Privacy policy
How we process personal data under Articles 13 and 14 GDPR, and the rights you have.
This website is operated by the company named below. In accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR), we inform you below about which personal data we process when you visit this website, for what purposes this is done, and what rights you have.
Controller
深圳市安信工艺制品有限公司
Shenzhen Anxin Metal Craft Products Co., Ltd.
No. 386, Shenshan Road (Kengzi Section), Kengzi Subdistrict, Pingshan District, Shenzhen, Guangdong 518122, People's Republic of China
Email info@oemmetalcrafts.com
Phone +86 135 7089 5213
No data protection officer has been appointed, as the conditions of Article 37 GDPR are not met. No representative in the Union has been designated, as the conditions for the exemption under Article 27(2) GDPR are met given the current nature and scope of the processing.
Principles and legal bases
We process personal data only to the extent necessary to provide a functioning website and to handle your enquiries. The following legal bases in particular may apply:
- Article 6(1)(a) GDPR – your consent, where you have given it to us
- Article 6(1)(b) GDPR – performance of a contract or steps taken at your request prior to entering into a contract
- Article 6(1)(f) GDPR – our legitimate interests, in particular in the secure and stable operation of the website
Hosting and server log files
This website runs on a server rented by us. The server is located in the United States of America (California region). The hosting provider processes the data solely on our instructions.
Each time the website is accessed, the web server automatically collects the information transmitted by your browser:
- IP address
- date and time of the request
- the page or file accessed and the volume of data transferred
- browser type and version, and the operating system used
- the previously visited page (referrer), where transmitted
This information is necessary for technical operation, error analysis and defence against attacks. The legal basis is Article 6(1)(f) GDPR. The log files are regularly overwritten automatically and deleted after a short period, unless they are required to investigate a specific security incident.
Contact form and enquiries
Through the contact form on the "Contact" page, we collect the following information:
- name
- email address
- your message
- the language in which you submit the enquiry
The purpose of the processing is to handle and answer your enquiry and to prepare a possible contractual relationship. The legal basis is Article 6(1)(b) GDPR, alternatively Article 6(1)(f) GDPR. We delete the enquiry once it has been conclusively handled and no statutory retention obligations prevent deletion.
To prevent abusive use, we additionally store a hash value of your IP address – not the IP address in plain text. This value serves exclusively to limit the request rate and cannot be traced back to your IP address without the associated secret key.
The data entered in the form is not used for newsletters, advertising or profiling, and is not passed on to third parties for commercial purposes.
Contact by email
If you write to us by email, we process your email address, the content of the message and the technical data required for transmission. The legal basis here too is Article 6(1)(b) or (f) GDPR. Email communication is handled by an external email service provider acting as our processor.
Transfers to third countries
Because the server for this website is located in the United States of America, data is processed in a third country outside the European Union.
For the United States, an adequacy decision of the European Commission (the EU-US Data Privacy Framework) exists only in favour of certified companies. Our hosting provider is not certified under that framework.
We therefore base the processing on Article 49(1)(b) GDPR – the processing is necessary for the performance of a contract or for steps taken prior to entering into a contract, which you initiate through your enquiry. We point out that authorities in the United States may gain access to processed data under the statutory conditions applicable there.
Where you transmit your information to us directly through this website, the disclosure is made by you yourself as the data subject. In the view of the European Data Protection Board, this does not constitute a transfer within the meaning of Chapter V GDPR; the information above serves transparency under Article 13 GDPR.
Data security
This website is transmitted in encrypted form via HTTPS (TLS). Access to the data stored by us is limited to a small number of authorised persons and is protected against unauthorised access by technical and organisational measures.
No automated decision-making
No automated decision-making, including profiling, within the meaning of Article 22 GDPR takes place.
Your rights
You have the following rights towards us regarding the personal data concerning you:
- Access to the data processed (Article 15 GDPR)
- Rectification of inaccurate or incomplete data (Article 16 GDPR)
- Erasure (Article 17 GDPR)
- Restriction of processing (Article 18 GDPR)
- Data portability (Article 20 GDPR)
- Objection to processing (Article 21 GDPR)
- Withdrawal of consent already given, with effect for the future (Article 7(3) GDPR)
To exercise your rights, a message to info@oemmetalcrafts.com is sufficient.
Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR), in particular with the authority of the Member State of your habitual residence, your place of work or the place of the alleged infringement.
Version of this statement
Version: September 2026. We will update this statement as soon as the data processing or the services we use change.