Introduction
We sincerely appreciate your interest in our brand krogersave. Data protection is a core priority for our management team. You may browse our website without submitting any personal information. However, accessing certain exclusive services on our platform may require the collection and processing of your personal data. Where data processing is required and no statutory legal basis exists, we will obtain your explicit consent beforehand.
All processing activities involving your personal information – including your full name, physical address, email address and phone number – strictly comply with the General Data Protection Regulation (GDPR) as well as all local data protection laws applicable to krogersave. This privacy statement outlines the type, scope and purpose of the personal data we collect, use and store. It also informs you of all legal rights you hold as a data subject.
As the data controller, krogersave has deployed comprehensive technical and organizational safeguards to secure your personal data transmitted via our website. Nevertheless, online data transmission inherently carries certain security vulnerabilities, and absolute data protection cannot be fully guaranteed. You may choose to share your personal information with us via alternative offline channels such as phone calls if you prefer.
Definitions
This privacy policy adopts the standard terminology defined under the GDPR enacted by European legislative bodies. We have refined the wording to ensure clarity for general users, customers and business partners. Key terms used in this document are defined below:
a) Personal data
Any information relating to an identified or identifiable natural person (“data subject”). An identifiable individual can be recognized directly or indirectly via identifiers such as full name, ID number, location data and online markers, or through factors associated with the person’s physical, physiological, genetic, psychological, financial, cultural or social identity.
b) Data subject
A natural person whose personal data is collected and processed by the designated data controller.
c) Processing
Any operation or set of operations performed on personal data or datasets, either manually or automatically. This includes collection, recording, sorting, structuring, storage, modification, retrieval, consultation, usage, transmission disclosure, distribution, alignment, merging, restriction, erasure and destruction of data.
d) Restriction of processing
Marking stored personal data to limit or suspend future processing activities of such information.
e) Profiling
Automated processing of personal data to evaluate personal attributes of a natural person, specifically for analyzing or predicting work performance, financial status, physical health, personal preferences, hobbies, reliability, behavioral patterns, geographic location and movement records.
f) Pseudonymisation
Processing personal data in a way that the data can no longer be linked back to a specific data subject without supplementary information. Such supplementary records are stored separately with strict technical and administrative controls to prevent re-identification of users.
g) Controller (Data Controller)
A natural or legal entity, public institution or organization that independently or jointly determines the purposes and methods of personal data processing. Where processing rules are stipulated by EU or national legislation, relevant legal provisions will define the controller and its appointment criteria.
h) Processor
A natural or legal entity, public institution or organization that processes personal data on behalf of the data controller.
i) Recipient
Any natural or legal entity, public body or third party that receives disclosed personal data. Public authorities obtaining data through formal legal investigations in accordance with EU or domestic law are not classified as recipients, and their data processing activities must abide by official data compliance rules.
j) Third party
Any natural or legal entity, public body or organization excluding the data subject, controller, processor and authorized staff processing data under the direct supervision of the controller or processor.
k) Consent
A freely given, specific, informed and unambiguous statement of intent from the data subject, via formal declaration or clear affirmative action, to agree to the processing of their personal data.
Responsible Data Controller
For GDPR compliance, EU local data laws and all relevant data protection regulations, the controller information is listed below:
Email: service@krogersave.com
Official Website: https://krogersave.com
Cookies
The krogersave website uses cookies. Cookies are small text files saved to your local device through your web browser.
Most websites and servers deploy cookies, each assigned a unique cookie ID. This character string identifier allows websites to match browsing behaviors to your specific browser instance, distinguishing your device from other visitors.
Cookies enable us to deliver optimized, user-friendly website functions that would otherwise be unavailable. We leverage cookie data to optimize page content and promotional offers tailored to visitor habits, and recognize returning users to improve browsing experience. Typical cookie functions include retaining login credentials so you do not need to re-enter account information on each visit, and saving selected items within your online shopping cart.
You may disable cookie storage at any time via your browser settings to block cookies permanently. Existing cookies can also be cleared manually through standard browser tools. Please note that disabling cookies may cause partial website features to function abnormally.
Collection of General Visitor Data
Our server automatically collects generic visitor metadata whenever you access our website; these records are saved within server log files. Captured information includes:
- Browser type and version
- Visitor device operating system
- Referral source website
- Specific subpages browsed
- Exact access date and timestamp
- Visitor public IP address
- Visitor internet service provider
- Other metadata used to defend against cyberattacks
We will not derive personal user profiles from this anonymous metadata. This aggregated data is utilized for these legitimate purposes:
- Ensure accurate display of our website content
- Optimize website content and advertising delivery
- Maintain the stability and security of our server and website infrastructure
- Provide evidentiary data for law enforcement in the event of cyber security incidents
We conduct statistical analysis on anonymized server log data to strengthen our internal data protection standards and overall data security. Anonymous log data is physically segregated from all identifiable personal user records.
Website Account Registration
You may register a user account on our website by submitting required personal information via the designated registration form. All submitted personal data is collected and stored exclusively for internal business use by krogersave. We may share necessary data with authorized third-party processors (such as logistics service providers) only to fulfill order-related contractual obligations.
Newsletter Subscription
Visitors can opt into our brand newsletter subscription service on our website. The registration form defines which personal details are collected for newsletter distribution.
We regularly send product updates, promotional offers and brand news to subscribed users. You are eligible to receive newsletters only if you provide a valid email address and complete official subscription registration. We adopt the double opt-in mechanism: a confirmation email will be sent to your submitted mailbox for identity verification before formal newsletter activation.
During newsletter sign-up, we record your registered IP address, registration date and timestamp. This data is retained to track potential email address abuse and serve as legal protection for our business.
Personal data collected for newsletter delivery will solely be used for sending our newsletter content. You may receive system emails regarding newsletter service adjustments or technical maintenance updates when necessary. We will never share your subscription data with external third parties.
You are entitled to cancel your newsletter subscription at any time via the unsubscribe link embedded within every newsletter email, through the subscription management page on our website, or by contacting our support team directly. Revoking your subscription automatically withdraws your consent for related data storage.
Newsletter Tracking
Our newsletter emails contain embedded tracking pixels (small invisible graphic markers embedded within HTML-formatted emails) for recording delivery and open statistics. This tool allows us to collect data on email open status, open timestamps and link clicks within newsletters for marketing campaign performance analysis.
Collected tracking data is analyzed internally to refine newsletter content layout and match future content better to subscriber preferences. This tracking data will never be disclosed to third-party organizations. You can withdraw your consent for newsletter tracking data collection at any time; we will permanently delete corresponding records upon your opt-out request. Unsubscribing from newsletters is treated as a formal withdrawal of tracking consent by default.
Website Contact Channels
Our website provides official email and contact form channels for direct communication with our support team. When you send inquiries via email or the contact form, your submitted personal information is automatically stored by our system. All voluntarily provided contact data is only used to respond to your messages and resolve your requests, with zero third-party data disclosure.
Blog Comment Functionality
Users can post public comments on blog articles published on the krogersave website. When you submit a comment, your comment content, posting timestamp and self-selected display nickname will be published publicly. We also log your public IP address for security auditing purposes.
IP address records are retained to mitigate risks including third-party right infringement and illegal malicious comments posted by users. This data retention protects our legal liability in the event of user-generated content violations. We will not share this comment-related personal data with external parties unless compelled by legal judicial requirements or for legitimate legal defense purposes.
Standard Data Erasure & Restriction Rules
We will only retain your personal data for the duration required to fulfill the original collection purpose, or for the statutory retention period mandated by EU and domestic legislation.
Once the storage purpose expires or legal retention periods lapse, we will block or permanently erase your personal data in full compliance with legal regulations.
Data Subject Rights
a) Right to Confirmation
You have the legal right under GDPR to request formal confirmation whether we are processing your personal data. You may submit this request to our support staff at any time.
b) Right of Access
You are permitted to obtain a free copy of all your stored personal data, alongside the following supplementary information:
- The legal purpose of data processing
- Categories of personal data being processed
- Recipients or recipient categories your data has been shared with (including overseas organizations)
- Defined data retention period or evaluation criteria for retention
- Your rights to request data correction, erasure, processing restriction and objection
- Right to file formal complaints with relevant supervisory authorities
- Source information for data not collected directly from yourself
- Details of automated decision-making and profiling activities, including logical mechanisms and foreseeable impacts
You also have the right to be notified of data transfers to overseas third-party organizations and corresponding protective safeguards applied to such transfers. All access requests can be submitted to our support team freely.
c) Right to Rectification
You may demand immediate correction of inaccurate personal data held by our company. You also have the right to supplement incomplete personal records with supporting statements, aligned with our data processing purposes. Contact our team anytime to initiate data correction procedures.
d) Right to Erasure (Right to be Forgotten)
We must delete your personal data without unreasonable delay if any of the following conditions apply:
- Your data is no longer required for the original collection purpose
- You withdraw your processing consent with no alternative valid legal processing grounds
- You submit a formal objection to data processing with no overriding legitimate business interests justifying continued processing
- Your personal data has been processed unlawfully
- Data erasure is required to meet our legal compliance obligations
- Your data was collected in relation to information society services for minors under Article 8(1) GDPR
Submit your erasure request to our staff, and our team will execute deletion procedures promptly. If your data has been made public, we will take reasonable technical measures to notify other data processors to remove all copies and links to your personal data where legally feasible. Our team will handle all targeted data erasure arrangements on a case-by-case basis.
e) Right to Restrict Processing
You may apply to suspend your personal data processing activities under the following scenarios:
- You dispute the accuracy of your personal data, during our internal verification period
- Processing activities are unlawful, and you opt for usage restriction instead of full data erasure
- We no longer need your data for business processing, but you require the data for legal claim establishment, exercise or defense
- You have objected to data processing while we verify whether our legitimate business interests override your personal rights
Our support team will implement processing restriction measures immediately upon receiving your valid application.
f) Right to Data Portability
You have the right to obtain your submitted personal data in a standardized, machine-readable format, and transmit this data to another data controller without obstruction from our side. This right applies when processing is based on your formal consent or signed contractual agreements and conducted through automated systems. Where technically achievable, you may request direct data transmission from our system to a third controller. Contact our staff to exercise your data portability rights.
g) Right to Object
You may object to data processing activities based on Article 6(1)(e) and 6(1)(f) GDPR at any time for reasons related to your personal specific situation; this regulation also covers profiling behaviors derived from these clauses.
We will cease corresponding data processing upon receiving your objection, unless we can prove compelling legitimate business interests that supersede your personal rights, or the data is necessary for legal claim defense.
If we process your data for direct marketing purposes, you have unconditional rights to object to such processing (including marketing-related profiling). We will terminate all marketing data processing immediately after receiving your objection.
You may also object to your data being used for academic, historical research or statistical purposes under Article 89(1) GDPR, unless such processing serves mandatory public interest tasks. You can submit an objection request to our team, or use automated technical tools to submit opt-out requests for online information services.
h) Automated Individual Decision-Making & Profiling
You have the right to refuse decisions generated purely by automated processing (including profiling) that impose legal effects or substantial impacts on your personal interests. Exceptions apply only when:
- The automated decision is necessary for executing a signed contract between you and our company
- The decision is authorized by official EU/domestic law with formal protective measures for your legal interests
- You provide explicit written consent for such automated processing
For contract execution or consent-based automated decisions, we will implement protective measures including human manual review channels for you to state opinions and contest automated outcomes. Reach out to our team if you wish to exercise this right.
i) Right to Withdraw Consent
You are allowed to withdraw your previously granted personal data processing consent at any time with immediate effect. Submit your withdrawal application to our support staff at your convenience.
Third-Party Platform Data Compliance Clauses
Facebook Integration
Our website embeds official Facebook plugins. Facebook is a mainstream social networking platform enabling user communication, content sharing, personal profile creation and social interactions.
When you access pages containing Facebook plugins, your browser will automatically load corresponding Facebook plugin resources. Facebook will record the specific webpage you visited during this process.
If you log into your Facebook account while browsing our website, Facebook will track your browsing behaviors across our site and associate this data with your personal Facebook account when you click Facebook interactive buttons (Like button, comment box etc.).
Facebook can collect your visit records regardless of whether you interact with embedded Facebook components. You can block this data collection by logging out of your Facebook account before accessing our website.
Refer to Facebook’s official privacy policy via https://facebook.com/about/privacy/ to review their data collection rules and user privacy setting options.
Google Analytics (IP Anonymization Enabled)
We deploy Google Analytics with IP anonymization for website traffic statistics. Web analytics tracks visitor browsing behaviors including referral sources, page access records, visit frequency and dwell time to optimize website operation and advertising return evaluation.
We use the
Data captured by Google Analytics (including anonymized IP addresses) is transmitted and stored on Google servers located in the United States, and Google may share aggregated data with designated third-party partners.
You can block Google Analytics cookies via browser settings or clear existing tracking cookies manually. You may also opt out of Google Analytics data collection permanently by downloading and installing the official browser add-on available at https://tools.google.com/dlpage/gaoptout. Note that reinstallation of the plug-in is required after device system formatting or browser reinstallation.
Full Google privacy rules can be viewed at https://www.google.com/intl/en/policies/privacy/; Google Analytics terms are available at http://www.google.com/analytics/terms/us.html; official product introduction: https://www.google.com/analytics/
_gat_anonymizeIp function to truncate and anonymize visitor IP addresses for users accessing our site from EU member states and EEA contracting nations. Google Analytics deploys tracking cookies to collect website usage data for generating traffic analysis reports and supporting our website operation optimization.
Google Remarketing
Google Remarketing is a function under Google Ads for delivering targeted advertising to users who have previously visited our website. This service matches advertisement content to visitor interests based on past browsing records across the Google advertising ecosystem.
Google Remarketing places dedicated cookies to identify returning visitors within Google’s ad network, transmitting browsing behavior data and IP information to Google US servers for targeted ad delivery. Google may share collected data with authorized third-party collaborators.
You can disable remarketing cookies via browser configuration or clear historical cookies. You may also adjust personalized advertising preferences directly via https://www.google.com/settings/ads for each browser you use. Check Google’s official privacy policy for supplementary information.
Google AdWords
Google AdWords is Google’s search and display advertising service, which delivers targeted ads on Google search results pages and third-party partner websites based on preset keyword rules. AdWords conversion cookies are saved to your device when you access our site via Google advertisement links. These cookies expire after 30 days and are not used for personal user identification, only for recording completed checkout actions within our shopping system.
Conversion data is used by Google to generate advertising performance statistics for us to optimize future ad delivery strategies; Google will not provide us with any identifiable personal user data. Conversion data including visitor IP addresses is stored on Google US servers and may be shared with Google’s authorized partners.
Block AdWords cookies via browser settings or clear existing conversion cookies at any time. Adjust personalized ad preferences via https://www.google.com/settings/ads.
Instagram Embedded Components
Our website integrates official Instagram widgets. Instagram is a visual content sharing platform for photo/video publishing and cross-platform content distribution.
Your browser will automatically load Instagram widget resources when you access relevant pages, allowing Instagram to record your visited webpage information. If logged into your Instagram account during browsing, your site access records will be linked to your personal Instagram profile when you click embedded Instagram buttons. You can prevent this data transmission by logging out of your Instagram account before visiting our website.
Official Instagram privacy documentation: https://help.instagram.com/155833707900388 & https://www.instagram.com/about/legal/privacy/
Pinterest Plugins
We embed official Pinterest widgets on our website. Pinterest is a social curation platform for saving and sharing image collections, pinned content and descriptive notes with other community users.
Pinterest loads corresponding plug-in resources automatically upon page access and records your browsing page information. When logged into Pinterest during your site visit, your access behavior will be associated with your Pinterest account after you interact with Pinterest buttons. Logging out of Pinterest prior to site access blocks this data collection behavior.
Review Pinterest’s privacy policy via https://about.pinterest.com/privacy-policy for detailed data processing rules.
PayPal Payment Data Protection
We support PayPal as one of our official payment processors. PayPal operates virtual payment accounts supporting direct online transfers, credit card payments and buyer protection services.
When you select PayPal during checkout, your necessary payment-related personal data will be automatically transmitted to PayPal to complete payment settlement. You consent to this data transfer by choosing PayPal as your payment method. Transmitted data generally includes your full name, delivery address, email, IP address, contact phone number and other payment-mandated information.
Data transmission is required for payment settlement and anti-fraud verification purposes. PayPal may share necessary data with credit reference agencies for identity and credit checks, and distribute data to its affiliated companies, service providers and subcontractors to fulfill contractual payment obligations.
You may withdraw your consent for PayPal data processing at any time, but this withdrawal will not affect data processing activities required for completed payment transactions.
Full PayPal privacy policy: https://www.paypal.com/us/webapps/mpp/ua/privacy-full
Legal Basis for Data Processing
- Article 6(1)(a) GDPR: Applies to all processing activities carried out with your explicit specific consent.
- Article 6(1)(b) GDPR: Used for data processing required to execute signed purchase contracts or complete pre-contract inquiries about our aviation craft products and services.
- Article 6(1)(c) GDPR: Applies when data processing fulfills our statutory legal obligations such as tax declaration requirements.
- Article 6(1)(d) GDPR: Rarely used, only for processing necessary to protect the vital physical safety interests of users or other natural persons.
- Article 6(1)(f) GDPR: Applied for legitimate business interests pursued by krogersave or our third-party collaborators, provided these interests do not override your fundamental privacy rights. European regulators confirm customer-related business operations constitute valid legitimate interests under GDPR Recital 47.
Our core legitimate interest under this clause is the sustainable operation of our brand and business for the benefit of our team, partners and enterprise stakeholders.
Data Storage Duration
We retain personal data strictly following statutory legal retention deadlines. After the retention period expires, relevant data will be automatically erased if no ongoing contractual or business purpose requires data storage.
Mandatory Data Submission Requirements
Some personal data submission is required by national law (e.g. tax compliance rules) or signed commercial contracts. In certain cases, providing your personal data is a prerequisite for signing a purchase contract with our store; failure to submit required information will prevent order contract conclusion. Contact our support staff to clarify mandatory data scope, legal obligations and consequences of incomplete data provision before submitting your personal information.
Automated Decision & Profiling Statement
krogersave does not implement standalone automated decision-making systems or user profiling mechanisms for our business operations.
Governing Law
These Privacy Policy terms and all auxiliary service agreements between you and krogersave shall be governed and interpreted in accordance with the laws of the United Kingdom.