Privacy Policy

Last updated:

1. Data Controller

The data controller responsible for processing your personal data is:

Thorxianfrex
Dronning Eufemias gate 14, 0191 Oslo, Norway
Email: welcome@thorxianfrex.world
Website: https://thorxianfrex.world

2. What Personal Data We Collect

We collect the following categories of personal data when you interact with our website:

  • Contact information: Full name, email address, phone number (if provided), and message content submitted through our order form.
  • Technical data: IP address, browser type and version, operating system, referring URL, pages visited, time and date of visit, and time spent on pages.
  • Cookie data: Information collected through cookies and similar technologies, as described in our Cookie Policy.
  • Consent records: Records of the consents you have given, including GDPR consent and cookie preferences.

3. Purposes of Data Processing

We process your personal data for the following purposes:

  • Order processing: To receive, process, and fulfill your orders, and to communicate with you regarding your purchase.
  • Customer communication: To respond to your inquiries, provide customer support, and send order-related notifications.
  • Website functionality: To ensure the proper operation and security of our website.
  • Analytics: To understand how visitors use our website and to improve our services (only with your consent).
  • Legal compliance: To comply with applicable laws, regulations, and legal processes.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under the General Data Protection Regulation (GDPR):

  • Consent (Article 6(1)(a) GDPR): When you submit the order form with the GDPR consent checkbox, and when you accept optional cookies.
  • Contract performance (Article 6(1)(b) GDPR): Processing necessary for the performance of a contract to which you are a party, such as order fulfillment.
  • Legitimate interests (Article 6(1)(f) GDPR): For purposes such as website security, fraud prevention, and improving our services, where such interests are not overridden by your rights.
  • Legal obligation (Article 6(1)(c) GDPR): Where processing is required to comply with a legal obligation.

5. Data Sharing and Third Parties

We do not sell your personal data. We may share your data with the following categories of recipients only as necessary:

  • Service providers: Hosting providers, email service providers, and analytics platforms that process data on our behalf under data processing agreements.
  • Legal authorities: Where required by law, regulation, or legal process.

All third-party service providers are contractually required to protect your data and process it only in accordance with our instructions and applicable data protection laws.

6. International Data Transfers

Your personal data is primarily processed within the European Economic Area (EEA). If data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or an adequacy decision.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy:

  • Order data: Retained for up to 5 years after the last transaction for legal, tax, and accounting obligations.
  • Contact form submissions: Retained for up to 2 years after the last communication unless an ongoing relationship exists.
  • Cookie consent records: Retained for up to 12 months, after which renewed consent may be requested.
  • Technical/analytics data: Retained for up to 26 months and then anonymized or deleted.

When personal data is no longer needed, it is securely deleted or anonymized.

8. Your Rights Under GDPR

As a data subject, you have the following rights under the GDPR:

  • Right of access (Article 15): You have the right to request a copy of the personal data we hold about you.
  • Right to rectification (Article 16): You have the right to request correction of inaccurate or incomplete data.
  • Right to erasure (Article 17): You have the right to request deletion of your personal data, subject to certain legal exceptions.
  • Right to restriction of processing (Article 18): You have the right to request that we restrict the processing of your data in certain circumstances.
  • Right to data portability (Article 20): You have the right to receive your data in a structured, commonly used, and machine-readable format.
  • Right to object (Article 21): You have the right to object to the processing of your personal data based on legitimate interests or direct marketing.
  • Right to withdraw consent: Where processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us at: welcome@thorxianfrex.world. We will respond to your request within 30 days.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • HTTPS encryption for all data transmitted between your browser and our website.
  • Access controls to limit access to personal data to authorized personnel only.
  • Regular security assessments and updates to our systems and processes.
  • Secure data storage with appropriate backup and recovery procedures.

10. Children's Privacy

Our website and products are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child, we will take steps to delete it promptly.

11. Complaints

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. The relevant authority in Norway is:

Datatilsynet (Norwegian Data Protection Authority)
P.O. Box 458 Sentrum, 0105 Oslo, Norway
Website: https://www.datatilsynet.no

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. The updated policy will be posted on this page with a revised "Last updated" date. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

Thorxianfrex
Dronning Eufemias gate 14, 0191 Oslo, Norway
Email: welcome@thorxianfrex.world