Privacy Policy
Last Updated:
1. Introduction
This Privacy Policy describes how Xiphrannix ("we", "our", or "us") collects, uses, and protects your personal information when you visit our website xiphrannix.world and use our services.
We are committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
2. Data Controller
Company Name: Xiphrannix
Address: Andreas-Hofer-Straße 10, 6020 Innsbruck, Austria
Email: info@xiphrannix.world
3. Information We Collect
3.1 Personal Information
We may collect the following personal information:
- Name
- Email address
- Phone number (if provided)
- Mailing address (for order fulfillment)
- Payment information (processed through secure third-party payment processors)
3.2 Automatically Collected Information
When you visit our website, we automatically collect certain information:
- IP address
- Browser type and version
- Device information
- Pages visited and time spent on pages
- Referring website addresses
4. How We Use Your Information
We use your personal information for the following purposes:
- To process and fulfill your orders
- To communicate with you about your orders and inquiries
- To improve our website and services
- To comply with legal obligations
- To prevent fraud and ensure security
5. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Contractual necessity: To fulfill orders and provide services
- Legal obligation: To comply with applicable laws and regulations
- Legitimate interests: To improve our services and prevent fraud
- Consent: For marketing communications (where applicable)
6. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.
- Order information: 7 years (for tax and accounting purposes)
- Marketing consent: Until withdrawn
- Website analytics: 26 months
7. Your Rights
Under GDPR, you have the following rights:
- Right of access: Request a copy of your personal data
- Right to rectification: Correct inaccurate or incomplete data
- Right to erasure: Request deletion of your data
- Right to restrict processing: Limit how we use your data
- Right to data portability: Receive your data in a structured format
- Right to object: Object to processing based on legitimate interests
- Right to withdraw consent: Withdraw consent at any time
To exercise these rights, please contact us at info@xiphrannix.world.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- SSL/TLS encryption for data transmission
- Secure server infrastructure
- Regular security assessments
- Access controls and authentication
9. Data Sharing
We do not sell your personal information. We may share your data with:
- Service providers who assist in operating our website and processing orders
- Payment processors for transaction processing
- Shipping companies for order fulfillment
- Legal authorities when required by law
All third parties are contractually obligated to protect your data and use it only for specified purposes.
10. International Data Transfers
Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
11. Cookies
We use cookies and similar technologies. For detailed information, please see our Cookie Policy.
12. Children's Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last Updated" date.
14. Geographic Scope and Data Processing
This website primarily serves customers in Austria and the European Union. Personal data collected through this website is processed in accordance with GDPR and Austrian data protection laws.
We comply with Google Ads policies regarding data collection and use for advertising purposes. When using Google Ads services, we adhere to their data processing requirements and user privacy standards.
15. Google Ads and Advertising Compliance
Our website may use Google Ads and other advertising services. In connection with these services:
- We comply with Google Ads policies for dietary supplement advertising
- We do not collect or process sensitive health information for advertising purposes
- We respect user privacy preferences and cookie consent choices
- We comply with applicable advertising regulations in Austria and the EU
For information about how Google uses data when you use our website, please visit: https://policies.google.com/privacy
16. Product Category and Data Handling
As a seller of dietary supplements, we handle personal data in compliance with:
- GDPR requirements for health-related data
- EU regulations on dietary supplements
- Google Ads policies for supplement advertising
- Austrian data protection and consumer protection laws
We do not process sensitive health data beyond what is necessary for order fulfillment and customer service. Any health-related information you provide is treated with appropriate confidentiality and security measures.
17. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:
Email: info@xiphrannix.world
Address: Andreas-Hofer-Straße 10, 6020 Innsbruck, Austria