Privacy Policy

Last updated:

Geographic Scope and Topic

This website and business operate from Germany (EU). Our primary service area is the European Union. We sell dietary supplements (food supplements) and related products. Data processing described in this policy applies to visitors and customers within our service regions.

1. Data Controller

Craxylonxak

Zschokkestraße 63-65, 80686 München, Germany

2. Data We Collect

We collect data you provide: name, email, phone (optional), and message content when you submit the contact or order form.

3. Purposes of Processing

We process your data to: process orders, respond to inquiries, send order confirmations, and comply with legal obligations.

4. Legal Basis

Processing is based on your consent (Art. 6(1)(a) GDPR), contract performance (Art. 6(1)(b) GDPR), and our legitimate interests (Art. 6(1)(f) GDPR).

5. Data Retention

We retain data as long as necessary for the purposes stated or as required by law. Order data is retained for up to 10 years for tax and legal compliance.

6. Your Rights

You have the right to access, rectify, erase, restrict processing, data portability, object, and withdraw consent. Contact us to exercise these rights. You may also lodge a complaint with a supervisory authority.

7. Data Security

We implement technical and organizational measures to protect your data, including encryption (HTTPS), secure servers, and access controls.

8. Third Parties

We may share data with payment processors and shipping providers as necessary to fulfill orders. We do not sell your data.

9. International Transfers

Data is primarily processed within the EU. Where third-party services are used outside the EU, we ensure appropriate safeguards (e.g., Standard Contractual Clauses) are in place.