Privacy Policy of Cryptofox GmbH

Contact
Cryptofox GmbH
Represented by the Managing Directors: Thomas Zimmerer and Alexander Schiller
Rathausstrasse 7, 6340 Baar, Switzerland
Email: info@crypto-akademie.com

Unless otherwise stated below, providing your personal data is neither legally nor contractually required, nor necessary for concluding a contract. You are not obliged to provide data; failure to provide data has no consequences. This only applies insofar as no different information is provided in the processing activities described below. “Personal data” means any information relating to an identified or identifiable natural person.

Server Log Files

You can visit our websites without telling us who you are. Each time our website is accessed, usage data is transmitted by your internet browser to us or to our web host/IT service provider and stored in log files (“server log files”). These data include, for example, the name of the page accessed, date and time of the request, IP address, the amount of data transferred, and the requesting provider.
Processing is based on Art. 6(1)(f) GDPR and our predominant legitimate interest in ensuring the trouble-free operation of our website and improving our offering. Your data may be transferred, among other places, to Canada. For transfers to Canada, an adequacy decision by the European Commission exists.

Controller

Please contact us if you have questions. The controller for data processing is: Cryptofox GmbH, Rathausstrasse 7, 6340 Baar, Switzerland.

Customer-Initiated Contact by Email

If you contact us proactively by email, we collect your personal data (name, email address, message content) only to the extent you provide. The purpose of processing is to handle and respond to your inquiry.
If your inquiry relates to taking steps prior to entering into a contract (e.g., advice when interested in purchasing, preparing an offer) or to an existing contract with us, processing is based on Art. 6(1)(b) GDPR. Otherwise, processing is based on Art. 6(1)(f) GDPR in our predominant legitimate interest in handling and responding to your inquiry. In that case, you have the right to object at any time, on grounds relating to your particular situation.
We use your email address only to process your request. Your data will then be deleted in compliance with statutory retention periods unless you have consented to further processing and use.

Contact Form

When using our contact form, we collect your personal data (name, email address, message content) only to the extent you provide. The purpose is to contact you.
Legal bases and rights to object are the same as in “Customer-Initiated Contact by Email.” Your data will be deleted after statutory retention periods unless you have consented to further processing.

WhatsApp Business

If you contact us via WhatsApp, we use the Business version of WhatsApp provided by WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “WhatsApp”). If you are located outside the EEA, the service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA).
Processing serves to handle and respond to your request. We process your phone number stored with WhatsApp, your name if provided, and any further data you supply. We use a mobile device whose address book contains only data of users who have contacted us via WhatsApp. We do not transmit personal data to WhatsApp unless you have already consented to this vis-à-vis WhatsApp.
Your data may be transmitted by WhatsApp to servers of Meta Platforms Inc. in the USA. For the USA, the Trans-Atlantic Data Privacy Framework (TADPF) adequacy decision exists; Meta Platforms Inc. is certified under the TADPF. If your inquiry relates to pre-contractual steps or an existing contract, processing is based on Art. 6(1)(b) GDPR. Otherwise, processing is based on Art. 6(1)(f) GDPR (fast, simple contact). You may object at any time on grounds relating to your particular situation.
We use your personal data only to process your request. Your data are then deleted in compliance with statutory retention periods unless you have consented to further processing.

Collection, Processing and Disclosure of Personal Data for Orders

When you place an order, we process your personal data only as needed to fulfill and process your order and handle inquiries (Art. 6(1)(b) GDPR). Providing the data is required to conclude the contract.
Your data may be shared, for example, with shipping companies and drop-shipping providers you select, payment service providers, order-processing providers, and IT service providers, limited to the minimum necessary and in compliance with the law. Your data may be transferred to Canada. For transfers to Canada, an adequacy decision exists.

Reviews & Advertising

Website Badge for Google Customer Reviews

We integrate the website badge for Google Customer Reviews from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). It displays the number and outcome of reviews we have received and advertises our participation.
To display the badge and serve personalized ads, Google uses cookies and may process your IP address. Data may be transferred to the USA. For the USA, a TADPF adequacy decision exists; Google is certified under TADPF.
Cookies/technologies are used with your consent under § 25(1) TTDSG + Art. 6(1)(a) GDPR. You can withdraw consent at any time.

Google Customer Reviews Survey Tool

After your order, we may invite you (via Google’s opt-in module) to rate your purchase. This may process and transmit to Google: order details (e.g., order ID, destination country, estimated delivery date, GTINs) and your email address.
Data may be transferred to the USA; Google is TADPF-certified. Processing is based on Art. 6(1)(a) GDPR with your consent, which you can withdraw anytime.

Use of Your Personal Data for Postal Advertising

We use your name and postal address (obtained during a sale) to send you postal advertising unless you object (Art. 6(1)(f) GDPR – direct marketing). You can object anytime (see imprint/contact).

Use of Your Email Address for Newsletters

We use your email address for our own newsletter only with your express consent (Art. 6(1)(a) GDPR). You can unsubscribe anytime via the link in the email or by contacting us.

Use of Your Email Address for Direct Advertising

We may email you about our own goods/services similar to those you purchased, unless you object (Art. 6(1)(f) GDPR – direct marketing). You can object anytime via the link in such emails or via our contact details.

Mailchimp

Newsletter delivery via Mailchimp (The Rocket Science Group LLC, USA) as processor. We share signup data (email, optionally name). Campaigns use tracking pixels/links (collecting IP, browser/device, timestamps) to build pseudonymous profiles for statistics only.
Data generally go to the USA; Mailchimp is TADPF-certified. Processing: Art. 6(1)(f) GDPR (targeted, effective newsletter). You may object anytime on grounds relating to your situation.

Klaviyo

Newsletter delivery via Klaviyo (Klaviyo Inc., USA) as processor, with tracking as above.
Data generally go to the USA; Klaviyo is TADPF-certified. Processing: Art. 6(1)(f) GDPR. You may object anytime on grounds relating to your situation.

Payment Service Providers & Credit Checks

PayPal

We offer payments via PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg). Selecting PayPal transmits the required data to PayPal to fulfill the contract (Art. 6(1)(b) GDPR).

PayPal Express

We also use PayPal Express. To embed the service, PayPal may collect data (IP, device, OS, browser, location) and use cookies. Processing: Art. 6(1)(f) GDPR (customer-oriented payment options). If you choose PayPal Express, transmission for payment processing occurs under Art. 6(1)(b) GDPR.

Klarna Payment Options

We offer payments via Klarna (Klarna Bank AB (publ), Sweden). Selecting a Klarna option transmits required data to Klarna (Art. 6(1)(b) GDPR).
“Pay Later”, “Pay Now”, “Financing”: Klarna may obtain a credit report from credit agencies using statistical methods. Klarna may transmit personal data (e.g., name, address, gender, email, IP, order data) for identity/credit checks and use probability scores (which may include address data) to decide on entering/performing/ending a contract. Your interests are respected per law.
Purpose: credit assessment for contract initiation; legal basis: Art. 6(1)(f) GDPR (protection against payment default where Klarna is in advance). You may object at any time by notifying Klarna. Providing the data is required for the chosen payment method.

Cookies

Cookies are small text files stored in/by your browser on your device. They allow unique browser recognition when a website is revisited. You control cookies: set your browser to notify, accept individually, block storage/transmission, and delete them anytime (some site functions may then be unavailable).

Technically Necessary Cookies

Unless otherwise stated here, we only use technically necessary cookies to keep our offering user-friendly, effective, and secure, and to recognize your browser across pages.
Legal basis for cookies/tech: § 25(2) TTDSG; personal-data processing: Art. 6(1)(f) GDPR (optimal functionality and user-friendly design). You may object anytime on grounds relating to your situation.

Data Subject Rights & Storage Period

Retention Period

After full contract performance, data are stored for the warranty period, then retained per statutory (especially tax/commercial) periods, and deleted after expiry unless you consent to further processing.

Your Rights

Where legal requirements are met, you have rights under Art. 15–20 GDPR: access, rectification, erasure, restriction, portability. You also have the right to object under Art. 21(1) GDPR to processing based on Art. 6(1)(f) GDPR and to processing for direct marketing.

Right to Object

If processing described here is based on our legitimate interests (Art. 6(1)(f) GDPR), you may object at any time, on grounds relating to your situation, with future effect. We will stop unless we can demonstrate compelling legitimate grounds or the processing serves legal claims.
If personal data are processed for direct marketing, you may object at any time; we will then stop processing for that purpose.