Privacy Policy

Last updated:

1. Introduction

Ximthoremyzor ("we", "us", or "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you visit our website at https://ximthoremyzor.world (the "Website") or place an order for our products.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the Norwegian Personal Data Act (Personopplysningsloven), and other applicable data protection legislation.

2. Data Controller

The data controller responsible for your personal data is:

  • Company: Ximthoremyzor
  • Address: Nordre gate 15, 7011 Trondheim, Norway
  • Email: hello@ximthoremyzor.world
  • Website: https://ximthoremyzor.world

3. What Personal Data We Collect

We may collect and process the following categories of personal data:

3.1 Data You Provide Directly

  • Contact information: name, email address, phone number (optional)
  • Order information: messages or special requests submitted through our order form
  • Consent records: your consent to data processing and privacy policy acknowledgment

3.2 Data Collected Automatically

  • Technical data: IP address, browser type and version, operating system, device type
  • Usage data: pages visited, time spent on pages, referring website, click patterns
  • Cookie data: information collected through cookies and similar technologies (see our Cookie Policy)

4. Purposes and Legal Basis for Processing

We process your personal data for the following purposes and legal bases under GDPR Article 6:

Purpose Legal Basis Data Categories
Processing and fulfilling your orders Performance of a contract (Art. 6(1)(b)) Name, email, phone, message
Communicating with you about your order Performance of a contract (Art. 6(1)(b)) Name, email
Complying with legal obligations Legal obligation (Art. 6(1)(c)) Order data, contact information
Improving our website and services Legitimate interest (Art. 6(1)(f)) Technical data, usage data
Analytics and performance monitoring Consent (Art. 6(1)(a)) Cookie data, usage data
Marketing communications Consent (Art. 6(1)(a)) Email, cookie data

5. Data Sharing and Recipients

We do not sell your personal data to third parties. We may share your data with the following categories of recipients:

  • Service providers: hosting providers, email services, and payment processors who process data on our behalf under data processing agreements
  • Legal authorities: when required by law, regulation, or legal proceedings
  • Professional advisors: including lawyers and accountants, where necessary

All third-party processors are required to process your data in accordance with GDPR and our instructions.

6. International Data Transfers

If your personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including:

  • EU Standard Contractual Clauses (SCCs)
  • Adequacy decisions by the European Commission
  • Other legally recognized transfer mechanisms under GDPR Chapter V

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

  • Order data: retained for the duration required to process the order and for up to 5 years thereafter to comply with Norwegian accounting and tax legislation (Bokføringsloven)
  • Communication records: retained for up to 3 years from the last interaction
  • Consent records: retained for as long as the consent is valid, plus 3 years
  • Analytics data: retained in anonymized form for up to 26 months
  • Cookie data: retention periods vary by cookie type (see our Cookie Policy)

When personal data is no longer needed, it is securely deleted or anonymized.

8. Your Rights Under GDPR

As a data subject, you have the following rights under GDPR:

  • Right of access (Art. 15): You may request a copy of the personal data we hold about you.
  • Right to rectification (Art. 16): You may request correction of inaccurate or incomplete personal data.
  • Right to erasure (Art. 17): You may request deletion of your personal data, subject to legal retention obligations.
  • Right to restriction of processing (Art. 18): You may request that we limit the processing of your data in certain circumstances.
  • Right to data portability (Art. 20): You may request your personal data in a structured, commonly used, machine-readable format.
  • Right to object (Art. 21): You may object to processing based on legitimate interests or for direct marketing purposes.
  • Right to withdraw consent (Art. 7(3)): Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
  • Right to lodge a complaint: You have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) at www.datatilsynet.no.

To exercise any of these rights, please contact us at hello@ximthoremyzor.world.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • SSL/TLS encryption for data transmitted via our website
  • Access controls limiting data access to authorized personnel only
  • Regular security assessments and updates
  • Secure data storage with encrypted backups
  • Staff training on data protection and confidentiality

10. Cookies

Our website uses cookies and similar technologies. For detailed information about the types of cookies we use, their purposes, and how to manage your cookie preferences, please see our Cookie Policy.

11. Children's Privacy

Our website and products are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete such information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised "Last updated" date. We encourage you to review this page periodically.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

  • Email: hello@ximthoremyzor.world
  • Address: Nordre gate 15, 7011 Trondheim, Norway