Reins
Kleiland 3A
8271RV IJsselmuiden
The Netherlands
Chamber of Commerce: 72005831
VAT: NL001121914B62
Email: info@reins.cc

---

1. Who We Are

Reins operates https://www.reins.cc. We are the data controller for all personal data collected via this website.

We process personal data in accordance with:

• General Data Protection Regulation (EU) 2016/679 (GDPR)

• Dutch Telecommunications Act (Telecommunicatiewet)

• Applicable EU ePrivacy rules

---

2. What Personal Data We Collect

We may collect the following categories of personal data:

A. Account & Order Data

• Name

• Billing & shipping address

• Email address

• Phone number

• Order history

• Payment status

B. Technical Data

• IP address

• Browser type

• Device information

• Cookies & tracking identifiers

C. Marketing & Behavioral Data

• Website browsing behavior

• Products viewed

• Cart activity

• Email interaction (opens & clicks)

• Advertising engagement

---

3. Legal Bases for Processing (GDPR)

We process personal data based on:

• Article 6(1)(b) – Contract performance (orders & payments)

• Article 6(1)(c) – Legal obligation (tax/accounting)

• Article 6(1)(f) – Legitimate interest (customer service & soft opt-in marketing)

• Article 6(1)(a) – Consent (newsletters, tracking & remarketing cookies)

---

4. Shopify (Website Platform)

Our webshop is hosted by Shopify Inc.

Shopify processes:

• Order details

• Payment processing data

• Technical data

• Fraud prevention data

Shopify may process data outside the EEA. Transfers are safeguarded via:

• Standard Contractual Clauses (SCCs)

• EU-U.S. Data Privacy Framework (where applicable)

Shopify Privacy Policy:
https://www.shopify.com/legal/privacy

---

5. Email Marketing & Abandoned Cart (Klaviyo)

We use Klaviyo Inc. for email marketing and automation.

5.1 Abandoned Cart Emails (Soft Opt-In)

If you enter your email address during checkout but do not complete your purchase, we may send reminder emails regarding your cart.

This is based on:

• Dutch Telecommunications Act (Article 11.7)

• Article 6(1)(f) GDPR (legitimate interest)

Conditions:

• It concerns similar products/services

• You can opt out at any time

• Clear unsubscribe link included

5.2 Newsletters

Newsletters are only sent with explicit consent (Article 6(1)(a) GDPR).

5.3 Email Tracking & Profiling

Our emails may contain tracking pixels to measure:

• Open rates

• Click behavior

• Campaign performance

This may constitute profiling for marketing optimization purposes. You may object at any time.

Klaviyo Privacy Policy:
https://www.klaviyo.com/legal/privacy-policy

---

6. Google Services

We use:

• Google Analytics 4

• Google Ads

• Google Tag Manager

• Google Enhanced Conversions (if applicable)

These services collect:

• Pseudonymized IP address

• Device information

• Site behavior

• Conversion data

We use:

• IP anonymization (where applicable)

• Consent Mode

• Cookie-based tracking only after consent

Google Privacy Policy:
https://policies.google.com/privacy

---

7. Meta (Facebook & Instagram Pixel)

We use the Meta Pixel to:

• Track conversions

• Create custom audiences

• Optimize advertising

• Perform remarketing

Meta may combine collected data with your Facebook/Instagram profile.

Meta acts as a joint controller for certain processing activities under GDPR.

Meta Privacy Policy:
https://www.facebook.com/privacy/policy/

Meta Data Processing Terms apply.

---

8. Cookies

We use the following cookie categories:

A. Strictly Necessary Cookies

Required for:

• Checkout

• Payment processing

• Security

• Session management

Legal basis: Article 6(1)(b) GDPR

B. Analytics Cookies

Used to:

• Measure website usage

• Improve performance

Legal basis: Consent (Article 6(1)(a))

C. Marketing & Remarketing Cookies

Used for:

• Personalized ads

• Retargeting

• Conversion tracking

Legal basis: Consent

Cookies are placed only after consent via our cookie banner.

You may withdraw consent at any time via cookie settings.

---

9. Remarketing & Behavioral Advertising

We use remarketing technologies to show relevant ads on:

• Google

• Facebook

• Instagram

This may involve cross-device tracking and audience matching.

You may opt out via:

• Our cookie banner

• Your Google Ad settings

• Your Facebook Ad settings

---

10. International Data Transfers

Some service providers are located outside the EEA.

Transfers are safeguarded by:

• EU-U.S. Data Privacy Framework (DPF)

• Standard Contractual Clauses (SCCs)

• Additional technical safeguards

---

11. Data Retention

We retain personal data as follows:

• Order data: 7 years (tax law obligation)

• Customer account data: Until account deletion

• Marketing data: Until withdrawal of consent or 24 months inactivity

• Analytics data: Maximum 26 months (Google standard)

Data is deleted or anonymized when no longer necessary.

---

12. Your Rights (GDPR)

You have the right to:

• Access your data

• Rectify incorrect data

• Erase your data

• Restrict processing

• Data portability

• Object to processing

• Withdraw consent at any time

• Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)

---

13. Security Measures

We implement:

• SSL encryption

• Access restrictions

• Secure hosting

• Data minimization

• Processor agreements

No online transmission is 100% secure.

---

14. Children’s Data

Our services are not intended for children under 16 years of age.

We do not knowingly collect data from minors.

---

15. Changes to This Policy

We may update this Privacy Policy from time to time.

The latest version will always be available on our website.