Informativa sulla privacy

This Privacy Policy explains how Eudock GmbH, trading under the brand RENESSY, collects, uses, stores, and shares personal data when you visit https://renessy.de, contact us, subscribe to our newsletter, create a customer account, submit a review, or place an order in our online store.

1. Controller

The controller responsible for the processing of personal data on this website is:

Eudock GmbH
Zum Margarethenzehnten 3
60438 Frankfurt am Main
Germany

You can contact us about privacy matters by using our contact page at https://renessy.de/pages/contact or by writing to the postal address above.

2. Personal Data We Process

We process personal data that you provide to us directly, data generated when you use our website, and data that is necessary to operate our Shopify store and fulfil orders.

Store visits and device data

When you visit our website, we and our service providers may process technical data such as your IP address, browser type and version, device information, time zone, cookie identifiers, pages viewed, referring URLs, product interactions, search terms, cart activity, and approximate location derived from technical data. We use this data to load the website, keep it secure, understand store performance, prevent fraud, and improve the shopping experience.

Orders and checkout

When you place an order, we process data such as your name, billing address, shipping address, email address, phone number if provided, order contents, order value, payment status, delivery information, customer account information, and communications about the order. Payment details are processed by Shopify and the relevant payment service providers. We do not store full payment card numbers on our own systems.

Customer accounts and support

If you create an account or contact us, we process the information needed to manage your account or respond to your request. This may include your name, email address, order number, message content, shipping details, and any information you choose to send us.

WhatsApp support

If you choose to contact us through WhatsApp, WhatsApp Ireland Limited and companies in the Meta group may process your phone number, profile information, message content, attachments, communication metadata, and any order or product information you provide. We use this information to answer your request and provide customer support. The legal basis is Art. 6(1)(b) GDPR where the communication concerns a contract or pre-contractual steps, and Art. 6(1)(f) GDPR for our legitimate interest in providing efficient customer support in other cases. Using WhatsApp is voluntary; you can contact us instead by email or through our contact form. WhatsApp may process data outside the European Economic Area under its own privacy terms and applicable transfer safeguards. More information is available at https://www.whatsapp.com/legal/privacy-policy-eea.

Newsletter and marketing emails

If you subscribe to our newsletter, we process your email address and, where available, your consent status, language, country or region, subscription date, and interaction with our emails. You can unsubscribe at any time by using the unsubscribe link in our emails or by contacting us.

Reviews and user-generated content

If you submit a product review, question, photo, or other review-related content, we process the information you provide for that purpose. Reviews are managed with Judge.me. Depending on the review form, this may include your display name, email address, review content, rating, uploaded media, product reference, and verification status. Published reviews may be visible to other visitors.

3. Purposes and Legal Bases

Where the General Data Protection Regulation (GDPR) applies, we process personal data on the following legal bases:

Purpose	Legal basis
Operating the website, displaying products, maintaining the shopping cart, checkout, customer accounts, and essential store functions	Art. 6(1)(b) GDPR, performance of a contract or pre-contractual steps; Art. 6(1)(f) GDPR, our legitimate interest in operating a secure online store
Processing orders, payments, shipping, returns, refunds, and customer service requests	Art. 6(1)(b) GDPR, performance of a contract
Accounting, tax records, legal compliance, warranty handling, and business documentation	Art. 6(1)(c) GDPR, compliance with legal obligations
Fraud prevention, payment security, abuse detection, and protection of our rights	Art. 6(1)(f) GDPR, our legitimate interest in protecting customers, our store, and our business
Newsletter subscriptions and optional marketing emails	Art. 6(1)(a) GDPR, your consent; where applicable, Art. 6(1)(f) GDPR for direct marketing to existing customers within legal limits
Analytics, performance measurement, advertising pixels, and non-essential cookies	Art. 6(1)(a) GDPR, your consent, for non-essential cookies, pixels, advertising, and consent-based analytics; Art. 6(1)(f) GDPR only for necessary security, basic technical operation, and privacy-friendly aggregate performance checks that do not require consent
Publishing and managing product reviews	Art. 6(1)(a) GDPR where you submit optional content; Art. 6(1)(f) GDPR for our legitimate interest in presenting authentic product feedback and preventing review abuse

4. Service Providers and Recipients

We share personal data only where this is necessary for the purposes described in this policy, where we are legally required to do so, or where you have consented.

• Shopify: We use Shopify to operate our online store, including storefront hosting, checkout, order management, customer accounts, analytics, and related security functions. Shopify may process data in the European Economic Area, the United Kingdom, Canada, the United States, and other locations where Shopify and its providers operate. More information is available at https://www.shopify.com/legal/privacy.
• Payment providers: Depending on the payment method you choose, payment data is processed by Shopify Payments and/or payment providers such as Shop Pay, PayPal, Klarna, Apple Pay, Google Pay, credit card networks, and banks. These providers process payment data to authorise, complete, refund, and protect payments.
• Shipping and fulfilment providers: We share delivery data with shipping and fulfilment partners where necessary to deliver your order, handle returns, and provide shipment updates.
• Judge.me: We use Judge.me to display and manage product reviews, review forms, review imports, and review-related communication. More information is available at https://judge.me/privacy.
• Email and communication services: Shopify and related communication tools may process data needed to send order confirmations, service messages, and newsletter emails.
• Professional advisers and authorities: We may share data with tax advisers, legal advisers, auditors, courts, authorities, or other recipients when necessary for legal compliance or to protect our rights.

5. Cookies, Consent, Analytics, and Pixels

Our website uses cookies and similar technologies. Some cookies are necessary for the website and checkout to work, for example to remember cart contents, maintain a secure session, prevent fraud, save privacy choices, or provide customer account functions. Other cookies, analytics tools, or pixels may help us understand store performance, improve the website, measure marketing, or support review and advertising functions.

Where required by law, we use non-essential cookies, analytics, or marketing pixels only according to your consent choices. You can change or withdraw cookie consent through the cookie settings provided on the website, where available, and you can also block or delete cookies in your browser settings. Blocking necessary cookies may prevent parts of the store or checkout from working correctly.

Current storefront technology includes Shopify analytics and pixels, Shopify security and checkout technologies, and Judge.me review technologies. We do not sell personal data. We update this policy when we add material new analytics, advertising, review, email, or tracking services.

6. International Transfers

Some of our service providers, including Shopify, payment providers, and app providers, may process personal data outside the European Economic Area. Where personal data is transferred internationally, we rely on appropriate safeguards such as adequacy decisions, standard contractual clauses, contractual commitments, or other legally recognised transfer mechanisms.

7. Retention

We keep personal data only for as long as necessary for the purposes described in this policy, unless a longer retention period is required or permitted by law.

• Order, payment, invoice, tax, and accounting records are generally kept for the legally required retention periods, which may be up to ten years under German commercial and tax law.
• Customer service communications are kept for as long as needed to handle the request and document the outcome.
• Newsletter data is kept until you unsubscribe or we stop sending newsletters, subject to proof-of-consent and legal documentation requirements.
• Review content may remain published until it is removed, anonymised, or no longer needed for the review function.
• Cookie and analytics data is retained according to the lifespan of the relevant cookie, tool, or consent setting.

8. Automated Decision-Making and Fraud Prevention

We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you. Shopify, payment providers, and fraud-prevention tools may use automated checks to detect fraud, prevent abuse, secure transactions, and protect the checkout. These checks may include temporary blocking or review of suspicious transactions, IP addresses, payment methods, or order patterns.

9. Your Rights

If the GDPR applies, you have the following rights, subject to legal requirements and limitations:

• the right of access to your personal data;
• the right to rectification of inaccurate or incomplete data;
• the right to erasure;
• the right to restriction of processing;
• the right to data portability;
• the right to object to processing based on legitimate interests;
• the right to withdraw consent at any time, without affecting processing based on consent before withdrawal;
• the right to lodge a complaint with a data protection supervisory authority.

To exercise your rights, please contact us via https://renessy.de/pages/contact or by writing to Eudock GmbH, Zum Margarethenzehnten 3, 60438 Frankfurt am Main, Germany. We may need to verify your identity before responding to your request.

10. Supervisory Authority

You may lodge a complaint with a data protection supervisory authority. For Eudock GmbH in Hessen, the competent authority is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Wilhelmstraße 7
65185 Wiesbaden
Germany
Website: https://datenschutz.hessen.de

11. Children

Our store is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe that a child has provided us with personal data, please contact us so that we can review and delete the data where required.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes to our website, services, apps, pixels, payment methods, legal obligations, or business processes. The latest version published on this website applies.