Privacy policy

1. Privacy at a Glance 

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data refers to any information that can be used to personally identify you. For detailed information on data protection, please refer to our Privacy Policy listed below.

Who is responsible for data processing

The entity responsible for data processing on this website is:

New-Renew GbR
Bungertstraße 77
66798 Wallerfangen
GERMANY

Phone: +49 1573 7815073
Email: info@new-renew.de

The controller is the natural or legal person which, alone or jointly with others, determines the purposes and means of the processing of personal data.

2. What data is automatically collected when you visit the website

If you use our website for informational purposes only—that is, without actively submitting information to us—we collect the data that your browser automatically transmits to our server. This includes, in particular:

  • the website accessed,
  • the date and time of access,
  • the amount of data transferred,
  • the source or link from which you accessed our website,
  • information about the browser used,
  • information about the operating system used,
  • the IP address used, in anonymized form if applicable.

This processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure, stable, and functional provision of our website. This data is not used or disclosed for any other purpose. However, we reserve the right to review server log files retrospectively if there are concrete indications of unlawful use.

3. Security of Data Transmission

To protect your data, this website uses SSL or TLS encryption. You can generally recognize an encrypted connection by the fact that the address bar of your browser begins with “https://” and a lock icon is displayed.

4. Website Hosting and Technical Provision

We use Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland, for hosting and displaying the website content. Data may also be transferred to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.

The data collected in connection with the use of our website is processed on this provider’s servers. A data processing agreement is in place with the provider. For transfers to recipients in Canada, an adequate level of data protection may exist where the statutory requirements for the application of the relevant adequacy decision are met.

We additionally use Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, to technically operate our digital product delivery system. When you purchase a digital product, your order data is transmitted to Cloudflare's infrastructure to generate and store your invoice, license file, and download links. Files are stored in Cloudflare R2 object storage; access tokens are temporarily cached in Cloudflare KV. A data processing agreement is in place with Cloudflare. Cloudflare participates in the EU–US Data Privacy Framework, which provides an adequate level of data protection for transfers to the United States.

5. Cookies and Similar Technologies

Our website uses cookies and similar technologies. Cookies are small text files that are stored on your device and help us provide and improve the website. When you first visit our website, a cookie banner appears, allowing you to set your preferences. Your selection is saved for 1 year and can be changed at any time via the “Cookie Settings” link in the website footer.

Categories

Essential
These cookies are essential for the technical operation of the website and cannot be disabled. They enable basic functions such as the shopping cart, checkout, login, security, and payment processing.

Statistics & Analysis
With your consent, these cookies help us understand how visitors use our website. The data collected in this process is anonymized or pseudonymized. It is used to improve content, functionality, and performance.

Marketing
Marketing cookies allow us to display ads on external platforms and measure their effectiveness. They are only set with your explicit consent.

Cookies Used

 Cookie Provider Purpose Category Duration

nr_cookie_consent

new-renew.shop

Saves your cookie consent

Essential

1 year

cart

Shopify

Saves the contents of your shopping cart

Essential

2 weeks

_shopify_s

Shopify

Session Management

Essential

30 minutes

_tracking_consent

Shopify

Saves the consent status for Shopify tracking

Essential

1 year

_shopify_y

Shopify

Anonymous visitor identification for Shopify Analytics

Statistics & Analysis

1 year

_ga

Google

Distinguishes visitors (Google Analytics)

Statistics & Analysis

2 years

_ga_*

Google

Session State for Google Analytics 4

Statistics & Analysis

2 years

_gid

Google

Distinguishes visitors (Google Analytics)

Statistics & Analysis

2 years

_kx

Klaviyo

Visitor Tracking for Email Marketing

Marketing

2 years

__kla_id

Klaviyo

Profile Identification for Klaviyo

Marketing

2 years

_fbp

Meta (Facebook)

Visitor Identification for Meta Pixel / Ads

Marketing

3 months

_fbc

Meta (Facebook)

Saves the click parameter from Facebook ads

Marketing

3 months

_gcl_au

Google

Conversion Tracking for Google Ads

Marketing

3 months

_gcl_aw

Google

Saves the click parameter from Google Ads

Marketing

3 months

_pinterest_ct_ua

Pinterest

Used by Pinterest to measure conversions, attribute visits and improve advertising relevance.

Marketing

1 year

_pinterest_ct_rt

Pinterest

Used by Pinterest for conversion tracking and advertising measurement.

Marketing

1 year

_pin_unauth

Pinterest

Used by Pinterest to identify unauthenticated users and measure ad interactions.

Marketing

1 year

 

Third-party provider

Third-party services are subject to their own privacy policies:

6. Contacting Us

When you contact us, for example by email or via a contact form, we process the data you provide solely to handle and respond to your inquiry.

The legal basis for this is generally Article 6(1)(f) of the GDPR. Our legitimate interest lies in the proper processing of your inquiry. To the extent that your inquiry is aimed at the conclusion or performance of a contract, the additional legal basis is Article 6(1)(b) of the GDPR. Your data will be deleted as soon as your inquiry has been fully processed and there are no legal retention obligations to the contrary.

7. Customer Account 

When you create a customer account, we process the personal data requested during the process to the extent necessary for setting up and managing the customer account. The legal basis for this is Article 6(1)(b) of the GDPR. The information required is specified in the respective form on our website.

You may request the deletion of your customer account at any time using the contact details provided above. After the customer account is deleted, the associated data will be deleted, provided that all contracts processed through it have been fully fulfilled, there are no legal retention obligations, and there are no legitimate interests that would preclude further storage.

Sign-in via Third-Party Providers

When you choose to sign in using Google or Facebook, we use the authentication service provided by the respective third-party provider. In doing so, the provider may receive information that you have accessed our website. If you are logged into your provider account at the time, the provider may also be able to associate this visit with your account there.

We receive only the data you have consented to share with us via the provider's permission dialog (typically name and email address). This data is used solely for authentication and account management purposes. The legal basis is Article 6(1)(b) GDPR.

Your data may be transferred to the United States. Google LLC and Meta Platforms Ireland Ltd. have implemented appropriate safeguards in the form of Standard Contractual Clauses (Art. 46(2)(c) GDPR).

For further information on data processing by the respective providers, please refer to their privacy policies:

8. Newsletters and Promotional Emails

Newsletter Subscription

If you subscribe to our newsletter, we use your email address to send you regular information about our offers. Additional information may be provided voluntarily and is used to address you more personally.

We use the double opt-in procedure for registration. This means that you will only receive newsletters once you have verified your registration via a confirmation link. In connection with the registration, we also store the IP address transmitted by the Internet service provider, as well as the date and time of registration, in order to be able to trace any potential misuse. 

The legal basis is your consent pursuant to Article 6(1)(a) of the GDPR. You can unsubscribe from the newsletter at any time by clicking the unsubscribe link in the newsletter or by sending us a message. After you unsubscribe, your email address will be removed from the newsletter distribution list, unless we have obtained separate consent or are permitted by law to use it for other purposes.

Advertising to Existing Customers

If you have provided us with your email address in connection with a purchase, we reserve the right to send you offers via email for similar goods or services of our own. This is done in accordance with the legal requirements for advertising to existing customers.

The legal basis is Art. 6(1)(f) GDPR in conjunction with § 7(3) UWG. Our legitimate interest lies in personalized direct marketing for our own similar offers. You may object to the use of your email address for this purpose at any time with future effect. Upon receipt of your objection, the use of your email address for advertising purposes will be discontinued immediately.

Sending via Klaviyo

We use Klaviyo, Inc., 125 Summer St., Ste 600, Boston, MA 02110, USA, to send newsletters and other promotional email communications.

The data provided for newsletter registration is transmitted to Klaviyo so that the emails can be sent on our behalf. The legal basis is Art. 6(1)(f) GDPR, insofar as it concerns the technical and organizational implementation of our email marketing. Insofar as performance measurement is carried out via web beacons or tracking pixels, this is based, according to the original text, on your explicit consent pursuant to Art. 6(1)(a) GDPR. In particular, open rates, interactions with newsletter content, and certain device information may be evaluated. You may revoke your consent to this tracking at any time with future effect.

A data processing agreement is in place with Klaviyo. According to the original text, Klaviyo is also affiliated with the EU-US Data Privacy Framework.

9. Data Processing in Connection with Orders

General Order Processing

To the extent necessary for contract fulfillment, payment processing, or the fulfillment of our other obligations, we disclose personal data to the respective service providers involved. The legal basis is generally Article 6(1)(b) of the GDPR.

To the extent that we are obligated under a contract to provide updates for digital products or goods containing digital elements, we also process the contact information provided during the order process to notify you of any updates we are required to provide. The legal basis for this is Article 6(1)(c) of the GDPR. In this case, your contact information is used exclusively for the purpose of providing this legally required information.

Klarna

If you select a payment method offered via Klarna, payment processing is handled by Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden.

For payment methods where you make an advance payment, the payment details and order information provided during the ordering process are transmitted to Klarna to the extent necessary for payment processing. For payment methods where Klarna makes an advance payment, additional personal data such as name, address, date of birth, email address, phone number, and, if applicable, information regarding an alternative payment method may be requested.

To safeguard our legitimate interest in assessing your creditworthiness, Klarna may conduct a credit check pursuant to Article 6(1)(f) GDPR. This may also involve obtaining identity and credit information from credit bureaus. Credit reports may contain probability scores based on mathematical and statistical methods. You may object to this processing; however, Klarna may still be entitled to process your data to the extent necessary for contractual payment processing.

PayPal

If you select a payment method offered via PayPal, payment processing is handled by PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

Depending on the payment method selected, the payment details provided during the ordering process and information about the contents of your order will be transmitted to PayPal to the extent necessary for payment processing. If a payment method is selected in which we or the payment provider make an advance payment, additional personal data may also be collected and processed for credit checks. The legal basis is Article 6(1)(b) of the GDPR and, insofar as a credit check is performed, Article 6(1)(f) of the GDPR. The same applies here: You may object to this processing to the extent permitted by law; any further processing required for payment processing remains unaffected.

Shopify Payments

If you use a payment method offered via Shopify Payments, payment processing is handled by Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. The payment details provided during the ordering process, as well as information about the content of your order, are transmitted to the provider to the extent necessary for payment processing. The legal basis is Article 6(1)(b) GDPR.

Digital Product Delivery via Cloudflare

When you purchase a digital product (e.g. mockup files), Shopify transmits your order data to our download service via a secured webhook. This service runs on Cloudflare infrastructure (Cloudflare Workers, Cloudflare R2, Cloudflare KV) operated by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA.

The following data is processed and stored in the course of this:

  • A PDF invoice containing your name, delivery address, and order details is generated and stored in Cloudflare R2 object storage. Retention period: 10 years in accordance with statutory retention requirements (§ 147 AO / § 257 HGB). Legal basis: Art. 6(1)(c) GDPR.
  • A license file (.txt) containing your order number and license type is stored in Cloudflare R2. Retention period: 10 years (§ 147 AO). Legal basis: Art. 6(1)(b) and (c) GDPR.
  • Cryptographically signed access tokens (download links) are temporarily cached in Cloudflare KV for up to 30 days per order to allow repeated access to your downloads from your customer account. Legal basis: Art. 6(1)(b) GDPR.

A data processing agreement is in place with Cloudflare. Cloudflare participates in the EU–US Data Privacy Framework. You can access your invoice and license at any time via your customer account on our website.

10. Cookie Consent Management

Our website uses a cookie consent tool to obtain and document consent for cookies and cookiebased services that require consent.

When you visit the website, a user interface appears where you can select which categories of cookies or services you wish to consent to. Cookies and services requiring consent are only loaded once you have provided the appropriate consent.

The tool sets technically necessary cookies to save your selected settings. According to the original text, personal data is generally not processed in this process. However, if personal data is processed in individual cases—for example, to store or log cookie settings—the processing is based on Article 6(1)(f) of the GDPR and additionally on Article 6(1)(c) of the GDPR, to the extent that we are legally obligated to obtain and document consent for non-essential cookies. Where necessary, a data processing agreement is in place with the provider of the consent tool. Further information can be found directly in the user interface of the tool used on our website.

11. Your Rights

Under the GDPR, you have the following rights in particular:

  • Right to erasure under Article 17 of the GDPR,
  • Right to restriction of processing under Article 18 of the GDPR,
  • Right to data portability pursuant to Art. 20 GDPR,
  • Right to withdraw consent pursuant to Art. 7(3) GDPR,
  • Right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR.

This processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure, stable, and functional provision of our website. This data is not used or disclosed for any other purpose. However, we reserve the right to review server log files retrospectively if there are concrete indications of unlawful use.

12. Right to Object

To the extent that we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object to such processing at any time with future effect for reasons arising from your particular situation.

If you object, we will cease processing the data in question unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

If personal data is processed for the purpose of direct marketing, you have the right to object to this processing at any time. In this case, the data in question will no longer be processed for direct marketing purposes.

13. How Long We Store Data

The length of time personal data is stored depends on the specific purpose of processing, the relevant legal basis, and, where applicable, statutory retention requirements, such as those under commercial or tax law.

  • We generally store data processed on the basis of consent until such consent is revoked.
  • We generally store data that we process for the performance or initiation of a contract for as long as necessary for the contractual relationship and beyond that, to the extent that statutory retention obligations apply.
  • We generally store data that we process on the basis of legitimate interests until you effectively object, provided there are no compelling legitimate grounds for further processing.
  • We generally store data that we process for direct marketing based on legitimate interests until you object to this processing.
  • PDF invoices and license files generated in connection with digital product purchases are stored for 10 years in accordance with statutory retention requirements (§ 147 AO / § 257 HGB).
  • Download access tokens for digital purchases are cached for up to 30 days after the order date to enable repeated access from your customer account.

Unless otherwise specified in this privacy notice regarding individual processing operations, personal data will be deleted as soon as it is no longer necessary for the purposes for which it was collected or otherwise processed.