VerdeChrome Privacy Policy

1. General

2. Data Controller

3. Information We Collect

• Personal identification information: Name, job title, and professional contact details (email address, telephone number).
• Business-related information: Company name, company address, inquiry content, product requirements, quotation records, order details, and contract-related information.
• Technical information: IP address, browser type and version, device information (model, operating system), access logs, and cookie data (for website optimization, traffic analysis, and security protection).

4. Purpose of Data Processing

• Responding to your inquiries, requests for product information, and quotations related to chrome oxide green pigments.
• Providing products, samples, technical support, and after-sales services as requested.
• Fulfilling contractual obligations, including order processing, delivery arrangements, and payment verification.
• Ensuring the security and stability of our website, preventing fraud, unauthorized access, and other malicious activities.
• Optimizing our website and services based on user access data and feedback.
• Complying with applicable legal obligations, including tax, customs, trade compliance, and other regulatory requirements.

5. Legal Bases for Processing (GDPR Compliance)

• Article 6(1)(b) GDPR: Performance of a contract to which you are a party, or taking pre-contractual measures at your request (e.g., processing your inquiry to provide a quotation, fulfilling an order).
• Article 6(1)(f) GDPR: Pursuit of our legitimate interests, provided that such interests do not override your fundamental rights and freedoms. Our legitimate interests include improving our products and services, ensuring website security, and conducting legitimate business operations.
• Article 6(1)(c) GDPR: Compliance with a legal obligation to which we are subject (e.g., retaining data for tax and accounting purposes).

6. Data Sharing and Third-Party Recipients

• Logistics, freight, and customs agents: To fulfill order delivery and customs clearance obligations.
• IT service providers: To maintain and optimize our website, servers, and data management systems (e.g., website hosting, data backup services).
• Legal and regulatory authorities: When required by law, court order, or regulatory directive (e.g., responding to a request from a competent data protection authority).

7. International Data Transfers

• Using the Standard Contractual Clauses (SCCs) approved by the European Commission (Commission Implementing Decision (EU) 2021/914) for transfers to countries that have not been deemed to provide an adequate level of data protection by the European Commission.
• Ensuring that all third-party recipients outside the EEA implement equivalent data protection measures to those required by GDPR.

8. Data Retention Period

• For business-related data (e.g., inquiries, orders, contracts): Retained for the duration of the business relationship plus 7 years (to comply with tax and accounting obligations).
• For technical data (e.g., IP address, access logs): Retained for 12 months from the date of collection, unless longer retention is required for security or legal purposes.

9. Your Rights Under GDPR

• Right of Access: Request a copy of the personal data we hold about you, including details of how it is processed and shared.
• Right of Correction: Request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure (“Right to be Forgotten”): Request the erasure of your personal data if it is no longer necessary for the purposes for which it was collected, or if you withdraw your consent (where applicable).
• Right to Restriction of Processing: Request that we restrict the processing of your personal data (e.g., if you dispute the accuracy of the data).
• Right to Object: Object to the processing of your personal data based on our legitimate interests, unless we can demonstrate compelling legitimate grounds for the processing that override your rights and freedoms.
• Right to Withdraw Consent: If processing is based on your consent, you may withdraw your consent at any time (this will not affect the lawfulness of processing before withdrawal).
• Right to Data Portability: Request that we provide your personal data in a structured, commonly used, and machine-readable format, or transmit it directly to another data controller (where technically feasible).
• Right to Lodge a Complaint: Lodge a complaint with the competent data protection authority in your country of residence if you believe we have violated GDPR.

10. Cookies and Similar Technologies

11. Data Security

• Encryption of personal data (both in transit and at rest).
• Access controls to ensure only authorized personnel can access personal data.
• Regular security audits and updates to our systems and software.
• Training for employees on data protection and GDPR compliance.

12. Changes to This Policy

13. Contact Us