Privacy policy

PRIVACY POLICY

CONTROLLER RESPONSIBLE FOR DATA PROCESSING:

CRAMBLAING LIMITED
UNIT 903A, 9/F., CAMERON COMM
CENTRE, 458-468 HENNESSY
ROAD, CAUSEWAY BAY
HONG KONG

Email: cramblaing@gmail.com

We appreciate your interest in our online shop. Protecting your privacy is very important to us. Below, we provide detailed information about how we handle your data.

1. ACCESS DATA AND HOSTING

You may visit our website without providing any personal information. Each time a webpage is accessed, the web server automatically stores a so-called server log file, which contains, for example, the name of the requested file, your IP address, date and time of access, amount of data transferred, and the requesting provider (access data). These access data are evaluated solely for the purpose of ensuring smooth operation of the website and improving our offering. This serves to safeguard our legitimate interests in a correct presentation of our offering pursuant to Art. 6(1) sentence 1 lit. f GDPR. All access data are deleted no later than seven days after the end of your visit.

Hosting

The services for hosting and displaying the website are partially provided by our service providers as part of processing on our behalf. Unless otherwise stated in this privacy policy, all access data and all data collected via forms on this website are processed on their servers. For questions about our service providers and the basis of our cooperation with them, please contact us using the details provided in this privacy policy.

Our service providers are located in and/or use servers in the following countries, for which the European Commission has determined an adequate level of data protection: Canada.

Our service providers are also located in and/or use servers in the USA and other countries outside the EU and EEA. No adequacy decision by the European Commission exists for these countries. Our cooperation with them is based on the European Commission’s Standard Contractual Clauses.

2. DATA PROCESSING FOR CONTRACT PERFORMANCE AND CONTACT

2.1 Data Processing for Contract Performance

For the purpose of contract performance (including inquiries and handling of any warranty and service disruption claims as well as statutory update obligations) pursuant to Art. 6(1) sentence 1 lit. b GDPR, we collect personal data if you voluntarily provide them to us when placing an order. Mandatory fields are marked as such, as we require these data to process the contract, and without them we cannot ship your order. The specific data collected can be seen from the respective input forms.

After complete performance of the contract, your data will be restricted for further processing and deleted after expiry of the retention periods required under tax and commercial law pursuant to Art. 6(1) sentence 1 lit. c GDPR, unless you have expressly consented to further use of your data pursuant to Art. 6(1) sentence 1 lit. a GDPR or we reserve the right to use data beyond this scope as permitted by law and as explained in this policy.

2.2 Customer Account

If you give your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR by choosing to open a customer account, we use your data for the purpose of creating the account and storing your data for future orders. You may delete your customer account at any time via the contact option stated in this privacy policy or via the function provided in the customer account. After deletion, your data will be deleted unless you have expressly consented to further use or we are legally permitted to retain them.

2.3 Contact

When you contact us (e.g. via contact form or email), we collect personal data to process your inquiry pursuant to Art. 6(1) sentence 1 lit. b GDPR. Mandatory fields are marked accordingly. After your inquiry has been fully processed, your data will be deleted unless you have expressly consented to further use or we are legally permitted to retain them.

3. DATA PROCESSING FOR SHIPPING

To fulfill the contract pursuant to Art. 6(1) sentence 1 lit. b GDPR, we pass on your data to the shipping service provider commissioned with delivery, insofar as this is necessary for delivery.

Transfer of Data to Shipping Providers for Delivery Notification

If you have expressly consented, we will pass on your email address and phone number to the selected shipping provider pursuant to Art. 6(1) sentence 1 lit. a GDPR so that they can contact you to announce or coordinate delivery. You may revoke this consent at any time.

Shipping provider:
DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
Germany

4. DATA PROCESSING FOR PAYMENT

We work with technical service providers, credit institutions, and payment service providers to process payments.

4.1 Transaction Processing

Depending on the selected payment method, the necessary data are passed on to the relevant service providers pursuant to Art. 6(1) sentence 1 lit. b GDPR. The privacy policy of the respective payment provider applies.

Available payment methods include credit card (Mastercard), Klarna (SOFORT), and Apple Pay.

4.2 Fraud Prevention and Optimization of Payment Processes

We may pass on additional data to service providers for fraud prevention and optimization of payment processes pursuant to Art. 6(1) sentence 1 lit. f GDPR.

4.3 Identity and Credit Checks (Klarna)

If you choose Klarna payment services, we transmit necessary data to Klarna for identity and credit checks with your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR. You may revoke this consent at any time.

5. ADVERTISING BY EMAIL AND PHONE

5.1 Email Newsletter and Tracking

If you subscribe to our newsletter, we will use your data to send you regular newsletters based on your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR. You may unsubscribe at any time. We analyze newsletter usage (open and click rates) for campaign optimization.

5.2 Newsletter Dispatch

The newsletter may be sent by service providers acting on our behalf. Service providers may be located in Canada.

5.3 Telephone Advertising

If you have given consent, we may use your phone number for advertising purposes. You may revoke your consent at any time.

6. COOKIES AND OTHER TECHNOLOGIES

We use cookies and similar technologies to enable website functionality and improve user experience. Necessary technologies do not require consent; optional technologies require your consent and may limit functionality if declined.

7. WEB ANALYSIS AND ADVERTISING TECHNOLOGIES

With your consent, we use third-party technologies, including Google services.

Google Analytics

Used for website analysis. IP addresses are anonymized. Processing is based on a data processing agreement.

Google reCAPTCHA

Used to protect forms from abuse and spam.

8. SOCIAL MEDIA

We maintain online presences on Instagram (Meta), YouTube, and LinkedIn. Data may be processed by the respective providers for marketing and analytics purposes. Processing may involve transfers to the USA based on Standard Contractual Clauses.

9. CONTACT OPTIONS AND YOUR RIGHTS

9.1 Your Rights

You have the right to:

access your data (Art. 15 GDPR)
rectification (Art. 16 GDPR)
erasure (Art. 17 GDPR)
restriction of processing (Art. 18 GDPR)
data portability (Art. 20 GDPR)
lodge a complaint with a supervisory authority (Art. 77 GDPR)

You also have the right to object to processing based on legitimate interests, particularly for direct marketing.

9.2 Contact

For questions regarding data collection, processing, use, or your rights, please contact us using the details provided in our legal notice.