Résidence Club

Privacy Policy

1. Data controller

The party responsible for data processing on this website within the meaning of the EU General Data Protection Regulation (GDPR) is:

ORANGE MANGO GmbH
represented by its Managing Director Andrew Koob
Martin-Luther-Straße 7D
97072 Würzburg
Germany
Email: info@residence-club.store

2. General notes on data processing

We process personal data of our customers only to the extent necessary to provide a functional website, to perform a contract, and to comply with legal obligations. Processing usually takes place only with consent (Art. 6 (1) lit. a GDPR), for contract performance (Art. 6 (1) lit. b GDPR), to comply with a legal obligation (Art. 6 (1) lit. c GDPR), or to safeguard legitimate interests (Art. 6 (1) lit. f GDPR).

3. Hosting via Shopify

This website is hosted on servers operated by Shopify International Limited, Victoria Buildings, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"). Shopify processes data on our behalf under a data processing agreement (Art. 28 GDPR). Data may be transferred to the United States and other third countries, secured by EU standard contractual clauses and additional safeguards. More information at shopify.com/legal/privacy.

When the website is accessed, the following data is processed in server log files: IP address, date and time of access, requested URL, referrer URL, browser used, operating system. This is done to provide the service and ensure IT security (Art. 6 (1) lit. f GDPR).

4. Order processing

When you place an order, we process the following data: first and last name, shipping and billing address, email address, optional phone number, payment details, and order contents. The legal basis is Art. 6 (1) lit. b GDPR (contract performance) and Art. 6 (1) lit. c GDPR (tax and commercial-law retention obligations; the periods are set out in section 15).

5. Online withdrawal function

You can declare your withdrawal electronically using the withdrawal function on our website. We process the data you enter (name, order number, email address, optional details) together with the date and time of receipt, in order to match the withdrawal to your order, to send you the acknowledgement of receipt required by law, and to reverse the contract. Legal basis: Art. 6 (1) lit. b and lit. c GDPR in conjunction with § 356a German Civil Code.

6. Payment providers

Payments are processed by external payment providers. Payment data is transmitted directly to the respective provider for contract performance (Art. 6 (1) lit. b GDPR).

  • Shopify Payments (Shopify International Limited, Ireland) — processes card and SEPA payments. Details: shopify.com/legal/privacy.
  • Klarna (Klarna Bank AB, Sweden) — processes Pay Later / instalments. Details: klarna.com. When you choose "Pay later" or instalments, Klarna carries out a credit assessment and may obtain information from, and transmit data to, credit agencies for that purpose.
  • PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg) — processes PayPal payments. Details: paypal.com.

7. Shipping providers

To deliver your order, we share your name and shipping address with carriers (e.g. DHL, DPD). Legal basis: Art. 6 (1) lit. b GDPR.

8. Customer account

You may optionally create a customer account. We process your email address and a password you choose. You may have the account deleted at any time. Legal basis: Art. 6 (1) lit. b GDPR.

9. Newsletter and signup pop-up

With your consent (Art. 6 (1) lit. a GDPR), we send you newsletters about new editions and drops. Your email address is stored in our Shopify customer database and the newsletters are sent using Shopify Email, provided by Shopify International Limited, Victoria Buildings, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland, as our processor under Art. 28 GDPR. We process your email address and, where applicable, whether an email was opened or a link was clicked. You may withdraw your consent at any time via the unsubscribe link in every email or by writing to us; withdrawal does not affect the lawfulness of processing carried out before it.

The signup pop-up on this website is provided by EcomSend Pop Ups (CWILL INC, 201 Commonwealth Ct, Ste 220, Cary, NC 27511-4471, USA). When you enter your email address there, it is transmitted to this service and written into our Shopify customer database. Data transfers to the USA are based on the EU-US Data Privacy Framework and/or standard contractual clauses. Details: channelwill.com/privacy-policy-channelwill.

10. Web fonts

The typeface used on this website (Cormorant, Open Font License) is hosted on our own server infrastructure at Shopify and delivered from there. No connection to Google servers is established when you visit this site, and no data is transmitted to Google for this purpose.

11. Reviews via Judge.me

We use Judge.me (Judge.me, 88 Wharf Road, London N1 7UX, United Kingdom) to collect and display product reviews. When you submit a review we process the data you provide (name, optional email, review text, photo/video). Legal basis: Art. 6 (1) lit. a GDPR (consent) and Art. 6 (1) lit. f GDPR (legitimate interest in product reviews). Details: judge.me/privacy.

After an order has been delivered, Judge.me sends you a single email inviting you to review the item. We use your email address for this on the basis of § 7 (3) of the German Act Against Unfair Competition and Art. 6 (1) lit. f GDPR (legitimate interest in feedback on our own goods). You may object to this at any time, at no cost beyond your standard transmission rates — either through the unsubscribe link in the email or by writing to info@residence-club.store. We will then send you no further invitations. Objecting has no effect on your order.

Judge.me processes this data on our behalf under Art. 28 GDPR. The company is based in the United Kingdom, for which the European Commission has issued an adequacy decision under Art. 45 GDPR, so no further safeguards are required for the transfer.

12. Cookie consent

Cookie preferences on this site are managed by the consent banner built into Shopify (Shopify International Limited, Dublin, Ireland). Your choice is stored on the website and passed to the services on the page, so that non-essential cookies are only set once you have agreed. Legal basis: Art. 6 (1) lit. c GDPR (obligation to document consent).

13. Cookies

We use technically necessary cookies (cart, login session) on the basis of Art. 6 (1) lit. f GDPR. Cookies that are not strictly necessary (analytics, marketing) are only set with your consent (Art. 6 (1) lit. a GDPR; § 25 (1) TDDDG). You can change your selection at any time via the cookie banner ("Cookie settings" in the footer).

14. Affiliate programme (UpPromote)

We run a partner programme using UpPromote, a service of Secomapp (56 Nguyen Chi Thanh, Da Nang, Vietnam). If you reach our shop through a partner's referral link, a cookie is set that records which partner referred you. It is kept for thirty days. If you place an order within that period, the order is attributed to that partner so their commission can be calculated. Processed for this purpose are the referral identifier, the time of the click, the pages viewed and, in the event of a purchase, the order number and order value. No name or address of the buyer is passed to the partner.

This cookie is not strictly necessary and is therefore only set with your consent (Art. 6 (1) lit. a GDPR; § 25 (1) TDDDG). You can withdraw your consent at any time via the cookie banner. Where partners are located outside the EU, transfer takes place on the basis of the EU standard contractual clauses. Further information: uppromote.com/privacy-policy.

15. Google Merchant Center and Google Ads

We transmit our product data — title, description, price, availability and product images — to Google Merchant Center, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, so that our items can appear in Google's product search. No personal data is transmitted in this process.

We also use Google services for reach and conversion measurement (Google Ads, Google Analytics). This processes your IP address, information about your device and browser, and your behaviour on this website, and stores cookies on your device.

The sole legal basis is your consent under Art. 6 (1) lit. a GDPR and § 25 (1) of the German Telecommunications Digital Services Data Protection Act. Without your consent in the cookie banner, these services are not loaded. You may withdraw your consent at any time via "Cookie settings" in the footer; the lawfulness of processing carried out before withdrawal remains unaffected.

Transfer to the USA cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework, for which the European Commission has issued an adequacy decision under Art. 45 GDPR. Details in Google's privacy policy at policies.google.com/privacy.

16. Storage duration

We only store personal data for as long as it is necessary for the purposes stated or for as long as statutory retention periods require. We keep accounting vouchers such as invoices for eight years, books and records for ten years, and commercial and business letters for six years (§ 147 German Fiscal Code, § 257 German Commercial Code). Once those periods expire, we delete the data.

17. Your rights

You have the following rights:

  • Access to your data (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure ("right to be forgotten", Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing based on legitimate interests (Art. 21 GDPR)
  • Withdrawal of consent with effect for the future (Art. 7 (3) GDPR)

To exercise these rights, contact info@residence-club.store. You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

18. Changes to this privacy policy

We reserve the right to amend this privacy policy so that it always reflects current legal requirements or changes to our services. The version current at the time of your next visit will then apply.