Privacy Policy

1. Introduction

This Privacy Policy explains how Kyxrelynezis ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at kyxrelynezis.world (the "Website") or use our services. We are committed to protecting your privacy and ensuring transparency in our data processing practices.

This policy complies with the General Data Protection Regulation (GDPR) and other applicable data protection laws. By using our Website, you consent to the data practices described in this policy.

2. Data Controller Information

The data controller responsible for your personal information is:

Company Name: Kyxrelynezis
Registered Address: Bryggetorget 4, 0250 Oslo, Norway
Contact Email: message@kyxrelynezis.world
Contact Phone: +47 23 11 30 00

If you have any questions about this Privacy Policy or our data processing practices, please contact us using the information provided above.

3. Information We Collect

3.1 Personal Information You Provide

We collect personal information that you voluntarily provide to us when you:

• Place an order through our order form
• Contact us via email or phone
• Subscribe to our newsletter or marketing communications
• Participate in surveys or promotions

The types of personal information we may collect include:

• Full name
• Email address
• Phone number
• Delivery address
• Payment information (processed securely through third-party payment processors)
• Any other information you choose to provide in messages or communications

3.2 Information Automatically Collected

When you visit our Website, we automatically collect certain information about your device and browsing behavior, including:

• IP address
• Browser type and version
• Operating system
• Referring website addresses
• Pages viewed and time spent on pages
• Date and time of visits
• Device identifiers

This information is collected through cookies and similar tracking technologies. Please refer to our Cookies Policy for more detailed information.

3.3 Information from Third Parties

We may receive information about you from third-party services, such as:

• Payment processors who handle transaction data
• Delivery services who provide shipping information
• Analytics providers who help us understand website usage
• Marketing platforms that facilitate our advertising campaigns

4. How We Use Your Information

We use the personal information we collect for the following purposes:

4.1 Order Processing and Fulfillment

• Processing and fulfilling your orders
• Communicating with you about your order status
• Arranging delivery of products
• Processing payments and preventing fraud
• Handling returns and refunds

4.2 Customer Service

• Responding to your inquiries and support requests
• Providing product information and assistance
• Resolving disputes and troubleshooting issues
• Improving our customer service quality

4.3 Marketing and Communications

• Sending promotional emails about new products, special offers, and updates (with your consent)
• Conducting market research and surveys
• Personalizing your experience on our Website
• Displaying targeted advertisements

4.4 Website Improvement and Analytics

• Analyzing website usage patterns and trends
• Improving website functionality and user experience
• Testing new features and services
• Monitoring website performance and security

4.5 Legal Compliance

• Complying with legal obligations and regulations
• Protecting our legal rights and interests
• Preventing fraud and unauthorized activities
• Enforcing our terms and conditions

5. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our contract with you when you place an order
• Consent: You have given explicit consent for specific processing activities, such as marketing communications
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention and website improvement, provided these interests do not override your rights
• Legal Obligation: Processing is required to comply with applicable laws and regulations

6. Data Sharing and Disclosure

We do not sell your personal information to third parties. However, we may share your information with the following categories of recipients:

6.1 Service Providers

We share information with trusted third-party service providers who assist us in operating our business, including:

• Payment processors for secure transaction handling
• Shipping and logistics companies for order delivery
• Email service providers for communication management
• Web hosting and cloud storage providers
• Analytics and marketing platforms
• Customer support software providers

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

6.2 Legal Requirements

We may disclose your information when required by law or in response to:

• Court orders or legal processes
• Requests from government authorities or law enforcement
• Protection of our legal rights and property
• Prevention of fraud or illegal activities
• Protection of the safety of our users or the public

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you of any such change and the choices you may have regarding your information.

7. International Data Transfers

Your personal information may be transferred to and processed in countries outside the European Economic Area (EEA) where our service providers are located. When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions recognizing equivalent data protection standards
• Binding Corporate Rules for intra-group transfers
• Your explicit consent for specific transfers

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Specific retention periods include:

• Order Information: Retained for 7 years to comply with accounting and tax regulations
• Marketing Consent: Retained until you withdraw consent or for 3 years of inactivity
• Customer Service Records: Retained for 3 years after the last interaction
• Website Analytics: Anonymized after 26 months
• Cookie Data: Retained according to cookie-specific durations as outlined in our Cookies Policy

After the retention period expires, we securely delete or anonymize your personal information.

9. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights regarding your personal information:

9.1 Right of Access

You have the right to request a copy of the personal information we hold about you, along with information about how we process it.

9.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal information.

9.3 Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal information in certain circumstances, such as when it is no longer necessary for the purposes for which it was collected.

9.4 Right to Restriction of Processing

You have the right to request that we limit the processing of your personal information in specific situations, such as when you contest the accuracy of the data.

9.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit it to another controller.

9.6 Right to Object

You have the right to object to processing of your personal information based on legitimate interests or for direct marketing purposes.

9.7 Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

9.8 Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, particularly in the EU member state of your residence, workplace, or where an alleged infringement occurred.

9.9 Exercising Your Rights

To exercise any of these rights, please contact us at message@kyxrelynezis.world or +47 23 11 30 00. We will respond to your request within one month, though this period may be extended by two additional months for complex requests.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• Encryption of data in transit using SSL/TLS protocols (HTTPS)
• Encryption of sensitive data at rest
• Regular security assessments and vulnerability testing
• Access controls and authentication mechanisms
• Employee training on data protection and security
• Secure backup and disaster recovery procedures
• Firewall protection and intrusion detection systems
• Regular software updates and security patches

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but continuously work to maintain the highest standards of data protection.

11. Children's Privacy

Our Website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information promptly.

12. Third-Party Links

Our Website may contain links to third-party websites, services, or applications that are not operated by us. This Privacy Policy does not apply to third-party sites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

13. Automated Decision-Making and Profiling

We may use automated decision-making processes, including profiling, for the following purposes:

• Fraud detection and prevention
• Personalization of marketing content
• Website optimization and user experience improvement

You have the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significantly affect you. If you wish to exercise this right, please contact us.

14. Marketing Communications

With your consent, we may send you marketing communications about our products, services, and promotions. You can opt out of receiving marketing emails at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Contacting us at message@kyxrelynezis.world
• Updating your communication preferences in your account settings

Please note that even if you opt out of marketing communications, we will still send you transactional emails related to your orders and account.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email or through a prominent notice on our Website
• Obtain your consent if required by applicable law

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our Website after changes are posted constitutes your acceptance of the updated policy.

16. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:

Email: message@kyxrelynezis.world
Phone: +47 23 11 30 00
Postal Address: Bryggetorget 4, 0250 Oslo, Norway

We will respond to your inquiry as promptly as possible, typically within 30 days.

17. Supervisory Authority

If you are located in the European Economic Area and have concerns about our data processing practices that we have not adequately addressed, you have the right to lodge a complaint with your local data protection authority.

For Norway, the supervisory authority is:
Datatilsynet (Norwegian Data Protection Authority)
Website: www.datatilsynet.no