPR |
| Marketing consent data | Until consent withdrawn + 3 years | Art. 6(1)(a) GDPR |
7. Data Sharing and Transfers
We do not sell your personal data to third parties. We may share your data with:
- Service providers acting as data processors (e.g. hosting, email delivery, payment processing) — bound by data processing agreements under Art. 28 GDPR.
- Competent authorities where legally required or in response to a valid legal request.
Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses, adequacy decisions).
8. Your Rights Under GDPR
You have the following rights in relation to your personal data:
- Right of access (Art. 15 GDPR): Request a copy of the data we hold about you.
- Right to rectification (Art. 16 GDPR): Request correction of inaccurate or incomplete data.
- Right to erasure (Art. 17 GDPR): Request deletion of your data where there is no longer a legitimate purpose for retaining it.
- Right to restriction (Art. 18 GDPR): Request that we restrict processing of your data in certain circumstances.
- Right to data portability (Art. 20 GDPR): Receive your data in a structured, machine-readable format where processing is based on consent or contract.
- Right to object (Art. 21 GDPR): Object to processing based on legitimate interests or for direct marketing purposes.
- Right to withdraw consent (Art. 7(3) GDPR): Withdraw consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at: information-@quezrionkrozphex.world
You also have the right to lodge a complaint with the competent supervisory authority. In Germany, the relevant authority is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW).
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. Our website uses HTTPS encryption for all data transmission. Access to personal data is restricted to authorised personnel only on a need-to-know basis.
10. Automated Decision-Making
We do not use automated decision-making or profiling that produces legal or similarly significant effects in relation to individuals.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The version date at the top of this page indicates when it was last revised. We recommend reviewing this page periodically.