Privacy Policy

1. Introduction

Stockgenuinemal ("we," "us," or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website stockgenuinemal.world and purchase our products.

We process personal data in compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679, the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG), and the German Telecommunications-Telemedia Data Protection Act (Telekommunikation-Telemedien-Datenschutz-Gesetz – TTDSG) where applicable.

2. Data Controller

The data controller responsible for your personal data is:

3. Personal Data We Collect

We collect personal data that you voluntarily provide to us when you:

• Place an order on our website
• Subscribe to our newsletter
• Contact us with inquiries
• Browse our website

3.1 Information You Provide

• Identity Data: Name, title
• Contact Data: Email address, phone number, delivery address
• Transaction Data: Order details, payment information (processed by our payment provider)
• Communication Data: Messages and correspondence with us

3.2 Automatically Collected Information

• Technical Data: IP address, browser type and version, operating system, device information
• Usage Data: Pages visited, time spent on pages, navigation paths
• Cookie Data: Information collected through cookies (see our Cookie Policy)

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR Article 6:

• Contract Performance (Art. 6(1)(b)): Processing necessary to fulfill your order and provide our services
• Consent (Art. 6(1)(a)): Where you have given explicit consent for specific processing activities (e.g., marketing communications)
• Legitimate Interests (Art. 6(1)(f)): Processing necessary for our legitimate business interests, such as improving our services and preventing fraud
• Legal Obligation (Art. 6(1)(c)): Processing required to comply with legal requirements (e.g., tax records)

5. How We Use Your Data

We use your personal data for the following purposes:

• Processing and fulfilling your orders
• Communicating with you about your orders and inquiries
• Sending marketing communications (with your consent)
• Improving our website and services
• Analyzing website usage and trends
• Preventing fraud and ensuring security
• Complying with legal obligations

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Order Data: 10 years (as required by tax regulations)
• Account Data: Until you request deletion or 3 years after last activity
• Marketing Data: Until you withdraw consent or 2 years after last interaction
• Technical/Usage Data: 26 months

7. Data Sharing

We may share your personal data with:

• Service Providers: Companies that help us deliver our services (shipping, payment processing, email services)
• Legal Authorities: When required by law or to protect our rights

We require all third parties to respect the security of your data and treat it in accordance with the law. We do not sell your personal data to third parties.

8. International Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission

9. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access (Art. 15): Request a copy of your personal data
• Right to Rectification (Art. 16): Request correction of inaccurate data
• Right to Erasure (Art. 17): Request deletion of your data ("right to be forgotten")
• Right to Restriction (Art. 18): Request limitation of processing
• Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format
• Right to Object (Art. 21): Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us using the contact details in section 14. We will respond without undue delay and in any event within one month of receiving your request. That period may be extended by two further months where necessary, taking into account the complexity and number of requests; we will inform you of any such extension and the reasons for the delay (Art. 12(3) GDPR).

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• SSL/TLS encryption for data transmission
• Secure servers and access controls
• Regular security assessments
• Staff training on data protection
• Data minimization practices

11. Children's Privacy

Our website and products are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If we learn that we have collected data from a child, we will delete it promptly.

12. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). You may lodge a complaint in the EU member state of your residence, place of work, or place of the alleged infringement. In Germany you may contact:

• Federal level: Die Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI), Graurheindorfer Str. 153, 53117 Bonn, Germany (www.bfdi.bund.de)
• State level: The competent Landesbeauftragte für den Datenschutz und die Informationsfreiheit (LfDI) of your respective German federal state (Bundesland). You can find the list of state authorities on the BfDI website.

This right to lodge a complaint is without prejudice to any other administrative or judicial remedy.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: