Who we are

Our website address is: http://chromastrokes.com.

This website is owned and operated by AREALUX S.à r.l.-S., a company registered in Luxembourg under business registration number B263132.

For the purposes of the EU General Data Protection Regulation (GDPR), we are the Data Controller for all personal data processed through this website. If you have any questions about this policy or your data, you can contact us at info@chromastrokes.com.

What Personal Data We Collect and Why We Collect It

We collect information about you through the following means and for the following purposes:

Analytics

We use Google Analytics to understand how visitors engage with our website. To do this, we collect anonymized data including your browser type, device type, country of origin, and the pages you visit on our site. We do this to improve our website’s content and user experience. Our legal basis for this processing is our legitimate interest in maintaining and improving our website.

Cookies

This website uses cookies and similar technologies to ensure the proper functioning of the site, to analyze our traffic, and to prepare for future personalized content and advertising. A “cookie” is a small text file that is stored on your computer or mobile device when you visit a website.

Some cookies are “strictly necessary” for the website to function and cannot be switched off. All other cookies, such as those for analytics or marketing, are blocked by default until you provide your active consent.

We provide full transparency into the specific cookies we use and give you granular control over your preferences through our Cookie Consent banner and our detailed Cookie Policy. You can change or withdraw your consent at any time.

For a detailed, up-to-date list of the cookies we use, their purpose, and their duration, please review our Cookie Policy.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.), such as videos hosted on YouTube. Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Legal Basis for Processing

We process personal data under several legal bases according to the GDPR:

  • Consent: For all non-essential cookies (Analytics, Marketing) and for marketing communications, we rely on your active and explicit consent, which you can withdraw at any time.
  • Legitimate Interest: We process some data for our legitimate interests, for example, to ensure the security of our website and to analyze its performance to make improvements. We always balance our interests against your fundamental rights and freedoms.

Who We Share Your Data With

We do not sell your personal data. We only share data with third-party service providers who help us operate our website. These include:

  • Analytics Providers: Google LLC (for Google Analytics), for the purpose of processing website traffic data.
  • Video Hosting Providers: Google LLC (via YouTube embeds), for the purpose of displaying video content.”

How Long We Retain Your Data

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected.

  • Google Analytics Data: Data collected by Google Analytics is retained for a period of 14 months before being automatically deleted.
  • Cookie Consent Records: Your consent choices are stored for a period of one year, after which you will be prompted to provide consent again.

Your Data Rights

Under the GDPR, you have significant rights regarding your personal data. These include:

  • The right to be informed: The right to know how your data is being used (which this policy aims to do).
  • The right of access: The right to ask for a copy of the data we hold about you.
  • The right to rectification: The right to have inaccurate personal data corrected.
  • The right to erasure: The right to have your data deleted (also known as the “right to be forgotten”).
  • The right to restrict processing: The right to limit how we use your data.
  • The right to data portability: The right to receive your data in a portable format.
  • The right to object: The right to object to the processing of your data.

To exercise any of these rights, please contact us at info@chromastrokes.com. You also have the right to lodge a complaint with a supervisory authority, such as the CNPD in Luxembourg.

International Data Transfers

As we use services from international companies like Google, your data may be processed on servers located outside of the European Union.

When we transfer personal data outside the EU, we ensure that appropriate safeguards are in place to protect your data, relying on mechanisms such as European Commission Adequacy Decisions or Standard Contractual Clauses (SCCs).