We only collect and process personal data insofar as this is necessary for the provision of our services and the performance of contracts, or where you have given us your consent.
Master data — name, address, email address, phone number
Payment data — bank details, payment method, transaction ID (encrypted)
Usage data — IP address, browser type, operating system, referrer URL, access time
Communication data — content of messages, enquiries and email correspondence
Contract data — order history, product selection, delivery address
No obligation to provide: Providing personal data is neither required by law nor by contract, except where necessary for contract performance. Without certain data, however, the contract cannot be concluded.
Legal basis for processing
We process your personal data on the basis of the following legal grounds of the GDPR:
Art. 6 (1) a GDPRConsent — e.g. newsletter sign-up, cookies
Art. 6 (1) b GDPRContract performance — order processing, delivery, payment
Art. 6 (1) c GDPRLegal obligation — accounting, tax obligations
We only store personal data for as long as necessary for the respective purposes or as required by statutory retention periods. After these periods have expired, the data is routinely deleted.
Customer data (contract)10 years (statutory retention pursuant to § 257 HGB, § 147 AO)
Invoice data10 years (tax law obligation)
Usage data / server logs7 days (automatic deletion thereafter)
Newsletter subscriptionUntil consent is withdrawn
Contact form / enquiries3 years after the communication ends
Cookies (technically necessary)End of session or a maximum of 1 year
Data sharing with third parties
Your data is generally only shared with third parties if this is necessary for contract performance, you have consented, or there is a legal obligation.
Shipping service providers — name and delivery address for parcel delivery (DPD)
Payment service providers — payment data for processing (e.g. PayPal, Stripe, Klarna)
Shopify Inc. — operator of the shop platform (data processing under Shopify's privacy policy)
Authorities — where legally required (e.g. tax authorities, law enforcement)
Third-country transfer: Some service providers (e.g. Shopify, Google) are based in the USA. Transfers take place on the basis of the EU Standard Contractual Clauses (Art. 46 (2) c GDPR) or the EU-US Data Privacy Framework.
Cookies & tracking
Our website uses cookies. Cookies are small text files stored on your device that your browser sends back on your next visit to the website. They allow us to recognise your browser.
Necessary cookiesTechnically required for shop operation (cart, session). No consent required.
Preference cookiesStore your settings (language, currency). Consent required.
Analytics cookiesMeasure website usage (e.g. Google Analytics). Consent required.
Manage consent: You can change your cookie settings at any time via our cookie banner or in your browser. Disabling necessary cookies may limit the functionality of the shop.
Data processing for orders
When you place an order in our shop, we collect the data required for contract processing. This data is used exclusively for the fulfilment of the purchase contract and is deleted after the statutory retention periods have expired.
The following data is processed as part of order processing:
Name, billing and delivery address
Email address and phone number (for shipping notifications)
Payment information (encrypted via payment service providers)
Order details (items, quantities, prices, order date)
IP address at the time of the order (security and fraud prevention)
Newsletter
With your consent you can subscribe to our newsletter. To do so, we need your email address and your confirmation that you agree to receive the newsletter (double opt-in procedure).
The data used to send the newsletter is used exclusively for this purpose. You can unsubscribe from the newsletter at any time via the unsubscribe link included in every email or by sending a message to info@racentis.com.
Legal basisArt. 6 (1) a GDPR (consent)
ProcedureDouble opt-in — confirmation via confirmation email required
UnsubscribeAt any time via the unsubscribe link in every email or by emailing us
Retention periodUntil consent is withdrawn
Your rights as a data subject
Under the GDPR you have the following rights, which you may exercise at any time against the controller:
Right of access (Art. 15)
You have the right to obtain confirmation as to whether and which personal data we process about you.
Right to rectification (Art. 16)
You have the right to request the correction of inaccurate or incomplete personal data.
Right to erasure (Art. 17)
You have the right to request the deletion of your personal data, provided that no statutory retention obligations apply.
Right to restriction (Art. 18)
You have the right to request the restriction of the processing of your personal data.
Right to data portability (Art. 20)
You have the right to receive your data in a structured, commonly used, machine-readable format.
Right to object (Art. 21)
You have the right to object at any time to the processing of your data based on legitimate interests.
Complaint: You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for North Rhine-Westphalia is the State Commissioner for Data Protection and Freedom of Information NRW, www.ldi.nrw.de.
Data security
We use technical and organisational security measures to protect your data against accidental or intentional manipulation, loss, destruction, or unauthorised access.
Our security measures are continuously improved in line with technological developments.
SSL/TLS encryption for all data transfers (HTTPS)
Secure password hashing procedures for customer accounts
Payment data is never stored on our servers (PCI-DSS compliant)
Regular security updates and penetration tests
Access to personal data only by authorised employees
Changes to this privacy policy
We reserve the right to amend this privacy policy at any time with effect for the future. The current version is always available on this page. Please check this page regularly for updates.
In the event of significant changes, we will inform you where technically possible and reasonable — e.g. by email or via a notice on our website.
