Data controller
The data controller for the processing of personal data described in this Privacy Policy is:
Khakryonghelis
Kungsgatan 66, 111 22 Stockholm, Sweden
Phone: +4686565625
Email: info@khakryonghelis.world
Personal data we collect
We collect and process the following categories of personal data when you use this website:
- Identification and contact details such as name and email address when you submit the order form or contact us.
- Message content that you enter in the message field of the order form or in email correspondence.
- Technical information such as IP address, device information, browser type, and usage data collected through strictly necessary cookies and, if you consent, analytics and marketing cookies.
Purposes and legal bases
We process personal data for the purposes and on the legal bases described below, in accordance with the General Data Protection Regulation (GDPR) and applicable Swedish data protection rules:
- To respond to your requests submitted via the order form or email. The legal basis is your consent (Article 6(1)(a) GDPR) and, where applicable, our legitimate interest in providing customer service and information about our products (Article 6(1)(f) GDPR).
- To operate and secure the website, including preventing misuse and ensuring availability. The legal basis is our legitimate interest in operating a secure and functional website (Article 6(1)(f) GDPR).
- To analyze the use of the website and improve its content and structure, if you consent to analytics cookies. The legal basis is your consent (Article 6(1)(a) GDPR).
- To present information about Nutri-Glow on other channels, if you consent to marketing cookies. The legal basis is your consent (Article 6(1)(a) GDPR).
Data retention
We store personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law.
- Contact and order form data is generally retained for up to 24 months after the last communication, unless a longer period is required by law or for the establishment, exercise, or defense of legal claims.
- Technical and cookie data is retained in accordance with the lifetimes set for each cookie category as described in our Cookie Policy.
Recipients and transfers
We share personal data only with trusted service providers and only to the extent necessary for them to provide services on our behalf, such as hosting and email services. These providers act as processors and are bound by data processing agreements that require them to protect your personal data.
If personal data is transferred outside the European Economic Area, we ensure that appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission or equivalent mechanisms under applicable law, and we assess the level of protection in the recipient country.
Your rights
Subject to the conditions and limitations set out in GDPR and applicable local law, you have the following rights in relation to your personal data:
- Right of access: to obtain confirmation as to whether we process your personal data and, if so, to receive a copy.
- Right to rectification: to request that inaccurate or incomplete personal data be corrected.
- Right to erasure: to request deletion of your personal data when there is no longer a legal basis for processing.
- Right to restriction: to request that we restrict the processing of your personal data under certain circumstances.
- Right to data portability: to receive personal data you have provided to us in a structured, commonly used, and machine-readable format where processing is based on consent or contract and carried out by automated means.
- Right to object: to object to processing based on our legitimate interests, including profiling related to such interests.
- Right to withdraw consent: where processing is based on your consent, you can withdraw your consent at any time with effect for the future.
To exercise any of these rights, contact us at info@khakryonghelis.world. We may need to verify your identity before handling your request.
Cookies and similar technologies
We use cookies and similar technologies to operate the website, remember your preferences, and, based on your consent, to analyze usage and present marketing content. For detailed information about the types of cookies we use, their purposes, and storage periods, please see our Cookie Policy.
Security measures
We implement appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures are reviewed and updated regularly to reflect current security practices and guidance from relevant authorities.
Complaints and supervisory authority
If you believe that our processing of your personal data does not comply with data protection laws, you can contact us using the details above. You also have the right to lodge a complaint with a supervisory authority, in particular in the EU/EEA member state of your habitual residence, place of work, or alleged infringement. In Sweden, the supervisory authority is Integritetsskyddsmyndigheten (IMY).
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our processing activities or legal requirements. The updated version will be published on this page with an updated date.