Privacy Notice · Renomex

1 Who is responsible for your data

The controller of your personal data is RENOMEX SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ (RENOMEX sp. z o.o.), ul. Inwalidów Wojennych 10, 43-603 Jaworzno, Poland, entered in the National Court Register under KRS number 0001037787. For anything about your data, write to hello@renomexxs.eu. We have not appointed a data protection officer; the same address reaches the people who handle data requests.

2 What we collect, why, and for how long

Personal data we process, the purpose, the legal basis and the retention period
Data	Why	Legal basis (GDPR)	How long
Checkout details: first and last name, email address, company name (optional), billing address and country	To make and perform the contract, send your access details and answer questions about your order. We collect them on our own site and pass them to our payment service provider, which uses them to create you as a customer, take the payment and calculate the tax due in your country.	Contract, art. 6(1)(b); legal obligation for accounting, art. 6(1)(c)	As long as needed to perform the order and handle any claims, and for the accounting records required by Polish accounting law: five years counted from the end of the year in which the order was paid.
Order file on our server: order reference, courses, total, the checkout details above and the payment status	To show your order page, set up access and keep a record of the sale.	Contract, art. 6(1)(b); legal obligation, art. 6(1)(c)	As for the checkout details: five years from the end of the year of payment.
Payment details: card or wallet data	Entered only on the secure payment page and processed by our payment service provider. We do not receive your card number; we only see whether the payment succeeded, the amount and the currency.	Contract, art. 6(1)(b)	Kept by our payment service provider under its own privacy notice.
Chat: your messages, files you send, the page you wrote from and your email address if you choose to give it	To answer you, and to reply by email if you leave before we do.	Legitimate interest in answering enquiries, art. 6(1)(f); steps before a contract, art. 6(1)(b)	Deleted automatically 365 days (about 12 months) after the last message in the conversation.
Visit log: time, IP address, country, page requested, referring page and browser (user agent)	To keep the site secure, detect abuse and prevent payment fraud. The country is looked up from the IP address.	Legitimate interest in the security of the site and of payments, art. 6(1)(f)	Deleted automatically after 90 days.
“Remember me” cookie with your checkout details, stored in your browser	To fill in the checkout form next time. Set only if you tick the box at checkout.	Consent, art. 6(1)(a)	180 days, or until you untick the box at your next checkout or delete it in your browser.
Emails you send us	To answer you and keep a record of the exchange.	Legitimate interest, art. 6(1)(f); contract, art. 6(1)(b) where they concern an order	As long as the matter is open, and for an order, as long as the order records.

Giving your checkout details is necessary to buy a course: without them we cannot make the contract or send you access. Everything you write in the chat, including your email address, is voluntary.

3 Who receives your data

We do not sell your data and do not share it for advertising. It reaches the following categories of recipients, only as far as each one needs it:

Our payment service provider, which receives your checkout details and processes the payment. It acts as merchant of record for the payment and is a separate controller of the payment data under its own privacy notice.
Our hosting provider, which runs the server holding the site, the order files, the chat and the visit log, as our processor.
An IP location service, to which our staff tool sends IP addresses from the visit log to look up the country. Only the address is sent.
The image servers of the stock-photo library (Pexels). The photographs on this site, including the picture in the chat, are loaded directly from those servers, so they receive your IP address and browser details when a page loads.
The public content delivery network that serves the payment card icons (jsDelivr) at the foot of every page, which receives your IP address in the same way.
Google Fonts. The typefaces of this site are loaded from Google’s servers, which receive your IP address and browser details when a page loads.
Public authorities, such as tax offices or courts, where the law requires us to disclose data.

4 Transfers outside the European Economic Area

Some of these providers, including Google and our payment service provider, are based in or use servers outside the European Economic Area, notably in the United States. Where data goes outside the EEA, it is protected by an adequacy decision of the European Commission (for the United States, the EU–US Data Privacy Framework for certified companies) or by the European Commission’s standard contractual clauses. You can ask us for information about these safeguards at hello@renomexxs.eu.

5 Your rights

You have the right to access your data and receive a copy, to have it corrected, to have it erased, to restrict its processing, to receive the data you gave us in a portable format, and to object to processing based on our legitimate interests. Where we rely on your consent, you may withdraw it at any time; this does not affect what was done before. Some rights are limited by law — for example, we cannot erase order records we are required to keep for accounting.

To use any of these rights, write to hello@renomexxs.eu. We reply within one month.

If you think we handle your data unlawfully, you may complain to the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, Poland, or to the data protection authority of the country where you live or work.

6 No automated decisions

We do not make decisions about you based solely on automated processing, and we do not profile you. There are no analytics or advertising tools on this site; the cookies it uses are listed in the Cookie Notice.

7 Changes to this notice

If the way we process data changes, we update this notice and the date at the top of it. If you have an open order, we tell you by email about changes that affect you.