Résidence Club

Privacy Policy

1. Data controller

The party responsible for data processing on this website within the meaning of the EU General Data Protection Regulation (GDPR) is:

Andrew Koob
Résidence Club
Martin-Luther-Straße 7d
97072 Würzburg
Germany
Email: info@résidence-club.com

2. General notes on data processing

We process personal data of our customers only to the extent necessary to provide a functional website, to perform a contract, and to comply with legal obligations. Processing usually takes place only with consent (Art. 6 (1) lit. a GDPR), for contract performance (Art. 6 (1) lit. b GDPR), to comply with a legal obligation (Art. 6 (1) lit. c GDPR), or to safeguard legitimate interests (Art. 6 (1) lit. f GDPR).

3. Hosting via Shopify

This website is hosted on servers operated by Shopify International Limited, Victoria Buildings, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"). Shopify processes data on our behalf under a data processing agreement (Art. 28 GDPR). Data may be transferred to the United States and other third countries, secured by EU standard contractual clauses and additional safeguards. More information at shopify.com/legal/privacy.

When the website is accessed, the following data is processed in server log files: IP address, date and time of access, requested URL, referrer URL, browser used, operating system. This is done to provide the service and ensure IT security (Art. 6 (1) lit. f GDPR).

4. Order processing

When you place an order, we process the following data: first and last name, shipping and billing address, email address, optional phone number, payment details, and order contents. The legal basis is Art. 6 (1) lit. b GDPR (contract performance) and Art. 6 (1) lit. c GDPR (tax and commercial-law retention obligations; generally ten years).

5. Payment providers

Payments are processed by external payment providers. Payment data is transmitted directly to the respective provider for contract performance (Art. 6 (1) lit. b GDPR).

  • Shopify Payments (Shopify International Limited, Ireland) — processes card and SEPA payments. Details: shopify.com/legal/privacy.
  • Klarna (Klarna Bank AB, Sweden) — processes Pay Later / instalments. Details: klarna.com.
  • PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg) — processes PayPal payments. Details: paypal.com.

6. Shipping providers

To deliver your order, we share your name and shipping address with carriers (e.g. DHL, DPD). Legal basis: Art. 6 (1) lit. b GDPR.

7. Customer account

You may optionally create a customer account. We process your email address and a password you choose. You may have the account deleted at any time. Legal basis: Art. 6 (1) lit. b GDPR.

8. Email marketing via Klaviyo

With your consent (Art. 6 (1) lit. a GDPR), we send you newsletters via Klaviyo (Klaviyo, Inc., 125 Summer Street, Boston, MA 02110, USA). We process email address and engagement data (opens, clicks). Data transfers to the USA are based on the EU-US Data Privacy Framework and/or standard contractual clauses. You may withdraw consent at any time via the unsubscribe link in every email or by writing to us. Details: klaviyo.com/legal/privacy.

9. Reviews via Judge.me

We use Judge.me (Judge.me, 88 Wharf Road, London N1 7UX, United Kingdom) to collect and display product reviews. When you submit a review we process the data you provide (name, optional email, review text, photo/video). Legal basis: Art. 6 (1) lit. a GDPR (consent) and Art. 6 (1) lit. f GDPR (legitimate interest in product reviews). Details: judge.me/privacy.

10. Cookie consent via Pandectes

We use Pandectes GDPR Compliance (Pandectes P.C., Athens, Greece) to manage your cookie preferences. Pandectes stores your choice on the website. Legal basis: Art. 6 (1) lit. c GDPR (obligation to document consent). Details: pandectes.io/privacy-policy.

11. Cookies

We use technically necessary cookies (cart, login session) on the basis of Art. 6 (1) lit. f GDPR. Cookies that are not strictly necessary (analytics, marketing) are only set with your consent (Art. 6 (1) lit. a GDPR; § 25 (1) TTDSG). You can change your selection at any time via the cookie banner ("Cookie settings" in the footer).

12. Instagram feed (Mintt Instafeed)

Our website may embed a feed from our Instagram profile via the Mintt Instafeed app. Content is loaded from Instagram (Meta Platforms Ireland Limited, Ireland) only when displayed, which may process personal data (e.g. IP address). Details: facebook.com/privacy/policy.

13. Storage duration

We only store personal data for as long as necessary for the stated purposes or for as long as statutory retention periods (tax law: 10 years; commercial law: 6 years) require.

14. Your rights

You have the following rights:

  • Access to your data (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure ("right to be forgotten", Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing based on legitimate interests (Art. 21 GDPR)
  • Withdrawal of consent with effect for the future (Art. 7 (3) GDPR)

To exercise these rights, contact info@résidence-club.com. You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

15. Changes to this privacy policy

We reserve the right to amend this privacy policy so that it always reflects current legal requirements or changes to our services. The version current at the time of your next visit will then apply.