Privacy Policy

1. Information on the collection of personal data

1.1 Personal data

In the following, we inform you about the processing of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour. In this way, we would like to inform you about our processing procedures and at the same time comply with our legal obligations, in particular from the EU General Data Protection Regulation (GDPR).

1.2 Data controller

The data controller pursuant to Art. 4 (7) GDPR is Chengdu Xiya Technology Co., Ltd., Room 308, 3rd Floor, Kaiseng Commercial Building, 45-51 Chatham Road South, Tsim Sha Tsui, Kowloon, Hong Kong, Email: service@haniix.com.

2. Processing of personal data when visiting our website

When using the website for information purposes, i.e. simply viewing it without registering and without you providing us with any other information, we process the personal data that your browser transmits to our server. The data described below is technically necessary for us to display our website to you and to ensure stability and security and must therefore be processed by us. The legal basis is Art. 6 (1) f GDPR:

(A) IP address

(B) Date and time of the request

(C) Content of the request (page visited)

(D) Amount of data transmitted in each case

(E) Browser

3. Further functions and offers of our website

3.1 Overview over various offers

In addition to the purely informational use of our website, we offer various services that you can use if you are interested (e.g. registering an account, purchasing goods) and we use other functions to facilitate sales (e.g. payment method selection) and to analyse or market our offers, which are presented in more detail in Section 4 and 5 below. For this purpose, you usually have to provide further personal data and/or we process such further data that we use to perform the respective services. The aforementioned data processing principles apply to all data processing purposes described here.

3.2 Use of external service providers

In some cases, we use external service providers to process your data (e.g. payment service providers, shipping companies, for more on these see Sections 5 and 6 below). These service providers are carefully selected by us, are bound by our instructions and are regularly monitored.

3.3 Further third party involvement

Furthermore, we may pass on your personal data to third parties not already mentioned in this privacy policy if we offer participation in promotions, competitions, conclusion of contracts or similar services together with partners. Depending on the service, your data may also be collected by the partners on their own responsibility. You will receive more detailed information when you provide your data or in the description of the respective offers.

3.4 Third parties outside of the EEA

If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offer.

4. Processing of personal data when you contact us or register an account with us

When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, name and telephone number, if applicable) will be stored by us in order to answer your questions. When you register a customer account with us, we only collect the information that you voluntarily share with us. This data may include, for example :

(A) Your first and last names, as the case may be also your title or user name

(B) Login data: your email address and a password you choose yourself

(C) Your contact details, e.g. your name, postal addresses, telephone numbers, fax numbers, email addresses

(D) Any further information on your person and your interests that you might share with us

5. Processing of personal data when you make a purchase with us

5.1 Shopping information

If you order something from our online shop, we collect your shopping data. Depending on the type of purchase and processing status, shopping data may include the following information:

(A) Purchased item details (name, price, model, etc.)

(B) Order number

(C) Delivery and billing addresses

(D) Delivery and payment status, e.g. “completed” or “dispatched”

(E) Messages and communication relating to purchases (e.g. complaints and messages to customer service)

(F) Return status, e.g. “ongoing”

(G) Information regarding service providers involved (e.g. shipment numbers of parcel services)

5.2 Payment details

We offer you various payment methods - in particular [credit card], [PayPal] . We collect the payment details shared by you in order to execute the payment. We receive further payment details from external payment service providers and credit agencies which we work with in executing payments and carrying out credit checks. We only forward information to our payment service providers which is necessary for processing payment.

Payment details include:

(A) Billing addresses

(B) Preferred payment method

(C) IBAN and BIC or account number and sort code

(D) Credit card details

The payment details also include other information directly connected to payment processing and credit checking. This applies, for example, to information which external payment service providers use for identification such as your PayPal ID if you are paying with PayPal.

5.3 Transfer of data on outstanding debts

In the event that outstanding invoices are not settled despite repeated reminders, we reserve the right to engage with appropriate measures to collect the debt. This may involve transferring the necessary data to a third-party service provider in the future, should such a service become necessary.

Legal basis: The legal basis for transferring data within the framework of fiduciary collection services is Article 6 (1) b GDPR; data is transferred within the framework of selling debt on the basis of Article 6 (1) f GDPR.

6. Cookie

6.1 General information about cookies

Cookies are small web files that are stored on your web browser when you visit websites. They are commonly used to remember your preferences, assist in navigation, and gather information about your device and interaction with the site. Along with cookies, we also use similar technologies, including data stored on your browser or device, device identifiers, and other software for similar purposes. In this policy, these are collectively referred to as "cookies."

6.2 Use of Cookies.

Generally, we use first-party and third-party cookies for the following purposes: to make our Services function properly; to provide a secure browsing experience during your use of our Services; to collect passive information about your use of our Services; to measure how you interact with our marketing campaigns; to help us improve our Services; and to remember your preferences for your convenience.

6.3 Analytics.

We may use third-party service providers to monitor and analyze the use of our Services. Presently, we use Google Analytics. Google Analytics is a web analytics service that tracks and reports Site traffic. For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy?hl=en . Google Analytics Opt-out Browser Add-on provides visitors with the ability to prevent their data from being collected and used by Google Analytics, available at: https://tools.google.com/dlpage/gaoptout .

6.4 Behavioral Remarketing

We also use remarketing services to advertise on third-party websites to you after you visited our Services. For this purpose, visitors are grouped by certain actions on our Services, e.g., by duration of a visit. This enables us to understand your preferences and to show you personalized advertising even if you are currently surfing on another website that also participates in the Google advertising network.

We use the following tools and services for these purposes:

Google Ads remarketing service is provided by Google. You can opt-out of this by visiting the Google Ads Settings page: https://www.google.com/settings/ads .

If Google Ads is structured to collect personal data, the data controller will be Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.

Bing Ads is a service operated by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Please read Microsoft’s privacy statement for more information on how Microsoft processes your information https://privacy.microsoft.com/en-US/ . When you access our Site via advertisements on Bing Ads, a cookie is set on your computer. In addition, a Universal Event Tracking tag is integrated on our Site. This is a code that, in combination with the cookie, stores data about the use of the Site, e.g. length of time spent on the Site, areas accessed, and ads used to reach the Site. In addition, Microsoft may track your usage patterns across multiple of your electronic devices through so-called cross-device tracking. The information collected is transferred to a Microsoft server in the United States. If Bing Ads is structured to collect personal data, the cookie banner on our Services will provide you the opportunity to consent to Bing Ads.

Facebook Ads. Using Facebook Business Tools, we may display interest-based ads to you when using Facebook. To modify your preferences or turn off personalization for ads served by Facebook, you can visit Facebook's Ad Preferences in addition to the Your Choices section below. We do not share any of your personal information with Facebook. We may also show ads to audiences that share similar characteristics as you. To do so, a list of email addresses is irreversibly encrypted through hashing and uploaded or transmitted from our site, and Facebook matches the hashed data against its own users, generating a lookalike audience and deleting the uploaded list. We do not have access to the identity of anybody in the “lookalike” audience, unless they choose to click on one of our advertisements.

6.5 Other Tracking Technologies.

We may also use Tracking Technologies to collect "clickstream" data, such as the domain name of the service providing you with Internet access, your device type, IP address used to connect your computer to the Internet, your browser type and version, operating system and platform, the average time spent on our Site, webpages viewed, content searched for, access times and other relevant statistics, and assign unique identifiers to the device or other credentials you use to access the Site for the same purposes.

Pages of our Site may also use Java scripts, which are code snippets embedded in various parts of websites and applications that facilitate a variety of operations including accelerating the refresh speed of certain functionality or monitoring usage of various online components; entity tags, which are HTTP code mechanisms that allow portions of websites to be stored or “cached” within your browser to accelerate website performance; and HTML5 local storage, which allows data from websites to be stored or “cached” within your browser to store and retrieve data in HTML5 pages when the website is revisited.

6.6 Do Not Track.

Some Internet browsers, such as Internet Explorer, Firefox, and Safari, include the ability to transmit “Do Not Track” or “DNT” signals. Since uniform standards for "DNT" signals have not been adopted, our Site does not currently process or respond to “DNT” signals.

6.7 Location Information.

You may be able to adjust the settings of your device so that information about your physical location is not sent to us or third-parties by (a) disabling location services within the device settings; or (b) denying certain websites or mobile applications permission to access location information by changing the relevant preferences and permissions in your mobile device or browser settings

7. Transfer of data to third parties

7.1 Compliance with Legal Obligations

In accordance with the laws of the European Economic Area (EEA) or the country where our users reside, we may need to fulfill certain legal obligations. For residents of the EEA, the processing of personal data will be in compliance with the General Data Protection Regulation (EU) ("GDPR"), particularly under Article 6(1) when consent is required.

7.2 Collaboration with Service Providers

We partner with various technical service providers, payment service providers, and shipping companies to deliver our services effectively. These include services for website operation, payment processing, and order delivery. We share necessary personal data with these partners to facilitate transactions, process payments, and ensure timely delivery of orders. Our service providers are bound to uphold a level of data protection comparable to our standards, especially when processing data outside the European Union.

7.3 Legal Obligations and Compliance

In certain cases, we may be required to disclose personal data to comply with legal obligations, respond to governmental or legal requests, or for prosecution purposes. This may include sharing data with authorities or other third parties in accordance with legal requirements.

8. Retention and erasure of data

We will store your personal data as long as is necessary for the purposes named in this Privacy Notice, especially for the fulfilment of our contractual and legal obligations. We may also store your personal data for other purposes if or as long as the law allows us store it for particular purposes, including for defence against legal claims.

If you close your customer account, we will delete all the data we have stored regarding you. If it is not possible or necessary to completely delete your data for legal reasons, the relevant data will be blocked for further processing. If data is blocked, technical and organisational measures are used to ensure that only a few employees can access the relevant data, based on need to know and only for select purposes (e.g. in the event of a tax audit).Blocking will occur, for example, in the following cases:

(A) Your order and payment details and perhaps other details are generally subject to various legal retention obligations, such as those in the Handelsgesetzbuch (HGB - Commercial Code) and the Abgabenordnung (AO - Tax Code). The law obliges us to retain this data for tax audits and financial audits for up to ten years. Only then can we finally delete the relevant data.

(B) Even if your data is not subject to any legal retention obligation, we may refrain in the cases allowed by the law from immediate deletion and instead carry out initial blocking. This applies especially in cases where we may need the relevant data for further contractual processing or prosecution or legal defence (e.g. in the event of complaints). The decisive criterion for the duration of the blocking is then the legal limitation periods. After the relevant limitation periods expire, the relevant data will finally be deleted.

Deletion may be waived in the cases allowed by law if the data is anonymous or pseudonymous and deletion would rule out or seriously hinder processing for scientific research or statistical purposes.

9. How is my personal data protected?

We use technical and organisational measures to secure our systems. With regard to your order and your customer login, we transmit your personal data securely using SSL encryption (Secure Socket Layer).

10. Your rights

You have the right to access, correct, or delete your personal data, and to object to or restrict its processing. We are committed to ensuring the accuracy and privacy of your information. For any data-related requests or concerns, please contact us directly.

11. Changes to this Privacy Policy

Further improvements to our website or changes in legal or regulatory requirements may require changes to this privacy notice. Thus, we encourage you to re-read this Privacy Notice from time to time.

12. Data Protection Officer

You can reach our data protection officer via email at service@haniix.com.