This Privacy Policy describes how refusal (“we”, “us”, “our”) collects, uses, and discloses your personal data when you visit or make a purchase from www.refusial.com (the “Site”) or otherwise communicate with us.
We are committed to processing your personal data in strict compliance with applicable data protection laws, including the European Union General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and applicable German national data protection legislation (including the Bundesdatenschutzgesetz, “BDSG”).
—
1. Data Controller
For the purposes of the GDPR and other applicable data protection legislation, the data controller responsible for your personal information is:
Brand / Data Controller: refusial
Website: www.refusial.com
Contact Email: trash@refusial.com
If you have any questions regarding this Privacy Policy or our privacy practices, please contact us at the email address provided above.
—
2. Personal Data We Collect
When you visit the Site, interact with us, or place an order for our products (such as refuse bags and bins), we collect certain information about you, your device, and your interaction with the Site.
A. Information Collected Directly from You
Contact & Identity Information: Your name, email address, phone number, shipping address, and billing address.
Order & Transaction Information: Information regarding the products you purchase, order history, payment details, and fulfillment information.
Customer Support Communications: Any information you provide when corresponding with our customer service team via email.
B. Information Collected Automatically
Device & Usage Data: Information about your web browser, IP address, time zone, cookies installed on your device, pages or products viewed, search terms, and how you interact with the Site.
—
3. Legal Basis and Purposes of Processing
We process your personal data based on the following legal grounds under Article 6(1) of the GDPR:
Performance of a Contract (Art. 6(1)(b) GDPR): To process and fulfill your orders, manage payments, communicate order updates, deliver purchased goods within Europe, and provide customer support.
Compliance with Legal Obligations (Art. 6(1)(c) GDPR): To retain mandatory accounting, tax, and commercial records in accordance with statutory obligations under relevant European and local laws.
Legitimate Interests (Art. 6(1)(f) GDPR): To operate, maintain, and optimize our website functionality, ensure network security, defend legal claims, and improve user experience.
Consent (Art. 6(1)(a) GDPR): Where required by law (e.g., for non-essential cookies or direct marketing subscriptions), we process data based on your explicit consent, which you may withdraw at any time.
—
4. Payment Processing with Stripe
To process payment transactions on our Site, we utilize the payment processing services of Stripe.
When you place an order, payment information (such as credit/debit card details, payment authentication information, and transaction data) is transmitted directly to Stripe. We do not store or directly handle sensitive payment card details on our servers.
Payment Service Provider: Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland) / Stripe, Inc.
Data Processing Purpose: Secure processing of payment transactions, fraud prevention, and regulatory financial compliance.
Legal Basis: Performance of a contract (Art. 6(1)(b) GDPR) and legitimate interest in secure payment administration (Art. 6(1)(f) GDPR).
Stripe acts as an independent data controller or joint processor for certain processing activities related to financial screening and compliance. For more details on how Stripe processes your data, please review Stripe’s Privacy Policy at https://stripe.com/privacy.
—
5. Third-Party Service Providers and Data Sharing
We share your personal data with select third-party service providers who assist us in operating our storefront, managing orders, and delivering goods. These include:
E-commerce & Hosting Infrastructure: Service providers supplying website hosting, server maintenance, and database administration.
Logistics & Delivery Partners: Transport and courier services responsible for delivering purchased items to your designated European shipping address.
Professional Advisors & Authorities: Legal advisors, auditors, or public authorities where required by compulsory legal or regulatory frameworks.
All service providers processing personal data on our behalf are contractually bound under Data Processing Agreements pursuant to Article 28 GDPR to implement appropriate technical and organizational measures and to process data strictly in accordance with our instructions.
—
6. International Data Transfers
As our operations target European customers, your personal data is primarily stored and processed within the European Economic Area (EEA). If personal data is transferred outside the EEA (for instance, to international technology infrastructure providers), we ensure appropriate safeguards are established in accordance with Chapter V of the GDPR. This includes utilizing Standard Contractual Clauses (SCCs) approved by the European Commission or relying on adequacy decisions.
—
7. Data Retention Period
We retain your personal data only for as long as necessary to fulfill the operational purposes for which it was collected, or to comply with statutory legal requirements under European and national laws.
Specific retention criteria include:
Order & Transaction Records: Retained for the duration of the contractual relationship and subsequently kept for up to 10 years following the end of the relevant calendar year to comply with statutory commercial and tax record retention requirements.
General Enquiries & Correspondence: Retained for up to 3 years following the resolution of your inquiry to manage legal claims or statutory limitation periods.
Technical Logs & Usage Data: Retained for a limited period, typically up to 30 days, unless longer retention is required for security analysis or operational troubleshooting.
When personal data is no longer necessary for these purposes, it is securely deleted or anonymized.
—
8. Data Security
We implement rigorous physical, technical, and organizational security measures to protect your personal data against unauthorized access, loss, alteration, or disclosure. Standard encryption protocols (such as HTTPS and SSL/TLS) are utilized during data transmission.
While we maintain robust administrative and technical protections designed to safeguard your information, please note that no method of transmission over the Internet or electronic storage can be considered entirely immune to every theoretical vulnerability.
—
9. Your Rights Under the GDPR
If you reside within the European Union or European Economic Area, you hold the following statutory rights regarding your personal data:
Right of Access (Art. 15 GDPR): You have the right to request confirmation as to whether your personal data is being processed and to obtain a copy of that data.
Right to Rectification (Art. 16 GDPR): You have the right to request the prompt correction of inaccurate or incomplete personal data.
Right to Erasure / “Right to be Forgotten” (Art. 17 GDPR): You may request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or where legal grounds for retention no longer apply.
Right to Restriction of Processing (Art. 18 GDPR): You may request that we restrict the processing of your personal data under certain specified conditions.
Right to Data Portability (Art. 20 GDPR): You have the right to receive your personal data in a structured, commonly used, and machine-readable format, or have it transferred directly to another controller where technically feasible.
Right to Object (Art. 21 GDPR): You have the right to object to the processing of your personal data based on legitimate interests (Art. 6(1)(f) GDPR) at any time.
* Right to Withdraw Consent (Art. 7(3) GDPR): Where processing is based on your consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
To exercise any of these rights, please submit your request to trash@refusial.com.
Right to Lodge a Complaint
You also have the right to lodge a complaint with a competent supervisory authority responsible for data protection, in particular within the EU Member State of your habitual residence, place of work, or place of the alleged infringement.
—
10. Cookies and Tracking Technologies
Our Site uses essential cookies required for basic website operation, session management, shopping cart maintenance, and security checks. Non-essential cookies (such as analytics or preference cookies) are deployed only with your prior explicit consent obtained via our cookie consent interface