Privacy Policy

1. Controller Identity and Contact Details

This Privacy Policy is issued by Chivrealvortoz, the operator of the website at chivrealvortoz.world and the seller of the Velorinil food supplement.

We are committed to protecting your personal data and processing it in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR), the Dutch Implementation Act (Uitvoeringswet AVG), and other applicable legislation.

2. Scope of This Policy

This Privacy Policy applies to all personal data we collect through the website chivrealvortoz.world, including when you browse the site, submit an order form, or contact us directly. It does not apply to third-party websites linked from our pages.

3. Personal Data We Collect

We collect and process the following categories of personal data:

Category	Data Elements	Source
Identity data	Full name	Order form — provided directly by you
Contact data	Email address, phone number	Order form — provided directly by you
Order data	Delivery address, order notes	Order form — provided directly by you
Technical data	IP address, browser type, device type, pages visited, time of visit	Collected automatically via server logs and cookies
Cookie preference data	Your consent choices for analytics and marketing cookies	Collected via our cookie consent mechanism

We do not collect or process special categories of personal data (such as health data, ethnic origin, political opinions, or biometric data).

4. Purposes and Legal Bases for Processing

We process your personal data only for specific, explicit, and legitimate purposes. The table below sets out our processing activities and their legal bases under Article 6 GDPR.

Purpose	Legal Basis (Art. 6 GDPR)
Processing and fulfilling your order	Art. 6(1)(b) — performance of a contract
Contacting you to confirm order details and arrange delivery	Art. 6(1)(b) — performance of a contract
Complying with legal obligations (e.g. tax records)	Art. 6(1)(c) — compliance with a legal obligation
Analysing website usage (analytics cookies — where consented)	Art. 6(1)(a) — consent
Marketing and advertising (marketing cookies — where consented)	Art. 6(1)(a) — consent
Website security and fraud prevention	Art. 6(1)(f) — legitimate interests

Where we rely on consent as the legal basis, you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

5. How We Use Your Data

Your personal data is used exclusively for the purposes described above. Specifically:

• Your name, email, phone number, and delivery address are used to process and deliver your order.
• Your email address may be used to send you an order confirmation.
• Technical data is used to maintain website security and monitor performance.
• Analytics data (where consented) is used to understand user behaviour and improve the website.

We do not use personal data for automated decision-making or profiling that produces legal or similarly significant effects.

6. Data Sharing and Recipients

We do not sell, rent, or trade your personal data to third parties. We may share your data with the following categories of recipients:

• Delivery service providers: to arrange shipment of your order to your address (name and delivery address only).
• Payment service providers: to process payments securely (we do not store payment card data).
• IT and hosting providers: who host the website and provide technical infrastructure, operating under data processing agreements.
• Analytics service providers: where you have consented to analytics cookies.
• Public authorities: where required by law or a court order.

All third-party processors are bound by contractual obligations consistent with GDPR requirements, including Data Processing Agreements (DPAs) where applicable.

7. International Transfers

Where we use service providers located outside the European Economic Area (EEA), we ensure that adequate safeguards are in place for the transfer of personal data, such as Standard Contractual Clauses (SCCs) approved by the European Commission, in accordance with Chapter V of the GDPR.

8. Data Retention

We retain your personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law.

Data Category	Retention Period
Order and contact data	7 years (in accordance with Dutch fiscal retention obligations under Article 52 Algemene wet inzake rijksbelastingen)
Technical/log data	Up to 12 months
Cookie consent records	Until consent is withdrawn or up to 12 months, whichever is earlier
Analytics data (where consented)	As specified by the analytics provider, typically up to 26 months

9. Security Measures

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

• HTTPS encryption for all data transmitted via the website;
• Access controls limiting data access to authorised personnel only;
• Regular review of our data handling and security practices;
• Contractual requirements for data security imposed on third-party processors.

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay, in accordance with Articles 33 and 34 of the GDPR.

10. Your Rights Under GDPR

As a data subject, you have the following rights under the GDPR, which you may exercise at any time by contacting us at the details provided in Section 1:

• Right of access (Art. 15): You have the right to request a copy of the personal data we hold about you.
• Right to rectification (Art. 16): You have the right to request correction of inaccurate or incomplete personal data.
• Right to erasure (Art. 17): You have the right to request deletion of your personal data under certain circumstances ("right to be forgotten").
• Right to restriction of processing (Art. 18): You have the right to request that we restrict processing of your data in certain circumstances.
• Right to data portability (Art. 20): Where processing is based on consent or contract, you have the right to receive your data in a structured, machine-readable format.
• Right to object (Art. 21): You have the right to object to processing based on our legitimate interests.
• Right to withdraw consent (Art. 7(3)): Where processing is based on your consent, you may withdraw it at any time without affecting prior lawful processing.

We will respond to all valid requests within one month. In complex cases, this period may be extended by a further two months, of which we will inform you.

11. Right to Lodge a Complaint

If you believe that we have processed your personal data in violation of applicable data protection law, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):

• Website: autoriteitpersoonsgegevens.nl
• Address: Hoge Nieuwstraat 8, 2514 EL The Hague, Netherlands
• Phone: +31 70 888 8500

12. Cookies

We use cookies and similar tracking technologies on this website. For detailed information about the types of cookies we use, their purposes, and how to manage your preferences, please see our Cookie Policy.

13. Children's Privacy

Our website and products are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 16. If you believe a child has submitted personal data to us, please contact us so we can delete it promptly.

14. Links to Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to review the privacy policies of any third-party site you visit.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data processing practices or legal obligations. The "last updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this policy periodically.

16. Contact Us

For any questions, requests, or concerns about this Privacy Policy or our data processing practices, please contact us: