Privacy policy

This privacy policy explains which personal data we collect when you visit this website, contact us or place an order, why we process it, who receives it and which rights you have. Last updated: 24 September 2026.

1. Who is responsible

The controller responsible for data processing on this website is:

Ronny Slotosch, trading as Serendre (sole trader)
Jügesheimer Weg 32, 63500 Seligenstadt, Germany
Email: info@serendre.com
Phone: +49 176 64148260

We process your personal data in accordance with the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and, for customers in the United Kingdom, the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What data we collect and why

Visiting the website. When you visit the website, technical data is processed automatically so that the pages can be delivered securely: IP address, date and time of access, browser type and version, operating system, referring website and the pages you accessed. Legal basis: our legitimate interest in providing a secure, functioning website (Article 6(1)(f) GDPR / UK GDPR).

Ordering and contract processing. When you place an order, we process the data needed to fulfil it: name, delivery and billing address, email address, phone number (if provided) and the details of your order. Legal basis: performance of a contract (Article 6(1)(b) GDPR / UK GDPR). Without this data we cannot process your order.

Customer account. If you create a customer account, we store your login details, your addresses and your order history so that you can view past orders and check out faster. You can delete your account at any time by sending us an email. Legal basis: performance of a contract (Article 6(1)(b) GDPR / UK GDPR).

Payment. Payments are processed by the payment provider you choose at checkout. Your payment details (for example your card number) are transmitted encrypted directly to the payment provider; we do not receive or store your full card details. We only receive a confirmation of the payment and the data required for bookkeeping. Legal basis: performance of a contract and our legal obligations (Article 6(1)(b) and (c) GDPR / UK GDPR).

Shipping. To deliver your order, we pass your name and delivery address and, where needed for delivery notifications, your email address or phone number to the carrier delivering your parcel. Legal basis: performance of a contract (Article 6(1)(b) GDPR / UK GDPR).

Returns, exchanges and complaints. When you register a return, an exchange or a complaint, we process your order number, contact details, the content of your message and, where you send them, photos of the item. Legal basis: performance of a contract and our legal obligations (Article 6(1)(b) and (c) GDPR / UK GDPR).

Contact by email, phone or contact form. When you contact us, we process the data you provide (name, email address, phone number and the content of your message) to answer your enquiry. Legal basis: performance of a contract where your enquiry relates to an order, otherwise our legitimate interest in answering your enquiry (Article 6(1)(b) and (f) GDPR / UK GDPR).

Spam protection. Our contact forms are protected by hCaptcha, a service of Intuition Machines, Inc. (USA), to prevent automated spam submissions. hCaptcha processes technical data such as your IP address and browser information. Legal basis: our legitimate interest in protecting our forms against abuse (Article 6(1)(f) GDPR / UK GDPR). Further information: hCaptcha privacy policy.

Newsletter. If you sign up for our newsletter, we use your email address to send you news about our products and offers. We only send the newsletter with your consent. You can unsubscribe at any time via the link in every newsletter email or by emailing us. Legal basis: your consent (Article 6(1)(a) GDPR / UK GDPR).

3. Shopify as our shop platform

This shop runs on Shopify, an e-commerce platform provided by Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland, together with its group companies, including Shopify Inc. in Canada. Shopify hosts the website, processes orders and provides the checkout and payment processing (Shopify Payments) on our behalf. Data may be processed on servers outside the United Kingdom and the European Economic Area; Shopify relies on recognised safeguards for such transfers, including adequacy decisions and standard contractual clauses. Further information: Shopify privacy policy (privacy.shopify.com).

4. Cookies and similar technologies

Necessary cookies. This website uses the cookies that are necessary to operate the shop: they keep your cart together, enable the checkout, remember your country and currency settings and provide basic security. Legal basis: our legitimate interest in a functioning shop (Article 6(1)(f) GDPR / UK GDPR) and, for storing information on your device, the exemption for strictly necessary cookies.

Analytics and marketing cookies. Beyond the necessary cookies, Shopify's analytics and marketing features can set cookies and process usage data (for example pages viewed, products added to the cart and device information) to measure how the shop is used and to show you relevant advertising. These cookies are only set after you have given your consent via our cookie banner. You can accept or decline them there and change your decision at any time. If you decline, these cookies are not set. Legal basis: your consent (Article 6(1)(a) GDPR / UK GDPR).

5. How long we keep your data

We keep personal data only for as long as it is needed for the purposes described above. Order and invoice data is kept for the statutory commercial and tax retention periods (up to 10 years). Correspondence about orders is kept for up to 6 years. Enquiries that are not related to an order are deleted once they have been fully resolved. Newsletter data is deleted when you unsubscribe. Server log data is kept for a short period for security purposes only.

6. Who receives your data

We share your personal data only where this is necessary to run the shop: with Shopify as our platform and payment provider, with the payment provider you choose at checkout (for example Apple Pay or Google Pay), with the carrier delivering your parcel, with hCaptcha for spam protection, and, where legally required, with public authorities. We do not sell your personal data.

7. International data transfers

Some of the service providers named above process data outside the United Kingdom and the European Economic Area, for example in Canada or the United States. Such transfers only take place where an adequacy decision exists or where appropriate safeguards are in place, such as the standard contractual clauses of the European Commission or the UK International Data Transfer Addendum.

8. Your rights

You have the following rights regarding your personal data:

Right of access to the data we hold about you (Article 15 GDPR / UK GDPR)
Right to rectification of inaccurate data (Article 16 GDPR / UK GDPR)
Right to erasure (Article 17 GDPR / UK GDPR)
Right to restriction of processing (Article 18 GDPR / UK GDPR)
Right to data portability (Article 20 GDPR / UK GDPR)
Right to object to processing based on legitimate interests (Article 21 GDPR / UK GDPR)
Right to withdraw your consent at any time with effect for the future (Article 7(3) GDPR / UK GDPR)

To exercise any of these rights, email us at info@serendre.com. We may ask you to confirm your identity before we process your request, and we respond within the statutory time limits.

You also have the right to lodge a complaint with a data protection supervisory authority. In the United Kingdom this is the Information Commissioner's Office (ICO), ico.org.uk. The supervisory authority responsible for us in Germany is the Hessian Commissioner for Data Protection and Freedom of Information (Der Hessische Beauftragte für Datenschutz und Informationsfreiheit), Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany.

9. Children

Our shop is not directed at children. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Security

We use encrypted connections (SSL/TLS) for the entire website and checkout. You can recognise an encrypted connection by the lock symbol in your browser's address bar. Please do not send sensitive information, such as card details, to us by email.

11. Changes to this policy

We update this privacy policy when our processing or legal requirements change. The current version is always available on this page, with the date of the last update shown at the top.

Related policies

Contact

Business name: Ronny Slotosch (trading as Serendre), sole trader
Business address: Jügesheimer Weg 32, 63500 Seligenstadt, Germany
Email: info@serendre.com
Phone: +49 176 64148260
Support: Monday to Friday, 9:00 AM to 3:00 PM GMT/BST (UK time), by email and phone