LEGAL NOTICE AND DATA PROTECTION

Privacy Policy pursuant to the General Data Protection Regulation (GDPR)

The protection of personal data is of the highest priority for us. We process personal data in Germany and the European Union in accordance with the General Data Protection Regulation (GDPR).

1. Controller

The controller responsible for the processing of personal data is:
Chumpol Trading Group Co. LTD.
355/46 Boonwat Road
52100 Lampang
Thailand
Phone: +66 (0) 90 888 48 31
E-Mail: info@chumpol-group.net

2. General information on data processing

We collect and use personal data of our users only to the extent necessary to provide a functional website as well as our content and services. The collection and use of personal data generally takes place only with the user's consent. An exception applies in cases where obtaining prior consent is not possible for factual reasons and the processing of the data is permitted by legal provisions.

Special categories of personal data: We do not process special categories of personal data within the meaning of Art. 9(1) GDPR (e.g. health data, religious affiliation).

3. Legal bases for processing

• Art. 6(1)(a) GDPR – Consent
• Art. 6(1)(b) GDPR – Performance of a contract or pre-contractual measures
• Art. 6(1)(c) GDPR – Legal obligation
• Art. 6(1)(f) GDPR – Legitimate interests (e.g. IT system security, direct marketing for own similar products/services in the context of existing customer advertising)

4. Types of personal data processed

• Master data (name, address)
• Contact data (telephone number, email address)
• Contract and business data
• Payment data
• Communication data
• Technical data (IP address, browser, operating system)

5. Purposes of data processing

• Processing of orders and contracts
• Handling of enquiries
• Provision of our services
• Compliance with legal obligations (e.g. commercial and tax retention obligations)
• Ensuring IT security and proper operation of our website
• Direct marketing for our own similar products or services (existing customer advertising), provided no objection has been raised. You may object at any time (e.g. by email to info@chumpol-group.net with subject line "Objection to advertising").

6. Disclosure of data to third parties & recipients

Personal data will only be disclosed if: you have expressly consented (Art. 6(1)(a) GDPR), it is necessary for the performance of the contract (Art. 6(1)(b) GDPR), there is a legal obligation (Art. 6(1)(c) GDPR), or there is a legitimate interest and no overriding interests of the data subject (Art. 6(1)(f) GDPR).

Possible recipient categories include: Payment service providers, logistics and shipping service providers, IT service providers and hosting providers, tax advisors, auditors and authorities.

7. Cookies, tracking & server log files

Cookies: Our website uses cookies. Essential cookies (technically necessary) are based on Art. 6(1)(b) or (f) GDPR. For non-essential cookies we obtain your active consent (Art. 6(1)(a) GDPR).

Server log files: Our hosting provider automatically collects information in server log files (IP address, date/time, browser type, referring website). This data is used for technical security and deleted after max. 30 days (Art. 6(1)(f) GDPR).

8. Storage period & erasure

Personal data is stored only as long as necessary for the processing purposes or as long as statutory retention periods exist. For contracts and accounting-relevant data, the statutory periods apply (6-10 years).

9. Rights of data subjects

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR)
• Withdrawal of consent (Art. 7(3) GDPR)

To exercise your rights, contact: info@chumpol-group.net

10. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority.

11. Data security

We implement technical and organisational security measures (TOM) including SSL/TLS encryption.

12. Automated decision-making / profiling

We do not use fully automated decision-making within the meaning of Art. 22 GDPR.

13. Contact

When contacting us by email or telephone, your data will be processed for the purpose of handling your request based on Art. 6(1)(b) or (f) GDPR. Data will be deleted after final processing (usually within 6 months).

14. No use of certain services

• no newsletter dispatch,
• no tracking or analysis tools (e.g. Google Analytics),
• no social media plugins,
• no contact form.

15. Data Protection Officer

No data protection officer has been appointed, as the legal requirements pursuant to Art. 37 GDPR are not met.

16. Processing of minors' data

Our website is directed exclusively at persons of legal age. We do not knowingly process personal data of minors.

17. Changes to this privacy policy

We reserve the right to adapt this privacy policy. The current version is always available on our website.

After our start in 2017 as a retail company, our business initially developed successfully. However, the effects of the COVID-19 pandemic led to a temporary slowdown in sales development in the 2021 and 2022 financial years. Since the end of the pandemic-related restrictions, we have continuously expanded our partner network and created the basis for sustainable growth. Today, we are an established company with a strong network and a stable market position. Our company employs 82 people and operates in the B2B environment.

As a purely B2B company, we work exclusively with business partners from our established corporate network. We do not operate an online shop and do not supply private customers. Public online reviews therefore play no role in our business model. This is not an indication of lower trustworthiness. In our industry, cross-company reviews between businesses are not customary.