Privacy Policy

Your privacy matters to us. This policy explains how personal information is handled when you visit Xaforeni, contact us or make a purchase.

 

1. Who Is Responsible for Your Data?

 

The controller responsible for the processing described in this policy is:

 

Cleanixir UG (haftungsbeschränkt)

Operating the Xaforeni online store

c/o Basu Gözüpek

Nahariyastraße 39

12309 Berlin

Germany

Email: info@xaforeni.com

Phone: +49 1521 3852178

Website: https://xaforeni.com

 

2. Information We Collect

 

Depending on how you use the website, we may process:

 

- Contact details such as your name, email address and phone number when supplied.

- Order information such as selected products, billing and delivery details, order history, amounts charged and order status.

- Communications that you send us, including customer-service enquiries and requests about an order.

- Technical information needed for website operation and security, such as IP address, browser type, device information, access time and technical logs.

- Cookie preferences and, if you permit optional features, information connected with analytics or marketing tools.

 

Payment details are handled through the payment methods available at checkout. The information we receive from those providers depends on the service used and may include transaction identifiers, payment status and limited payment-related details.

 

3. Why We Use Personal Information

 

We use personal information for the following purposes:

 

- To display the shop and maintain a working, secure website.

- To receive, process and deliver orders.

- To arrange payment and maintain transaction records.

- To answer questions, manage returns and provide customer support.

- To comply with accounting, tax, consumer protection and other legal requirements.

- To protect the website and our customers from misuse or fraud.

- To send promotional messages only when we have a lawful basis to do so.

- To understand website performance through optional analytics, if such tools are enabled and any necessary consent has been obtained.

 

4. Legal Bases for Processing

 

Where the EU General Data Protection Regulation (GDPR) applies, our legal bases may include:

 

- Article 6(1)(b): processing necessary for a contract or steps requested before entering a contract, such as handling a purchase.

- Article 6(1)(c): processing necessary to meet legal duties, including record-keeping and consumer-law obligations.

- Article 6(1)(f): legitimate interests, such as maintaining website security, answering general enquiries and preventing abuse, where those interests are not overridden by individual rights.

- Article 6(1)(a): consent for optional cookies, certain analytics or marketing activities when consent is required.

 

You may withdraw consent at any time. Withdrawal does not affect processing lawfully carried out before it.

 

5. Our Website Platform and Service Providers

 

Our store is built using Wix. The platform and service providers supporting the website may process technical, order and customer information to provide hosting, checkout, site security and related functions.

 

We may also share information only as needed with:

 

- Payment providers made available at checkout.

- Shipping and fulfilment providers handling an order.

- Technical service providers who help us operate and protect the website.

- Professional advisers, regulators and public authorities where a lawful requirement applies.

 

Service providers receive information relevant to their role. Some act on our instructions, while others, such as payment providers, may process information under their own legal responsibilities and privacy policies.

 

6. Cookies and Similar Technologies

 

Essential cookies and similar technologies may be used to keep the website running, protect it and support shopping-cart and checkout functions.

 

Optional cookies or technologies, for example those used for analytics, advertising or personalisation, require consent where the law says so. You should be able to make or change your choices through the site's cookie settings when those features are used.

 

You can also use browser controls to manage cookies, although blocking essential technologies may affect some shopping functions.

 

7. Payments and Order Processing

 

When you place an order, the information needed to complete and administer the purchase is processed by the shop and relevant service providers. Payment transactions are handled using the payment methods shown during checkout.

 

Please review the privacy information provided by the payment method you select for details about its own processing.

 

8. Customer Messages and Marketing

 

When you send an enquiry, we use the information you provide to answer and manage your request.

 

If you sign up to receive promotional emails, we process the relevant contact information for that purpose under an appropriate legal basis. You can unsubscribe from promotional communications using the method included in the message or by contacting us. Messages that are necessary for an order or a legal obligation are separate from marketing.

 

9. How Long We Keep Information

 

We keep personal information only for as long as it is needed for its purpose or as required by law.

 

Order and transaction records may need to be retained for statutory accounting and tax periods. Customer enquiries are kept while needed to address the matter and any related legal claims. Technical records are kept according to operational and security needs, subject to the retention settings of the systems we use. Information processed solely on the basis of consent is reviewed when that consent is withdrawn, unless another lawful basis requires retention.

 

10. Processing Outside the European Economic Area

 

Some website or payment service providers may process information outside the European Economic Area. Where the GDPR requires safeguards for such a transfer, a suitable legal mechanism must apply, such as an adequacy decision or appropriate contractual safeguards.

 

Further information about a particular provider's data processing and applicable transfer safeguards can be requested by contacting us.

 

11. Keeping Information Secure

 

We use reasonable technical and organisational precautions to protect information from unauthorised access, loss and misuse. No internet service can guarantee absolute security, and we review concerns when they are brought to our attention.

 

12. Your Privacy Rights

 

Depending on the applicable law, you may have the right to:

 

- Ask for access to personal information held about you.

- Request corrections to inaccurate or incomplete information.

- Request erasure where the legal conditions are met.

- Ask us to restrict certain processing.

- Object to certain processing based on legitimate interests or direct marketing.

- Receive certain information in a portable format.

- Withdraw consent where consent is the basis for processing.

- Complain to a competent data protection supervisory authority.

 

To exercise these rights, email info@xaforeni.com. We may need enough information to verify that the request relates to you. We will respond within the periods required by law.

 

In Germany, a complaint may be directed to the competent data protection authority. Information about the Berlin authority is available at https://www.datenschutz-berlin.de.

 

13. Children's Privacy

 

This store is intended for general shopping and is not directed at collecting personal information from children. If we learn that personal information has been collected without an appropriate legal basis, we will take suitable steps under applicable law.

 

14. Changes to This Policy

 

We may update this Privacy Policy when our website, services or legal requirements change. The current version will be made available on this website with an updated revision date.

 

15. Contact

 

For privacy questions or requests, contact:

 

Cleanixir UG (haftungsbeschränkt)

Email: info@xaforeni.com

Phone: +49 1521 3852178