Privacy Policy

Privacy Policy

Last updated: August 3, 2026

DAHTEC ("we", "us", or "our") operates dahtec.cn (the "Site"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or make a purchase from us.

We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and applicable data protection laws.

1. Data Controller

The data controller responsible for your personal data is:

• E-CrossStu GmbH
• Mainzer Landstr. 69
• 60329 Frankfurt am Main, Hessen, Germany
• Email: kjds_info@dahtec.cn
• Phone: +49 69332967674

2. Information We Collect

2.1 Information You Provide

When you create an account, place an order, or contact us, we may collect:

• Contact Information: Name, email address, phone number, shipping and billing address
• Order Information: Products ordered, order history, payment details (processed securely by our payment providers)
• Communication: Messages, emails, or other communications you send to us
• Account Information: Account credentials and preferences

2.2 Information Collected Automatically

When you visit our Site, we automatically collect:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Information: Pages visited, time spent on pages, referring website, click data
• Location Information: Approximate location based on IP address
• Cookies and Similar Technologies: See our Cookie Policy below

3. How We Use Your Information

We use your personal data for the following purposes:

• Order Fulfillment: Processing and delivering your orders, sending order confirmations and shipping notifications
• Customer Service: Responding to inquiries, providing support, resolving disputes
• Marketing: Sending promotional emails and newsletters (only with your explicit consent — you can opt out at any time)
• Analytics: Analyzing website usage to improve our Site, products, and services
• Security: Detecting and preventing fraud, unauthorized transactions, and other malicious activities
• Legal Compliance: Meeting our legal and regulatory obligations

4. Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data based on the following legal bases:

• Performance of a Contract (Art. 6(1)(b)): Processing necessary to fulfill your orders and provide our services
• Consent (Art. 6(1)(a)): When you consent to marketing communications or cookie usage
• Legitimate Interests (Art. 6(1)(f)): For fraud prevention, website security, and business analytics
• Legal Obligation (Art. 6(1)(c)): Compliance with tax, accounting, and regulatory requirements

5. Cookies Policy

We use cookies and similar tracking technologies on our Site:

Cookie Type	Purpose	Duration	Consent Required
Essential Cookies	Shopping cart, checkout, account login	Session	No (required)
Analytics Cookies	Google Analytics — traffic analysis	24 months	Yes
Marketing Cookies	Facebook Pixel — ad targeting and measurement	90 days	Yes
Functional Cookies	Language preferences, recently viewed products	12 months	No

You can manage cookie preferences through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent.

6. Data Sharing and Third Parties

We may share your data with the following third-party service providers who help us operate our business:

• Shopify Inc. — E-commerce platform hosting our store (data processed in Canada/USA)
• Payment Processors — Processing payment transactions securely
• Shipping Carriers — Delivering your orders (name, address, phone)
• Google Analytics — Website analytics (data anonymized)
• Meta/Facebook — Advertising measurement and optimization
• Email Service Providers — Sending transactional and marketing emails

We do not sell your personal data to any third party.

7. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy:

• Order data: 10 years (for legal/tax compliance)
• Account data: Until account deletion is requested
• Marketing data: Until consent is withdrawn
• Analytics data: 26 months (Google Analytics default)

8. Your Rights Under GDPR

As a data subject located in the European Economic Area (EEA), you have the following rights:

• Right of Access (Art. 15): Request a copy of your personal data
• Right to Rectification (Art. 16): Correct inaccurate or incomplete data
• Right to Erasure (Art. 17): Request deletion of your personal data ("right to be forgotten")
• Right to Restriction (Art. 18): Limit how we process your data
• Right to Data Portability (Art. 20): Receive your data in a machine-readable format
• Right to Object (Art. 21): Object to processing based on legitimate interests
• Right to Withdraw Consent (Art. 7(3)): Withdraw consent for marketing at any time
• Right to Lodge a Complaint (Art. 77): Complain to your local data protection authority

To exercise any of these rights, please contact us at kjds_info@dahtec.cn.

9. International Data Transfers

Your data may be transferred to and processed in countries outside the EEA, including the United States (for Shopify, Google Analytics, and Facebook services). We ensure appropriate safeguards are in place for such transfers through:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data Processing Agreements with all third-party processors
• Binding Corporate Rules where applicable

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• SSL/TLS encryption for all data transmission
• PCI DSS compliant payment processing
• Regular security audits and vulnerability assessments
• Access controls and staff training on data protection
• Incident response procedures

11. Children's Privacy

Our Site is not directed to children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately at kjds_info@dahtec.cn.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We will notify you of material changes via email or a prominent notice on our Site.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact our Data Protection Officer: