Privacy Policy
Last updated: March 6, 2026
1. Introduction
Regenvyshouldera ("we," "us," or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://regenvyshouldera.world and use our services.
This policy complies with the General Data Protection Regulation (GDPR) (EU) 2016/679, the Austrian Data Protection Act (Datenschutzgesetz – DSG), as amended (including the Datenschutz-Anpassungsgesetz 2018), and the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG) where applicable.
2. Data Controller Information
The data controller responsible for your personal data is:
Regenvyshouldera
Grazer Str. 50
4820 Bad Ischl
Austria
Email: touch@regenvyshouldera.world
3. Personal Data We Collect
We may collect and process the following categories of personal data:
3.1 Information You Provide
- Contact Information: Name, email address, phone number, and delivery address when you place an order or contact us.
- Order Information: Details about products ordered, payment information, and order history.
- Communication Data: Content of messages and inquiries you send to us.
- Consent Records: Records of permissions and consents you provide.
3.2 Information Collected Automatically
- Technical Data: IP address, browser type and version, operating system, device information.
- Usage Data: Pages visited, time spent on pages, navigation paths, referral source.
- Cookie Data: Information collected through cookies and similar technologies (see our Cookie Policy).
4. Legal Basis for Processing
We process your personal data based on the following legal grounds under GDPR Article 6:
- Consent (Art. 6(1)(a)): Where you have given explicit consent for specific processing purposes, such as marketing communications.
- Contract Performance (Art. 6(1)(b)): Processing necessary to fulfill orders and provide our services.
- Legal Obligation (Art. 6(1)(c)): Processing required to comply with legal requirements, such as tax and accounting laws.
- Legitimate Interests (Art. 6(1)(f)): Processing necessary for our legitimate business interests, such as fraud prevention and website security, provided these do not override your rights.
5. Purposes of Data Processing
We use your personal data for the following purposes:
- Processing and fulfilling your orders
- Communicating with you about your orders and inquiries
- Providing customer support and responding to requests
- Sending marketing communications (with your consent)
- Improving our website and services
- Analyzing website usage and performance
- Ensuring website security and preventing fraud
- Complying with legal and regulatory obligations
6. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:
- Order Data: Retained for 7 years after the transaction for tax and legal compliance purposes.
- Contact Inquiries: Retained for 3 years after the last communication unless ongoing business relationship exists.
- Marketing Data: Retained until you withdraw consent or request deletion.
- Technical/Analytics Data: Retained for up to 26 months, then anonymized or deleted.
After the retention period, data is securely deleted or anonymized.
7. Data Sharing and Disclosure
We may share your personal data with:
- Service Providers: Third-party companies that help us operate our business (e.g., payment processors, shipping companies, IT providers). These providers are bound by data processing agreements.
- Legal Authorities: When required by law, court order, or to protect our legal rights.
- Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate data protection safeguards.
We do not sell your personal data to third parties.
8. International Data Transfers
Your personal data is primarily processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:
- EU Commission adequacy decisions
- Standard Contractual Clauses (SCCs)
- Binding Corporate Rules
9. Your Rights Under GDPR
You have the following rights regarding your personal data:
- Right of Access (Art. 15): Request a copy of your personal data we hold.
- Right to Rectification (Art. 16): Request correction of inaccurate or incomplete data.
- Right to Erasure (Art. 17): Request deletion of your personal data ("right to be forgotten").
- Right to Restriction (Art. 18): Request limitation of processing in certain circumstances.
- Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format.
- Right to Object (Art. 21): Object to processing based on legitimate interests or for direct marketing.
- Right to Withdraw Consent (Art. 7): Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, please contact us at touch@regenvyshouldera.world. We will respond within 30 days.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- SSL/TLS encryption for data transmission
- Secure server infrastructure
- Access controls and authentication measures
- Regular security assessments
- Employee training on data protection
11. Children's Privacy
Our website and services are not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.
12. Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects or significantly affects you.
13. Right to Lodge a Complaint
If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority:
Austria:
Austrian Data Protection Authority (Datenschutzbehörde)
Barichgasse 40-42, 1030 Vienna
Email: [email protected]
Germany:
Contact your relevant State Data Protection Authority (Landesdatenschutzbeauftragte)
14. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
15. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
Regenvyshouldera
Grazer Str. 50
4820 Bad Ischl, Austria
Email: touch@regenvyshouldera.world