
1. General Information
We take the protection of your personal data very seriously. Personal data is processed exclusively in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR) and applicable national regulations.
This Privacy Policy informs you about the nature, scope, and purpose of the processing of personal data on this website.
2. Data Controller
The controller within the meaning of the GDPR is:
Kros Innovations LTD
Email: [email protected]
3. Data Processing on This Website
3.1 Server Log Files
When you access our website, information is automatically collected and stored in server log files. This includes:
Browser type and version
Operating system used
Referrer URL
Host name of the accessing device
Date and time of access
IP address
This data is not merged with other data sources and is used solely to ensure the secure and stable operation of the website.
Legal basis: Art. 6(1)(f) GDPR
3.2 Contact Requests
If you contact us (e.g., via contact form, email, or chat), your data will be processed solely for the purpose of handling your request and any follow-up communication.
Legal basis:
Art. 6(1)(b) GDPR (contractual or pre-contractual measures)
Art. 6(1)(f) GDPR (legitimate interest)
3.3 Orders and Contract Processing
When placing an order, we process the personal data necessary for contract fulfillment:
Name
Billing and shipping address
Email address
Phone number (if provided)
Payment details
Order information
Processing is carried out for:
Contract performance (Art. 6(1)(b) GDPR)
Compliance with legal obligations (Art. 6(1)(c) GDPR)
4. Cookies and Consent Management
We use cookies and similar technologies on our website.
We distinguish between:
Essential cookies, required for the operation of the website
Analytics and marketing cookies, used only with your prior consent
Legal basis:
Essential cookies: Art. 6(1)(f) GDPR
Optional cookies: Art. 6(1)(a) GDPR
We use a consent management platform to obtain, manage, and document your consent.
You may withdraw or modify your consent at any time.
Affiliate tracking, analytics tools, and marketing technologies are only activated after user consent where required.
5. Email Marketing, CRM and Automation
FunnelKit Automations (WooCommerce CRM)
We use FunnelKit Automations to manage customer communication and automation processes.
This includes:
Email communication
Order notifications
Marketing automation
Personal data processed may include:
Name
Email address
Order data
Website interaction data
Legal basis:
Art. 6(1)(b) GDPR (contract fulfillment)
Art. 6(1)(a) GDPR (consent for marketing)
SMS Communication (BulkGate)
We use BulkGate to send SMS messages.
Data processed:
Phone number
Message content
Legal basis:
Art. 6(1)(a) GDPR (consent)
WhatsApp Communication
We use WhatsApp (Meta Platforms Ireland Ltd.) for customer communication and marketing purposes.
Please note:
Data may be transferred outside the EU
Meta may process data independently
Legal basis:
Art. 6(1)(a) GDPR (consent)
Art. 6(1)(b) GDPR (customer communication)
6. Analytics, Tracking and Advertising
6.1 Google Analytics
Provider: Google Ireland Limited
Used for analyzing user behavior on our website.
IP anonymization is enabled
Legal basis:
Art. 6(1)(a) GDPR
6.2 Meta Pixel (Facebook & Instagram)
Provider: Meta Platforms Ireland Ltd.
Used for:
Conversion tracking
Retargeting
Advertising optimization
Meta may process data as an independent controller.
Legal basis:
Art. 6(1)(a) GDPR
6.3 TikTok Pixel
Provider: TikTok Technology Limited
Used for:
Tracking user interactions
Optimizing advertising campaigns
Legal basis:
Art. 6(1)(a) GDPR
6.4 Google Ads Conversion Tracking
Used to measure the effectiveness of advertising campaigns.
Legal basis:
Art. 6(1)(a) GDPR
7. Affiliate Tracking
We use AffiliateWP to manage affiliate partnerships and track referrals.
This includes:
Tracking links
Attribution of sales
Commission calculations
Data processed may include:
IP address
Referrer URL
Click behavior
Legal basis:
Art. 6(1)(f) GDPR (legitimate interest in marketing and sales optimization)
8. Payment Providers
We use external payment service providers.
Stripe
Provider: Stripe Payments Europe Ltd.
Supports:
Credit card payments
Apple Pay
Google Pay
PayPal
Provider: PayPal (Europe) S.à r.l. et Cie, S.C.A.
When selecting a payment method, your payment data is transmitted to the respective provider.
Legal basis:
Art. 6(1)(b) GDPR (contract fulfillment)
The respective providers process data under their own responsibility.
9. Hosting
Our website is hosted by external service providers. Personal data may be processed on servers located within or outside the European Union.
Legal basis:
Art. 6(1)(f) GDPR (legitimate interest in secure and efficient website operation)
10. Data Retention
We store personal data only as long as necessary:
Contract and tax-related data: up to 10 years
Marketing data: until consent is withdrawn
11. Your Rights
You have the following rights under the GDPR:
Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
Right to withdraw consent at any time (Art. 7(3) GDPR)
To exercise your rights, please contact:
You also have the right to lodge a complaint with a supervisory authority.
12. Data Security
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk and to protect personal data against unauthorized access, loss, or misuse.
13. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy at any time to ensure compliance with legal requirements or to reflect changes in our services.