Privacy Policy

Privacy Policy

Protecting your personal data is important to us. This privacy policy explains which personal data we collect when you visit nexaluvor.com or shop with us, why we collect it, and which rights you have under the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

1. Controller

The controller responsible for the processing of your personal data is:

Bold Brands UG (haftungsbeschränkt)
Begonienstr. 4
80939 München
Germany
Represented by the Managing Director Emilio de Saldanha
Email: info@nexaluvor.com
Phone: +49 1590 7985510

If you have any questions about data protection, you can contact us at any time using the details above.

2. Which Data We Collect

2.1 Data you provide to us

Contact and customer data, such as your name, delivery and billing address, email address and phone number, when you place an order or create a customer account.

Payment data, such as your selected payment method and the information needed to process your payment. Card and bank details are processed directly by the respective payment provider and are not stored by us.

Communication data, such as the content of emails or messages you send us, for example when you contact our customer service.

2.2 Data collected automatically

Technical and usage data, such as your IP address, browser type, device information, operating system, the pages you visit, and the date and time of your visit. This data is required to display our website correctly and to keep it secure.

Order and transaction data, such as the products you purchase, order date, order value and shipping option.

Cookie data, as described in section 6 below.

3. Purposes and Legal Bases of Processing

Processing your orders: We use your data to process your order, deliver your products, handle payments, returns and customer service. Legal basis: Art. 6 (1) (b) GDPR (performance of a contract).

Customer account: If you create a customer account, we store your data so you can view past orders and check out more quickly. Legal basis: Art. 6 (1) (b) GDPR.

Communication: We use your contact details to answer your enquiries and to inform you about your order and its delivery. Legal basis: Art. 6 (1) (b) GDPR and Art. 6 (1) (f) GDPR.

Newsletter and marketing: We only send you our newsletter or marketing emails if you have given your consent. You can withdraw your consent at any time, for example via the unsubscribe link in every email. Legal basis: Art. 6 (1) (a) GDPR.

Website operation and security: We process technical data to provide our website, ensure its stability and protect it against misuse and attacks. Legal basis: Art. 6 (1) (f) GDPR, based on our legitimate interest in a secure and functioning website.

Legal obligations: We store certain data to comply with commercial and tax retention obligations. Legal basis: Art. 6 (1) (c) GDPR.

Fraud prevention and legal claims: We may process data to prevent fraud and to establish, exercise or defend legal claims. Legal basis: Art. 6 (1) (f) GDPR.

4. Recipients of Your Data

We only pass on your personal data where this is necessary, legally permitted, or you have consented. Recipients may include:

Shipping carriers, who receive your name, delivery address and, where needed for delivery notifications, your email address or phone number.

Payment providers, such as PayPal, Klarna or card payment providers, who receive the data required to process your payment. These providers process your data under their own responsibility and in accordance with their own privacy policies.

Technical service providers, such as our shop platform, hosting provider, email service provider and IT service providers, who process data on our behalf under data processing agreements pursuant to Art. 28 GDPR.

Tax advisors and authorities, where we are legally obliged to disclose data.

We do not sell your personal data.

5. Transfers to Countries Outside the EU

Some of our service providers may be based in, or process data in, countries outside the European Union or the European Economic Area, for example in the United States. In such cases we ensure that an adequate level of data protection is in place, for example through an adequacy decision of the European Commission, such as the EU US Data Privacy Framework, or through EU Standard Contractual Clauses.

6. Cookies and Similar Technologies

Our website uses cookies and similar technologies. Cookies are small text files that are stored on your device.

Necessary cookies are required for the basic functions of our shop, such as the shopping cart, checkout and saving your cookie preferences. Legal basis: § 25 (2) of the German Telecommunications Digital Services Data Protection Act (TDDDG) and Art. 6 (1) (f) GDPR.

Optional cookies, such as cookies for analysis, statistics or marketing, are only set if you have given your consent through our cookie banner. Legal basis: § 25 (1) TDDDG and Art. 6 (1) (a) GDPR. You can change or withdraw your consent at any time via the cookie settings on our website.

You can also delete cookies or block them entirely in your browser settings. Please note that some features of our shop may not work properly if you do so.

7. How Long We Keep Your Data

We store your personal data only for as long as is necessary for the purposes described above. Order and invoice data is retained in accordance with statutory retention periods under German commercial and tax law, which are generally six to ten years. Data from a customer account is deleted when you close your account, unless legal retention obligations apply. Data processed on the basis of your consent is stored until you withdraw your consent.

8. Your Rights

Under the GDPR you have the following rights regarding your personal data:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to withdraw your consent at any time with effect for the future (Art. 7 (3) GDPR)

Right to object (Art. 21 GDPR): Where we process your data on the basis of legitimate interests, you have the right to object to this processing at any time for reasons arising from your particular situation. You can object to the use of your data for direct marketing at any time without giving reasons.

To exercise your rights, simply contact us at info@nexaluvor.com. We may need to verify your identity before responding. We will reply within one month.

9. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
Website: www.lda.bayern.de

10. Data Security

We use appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. Our website uses SSL/TLS encryption, which you can recognise by the lock symbol in your browser's address bar. Please note that no transmission of data over the internet can be completely secure.

11. Children

Our shop is not aimed at children. We do not knowingly collect personal data from persons under the age of 16. If we learn that we have collected such data without the consent of a parent or guardian, we will delete it as quickly as possible.

12. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in the law or in our services. The current version is always available on this page.