A. Name and address of the data controller

We, UKIBORI Ltd., are the controller under data protection law within the meaning of Art. 4 No. 7 of the General Data Protection Regulation (GDPR) for the online shop accessible at https://renact.com/ and the associated data processing. If offers from other providers (“third-party offers”) are accessible from our online shop, our data protection declaration does not apply to these third-party offers. In this case, we are also not responsible for the processing of your personal data within the scope of such third-party offers.

Our contact details are:

UKIBORI Ltd.Strovolou 236Strovolos, 2048, NicosiaCyprus

Telephone number +35722324288E-mail address https://contact@renact.com/

For questions regarding data protection, you can also contact https://contact@renact.com/

​

B. Type and scope of data processing

I. Provision of the online shop and log files

Each time you access our online shop, we process the following access data in so-called server log files

Host name of the accessing computerIP address (anonymised)Date and time of accessing our online shopType of browser usedOperating system usedReferrer URL (i.e. the website you visited before)

The IP address can be a personal data, because under certain conditions it is possible to find out the identity of the owner of the used internet access by information of the respective internet provider. However, we only store and process the IP address in anonymised form, so that it no longer has any personal reference.

These data are processed for the purpose of ensuring the trouble-free operation of our online shop and for the purpose of guaranteeing the security of our information technology systems.

The aforementioned data are deleted as soon as they are no longer required for their processing purpose. This is generally the case for the data that only serve to provide the website, when the respective session has ended. In the case of storage of further data in log files, this is the case after 90 days at the latest.

​

II. User account

You have the option to register with a user account to our online shop. In doing so, depending on the scope of the information you provide (hereinafter “registration data”), we process

First and last nameAddress details (street, house number, postcode, town)E-mail addressTelephone numberDate of birthCompany details

In addition, we store your IP address and the date and time of registration.

The processing of the registration data serves the purpose of being able to offer you our services as a registered user. Without the provision of the information, the user account cannot be set up for you.

The orders you have placed can also be logged in your user account.

The processing of your personal data is based on Art. 6 (1) lit. b) GDPR.

The recording of your IP address as well as the date and time of your registration is based on our legitimate interest according to Art. 6 (1) lit. f) GDPR to be able to prove your registration in case of any disputes.

The data will be stored for as long as your user account exists. Deletion of your user account is possible at any time. If the user account is deleted, the data stored for it will also be deleted within the framework of the statutory retention periods. Such retention periods may exist in particular for information on orders subject to a charge. In these cases, the deletion of the data is replaced by its blocking.

​

III. Orders

When you place an order via our online shop, we process

First and last nameAddress details (street, house number, postcode, town)E-mail addressTelephone numberDate of birthCompany detailsBank and payment details (especially IBAN or credit card information)

In addition, we store your IP address and the date and time of the order.

If you have a user account and are logged in with it when you place an order, we can assign your order to this user account.

This is done for the purpose of fulfilling our contractual obligations towards you within the framework of the order. Without the provision of the information, an order cannot be placed and processed.

The legal basis for the processing is therefore Art. 6 (1) lit. b) GDPR.

The recording of your IP address as well as the date and time of your order is based on our legitimate interest according to Art. 6 (1) lit. f) GDPR to be able to prove your order in case of any disputes.

If necessary, your data will be transferred to the payment providers or shipping service providers we use.

We store your order data within the framework of the statutory retention periods. These are generally 6 to 10 years and result in particular from the requirement of proper accounting and from tax law requirements.

​

IV. Processing your requests

We process those personal data that you voluntarily provide to us when contacting us, especially by e-mail. Without their provision, we cannot process your enquiries.

This data will only be processed for this correspondence with you and for the purpose for which you have given us the data in each case as part of this communication, such as to process your enquiry or to contact you at your request.

In this case, the processing of personal data is carried out with your consent and is permissible pursuant to Art. 6 (1) lit. a) GDPR. Insofar as the processing is necessary for the fulfilment of a contract with you or for the implementation of pre-contractual measures upon your request, the legal basis is Art. 6 (1) lit. b) GDPR.

After your enquiry has been fully dealt with, your data in this respect will be deleted after any retention periods that may exist have expired, unless you have expressly consented to further use of your

​

V. Comment option for our blog

We offer you the opportunity to leave comments on individual articles on our website. The IP address of the author/contact holder and the sender name used for the comment will be stored.

This storage is done for our security in the event that the author’s comments infringe the rights of third parties and/or illegal content is posted. Thus, there is a self-interest on our part in the stored data of the author, especially since we may be prosecuted for such infringements.

A comparison of the data collected in this way with data that may be collected by other components of our site does not take place.

The legal basis for the processing is our legitimate interest, Art. 6 (1) lit. f) GDPR.

The data will be stored as long as your comment is available on our website. You have the option at any time to delete comments once they have been submitted with effect for the future. If you do not provide the mandatory data requested as part of the commenting option, it will not be possible to comment.

​

VI. Cookies

We use cookies in our online shop. These are data records that are stored by the internet browser on your terminal device. A cookie contains, for example, a string of characters that enables your browser to be uniquely identified when you return to the website. Cookies cannot execute programs or transfer viruses to your computer.

You can usually set your browser so that you are informed about the setting of cookies, the setting of cookies is excluded for certain cases or in general, or you only allow the setting of cookies in individual cases. You can also delete stored cookies in the settings of your browser. Without cookies, however, the functionality of our website may be limited.

We use cookies that are absolutely necessary for the operation of our online shop (“technically necessary cookies”) as well as cookies that are used for analysis, marketing or other convenience purposes (“other cookies”).

Specifically, we use the following cookies:

​

1. Hotjar

In addition, we may use Hotjar, a service provided by Hotjar Ltd, Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian’s STJ 3141, Malta. This is a service that can analyse behaviour within our online shop. Hotjar creates reports and visual representations for us about the type and extent of use of our online shop. An identification of the individual user is excluded.

The data processed in this regard includes your anonymised IP address as well as information on screen size, browser information and the date and time of access to our online shop.

We use Hotjar to analyse the use of our online shop and to continuously improve the user experience.

You can also prevent the collection and transmission of the data generated by the cookies and related to your use of the online shop (including your anonymised IP address) to Hotjar as well as the processing of this data by Hotjar by means of a browser add-on by downloading and installing the browser add-on at the following link:https://www.hotjar.com/policies/do-not-track/ Please note that you will need to reinstall the browser add-on to disable Hotjar again if your browser or device is later deleted, formatted or reinstalled.

The legal basis for the processing of your personal data is exclusively your consent within the meaning of Art. 6 (1) a) GDPR.

You can revoke your consent at any time with effect for the future by clicking on the corresponding link “Cookie settings”.

Recipient of the data is Hotjar.

The cookies used by Hotjar are stored at most a year on your device.

​

2. Google Maps

In our online shop we use the offer of Google Maps. This allows us to show you interactive maps directly in the website and enables you to use the map function comfortably.

We integrate Google Maps through the so-called two-click solution. In this way, we ensure that your personal data is only transmitted to Google when you actively click on a map.

Note: If you consent to the use of Google Maps, you also consent to your personal data being processed in the USA. According to the assessment of the European Court of Justice, there is only an insufficient level of data protection in the USA compared to the European Union. In particular, there is a risk that US authorities may access your data. If you do not consent to the use of Google Maps, your personal data will not be transferred to the USA.

Google then receives the information that you have visited a corresponding subpage of our online shop. This occurs regardless of whether you are logged into a Google user account or not. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at Google, you must log out before activating the map. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, which you must exercise by contacting Google.

Further information on the purpose and scope of data collection and processing can be found in Google’s privacy policy. There you will also find further information about your rights in this regard and setting options for protecting your privacy: http://www.google.de/intl/de/policies/privacy.

​

3. Vimeo

In our online shop, we use the embedding function of the video platform Vimeo, which is provided by Vimeo Inc., 555 West 18th Street, New York, 10011, USA (“Vimeo”), to display content (such as videos). When you access a part of our online shop with Vimeo content, a connection to Vimeo’s servers is established. As a result, Vimeo receives your IP address and the information that you have visited our website, provided that you play the Vimeo videos. If you are logged into your Vimeo account, this information can also be directly assigned to your personal profile. You can prevent this by logging out of your Vimeo account beforehand.

The details of data protection at Vimeo, in particular the nature, scope and purpose of data processing, can be found in the privacy policy at: https://vimeo.com/privacy.

To ensure an adequate level of data protection when transferring your personal data to the USA, we have concluded EU standard data protection clauses with Vimeo and activated Vimeo’s “Do Not Track” function.

The legal basis for this type of processing is exclusively your consent, which you can revoke at any time with effect for the future. The videos are therefore only played when you actively initiate this.

Note: If you consent to the use of Vimeo, you also consent to your personal data being processed in the USA. According to the assessment of the European Court of Justice, there is only an insufficient level of data protection in the USA compared to the European Union. In particular, there is a risk that US authorities may access your data. If you do not consent to the use of Vimeo, your personal data will not be transferred to the USA.

​

4. YouTube

In our online shop, we also use the embedding function of the YouTube video platform, which is provided by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (“YouTube”), a subsidiary of Google, to display content (such as videos). If you call up a part of our online shop with YouTube content, a connection to the servers of YouTube or Google can be established. As a result, they receive your IP address and the information that you have visited our online shop, provided that you play the YouTube videos. If you are logged into your YouTube account, this information can also be directly assigned to your personal profile. You can prevent this by logging out of your YouTube account beforehand.

YouTube also statistically evaluates the views of the videos using cookies, among other things, and uses this data independently without us being able to deactivate or influence this evaluation. However, we only integrate the videos via the so-called extended data protection mode, so that these cookies are only set by YouTube when you play the videos.

The processing is based on your consent within the meaning of Art. 6 (1) a) GDPR. You can revoke this consent at any time with effect for the future.

Note: If you consent to the use of YouTube, you also consent to your personal data being processed in the USA. According to the assessment of the European Court of Justice, there is only an insufficient level of data protection in the USA compared to the European Union. In particular, there is a risk that US authorities may access your data. If you do not consent to the use of YouTube, your personal data will not be transferred to the USA.

​

5. Social Media Plugins

We use social media plugins of

Meta Patforms Inc (Facebook; 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php),

Twitter Inc (1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy),

WhatsApp (650 Castro Street, Suite 120-219 Mountain View, California, 94041 USA; https://www.whatsapp.com/legal),

LinkedIn Inc (2029 Stierlin Court, Mountain View, California 94043, USA; http://www.linkedin.com/legal/privacy-policy), and

Instagram (1601 Willow Road, Menlo Park, CA, 94025, USA; http://instagram.com/about/legal/privacy/).

We use the so-called two-click solution. This means that when you visit our online shop or our blog, no personal data is initially passed on to the providers of the plugins. You can recognize the provider of the plugin by the respective logo. We open the possibility for you to communicate directly with the provider of the plugin via the button. Only if you click on the marked field and thereby activate it, the plugin provider receives the information that you have called up the corresponding website of our online offer.

By activating the plugin, personal data from you is therefore transmitted to the respective plugin provider and stored there (in the case of US providers, in the USA).

The legal basis for this type of processing is your consent within the meaning of Art. 6 (1) a) GDPR. You can revoke this at any time with effect for the future.

Note: If you consent to the use of the aforementioned social media plugins, you also consent to your personal data being processed in the USA. According to the assessment of the European Court of Justice, there is only an insufficient level of data protection in the USA compared to the European Union. In particular, there is a risk that US authorities may access your data. If you do not consent to the use of these services, your personal data will not be transferred to the USA.

​

C. Your rights

In connection with the processing of your personal data by us, you have the following rights:

I. Withdrawal of consent given

You can withdraw any consent given to us at any time with effect for the future.

​

II. Information

You have a right to information regarding the personal data stored about you. In addition, you have the right to be informed about the information listed in Art. 15 GDPR.

​

III. Correction and deletion

In addition, you have the right to have incorrect personal data corrected and incomplete personal data completed in accordance with Art. 16 GDPR and to have your personal data deleted if the conditions of Art. 17 GDPR are met.

IV. Restriction of processing

You can restrict the processing of your personal data under the conditions set out in Art. 18 GDPR.

​

V. Release of data and data transmission

In addition, you have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. You also have the right, where technically feasible, to have us transfer this data to another controller at your instruction. The right to data transfer only exists for personal data where the processing is based on consent pursuant to Art. 6 (1) lit. a) GDPR or on a contract pursuant to Art. 6 (1) lit. (b) GDPR and the processing is carried out with the help of automated procedures.

The right to transfer data to another controller is excluded if this would impair the rights and freedoms of other persons (e.g. personal data of third parties, our business and trade secrets or copyrights).

​

VI. Right of object

Pursuant to Art. 21 GDPR, you have the right to object to the processing of your personal data at any time on grounds relating to your particular situation, insofar as such processing is based on Art. 6 (1) lit. (e) or lit. (f) GDPR. In the event of such an objection, we will no longer process this data unless we can demonstrate that there are compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.

Insofar as we process your personal data for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing. In this case, we will no longer process your personal data for the purpose of direct marketing.

The assertion of all the above-mentioned rights is in principle free of charge for you.

However, in the case of manifestly unfounded or – especially in the case of frequent repetition – excessive requests relating to the rights under II. to VI. above, we may, in accordance with Art. 12 (5) GDPR, either

(i) charge a reasonable fee which takes into account the administrative costs of providing the information or communication or taking the action requested; or

(ii) refuse to act on the request.

To exercise your rights, please contact us at the addresses given above, in particular at https://contact@renact.com/

​

VII. Right of appeal

If you believe that we are not properly fulfilling our obligations under data protection law, you can contact the data protection supervisory authorities at any time.

​

D. Obligation to provide data

There is no legal or contractual obligation to provide us with personal data. However, the provision of data that is absolutely necessary for the provision of the respective service (see above) is necessary if you wish to make use of these services.

​

E. Updating of this privacy policy

From time to time, it may be necessary to update this privacy policy, for example due to new legal or regulatory requirements or new offers in our online shop. We will then inform you accordingly. In general, we recommend that you call up this privacy policy regularly to check whether there have been any changes. You can recognise such changes, among other things, by the fact that the status indicated at the very bottom of this document has been updated.

Status: May 2022