0

Privacy Policy

At Rgenic, we value your trust and are committed to protecting your privacy. This Privacy Policy describes how we collect, use, store, and protect your personal data in accordance with the EU General Data Protection Regulation (GDPR). We strive to always process your personal data within the EU/EEA to ensure the highest possible level of protection and transparency. Here, we also explain your rights as a customer, job applicant, participant in our lectures, or partner (such as influencers, athletes, and resellers) and how you can exercise them.

1. Data Controller

Rgenic AB, organization number 559371-5211 is the data controller responsible for processing your personal data under GDPR. This means we are responsible for ensuring that your data is handled in a lawful, secure, and transparent manner.

2. What Personal Data Do We Collect and Why?

We collect personal data to provide you with our dietary supplements, manage recruitment, organize lectures, collaborate with influencers, athletes, and resellers, offer you the best possible service, and fulfill our legal obligations. The data we collect may include:

2.1 Contact and Identity Information

  • What: Name, email address, phone number, and delivery address.
  • Why: To process and deliver your orders and communicate with you about your purchase.
  • Legal Basis: Performance of a contract (GDPR Article 6.1.b).

2.2 Payment Information

  • What: Invoice details, card numbers (handled by third parties), and payment history.
  • Why: To process and administer payments for your purchases.
  • Legal Basis: Performance of a contract and legal obligation (GDPR Article 6.1.b and 6.1.c).

2.3 Order and Purchase History

  • What: Information about ordered dietary supplements, order dates, and returns.
  • Why: To manage your order, provide customer support, and fulfill warranty obligations.
  • Legal Basis: Performance of a contract and legitimate interest (GDPR Article 6.1.b and 6.1.f).

2.4 Communication

  • What: Messages you send via email, contact forms, or phone.
  • Why: To respond to your inquiries and provide support.
  • Legal Basis: Legitimate interest in offering good customer service (GDPR Article 6.1.f).

2.5 Digital Data

  • What: IP address, device information, cookie data, and website usage.
  • Why: To improve the website, analyze user behavior, and display tailored offers.
  • Legal Basis: Consent (for non-essential cookies) and legitimate interest (for functional cookies, GDPR Article 6.1.a and 6.1.f).

2.6 Marketing Data

  • What: Email address and newsletter preferences.
  • Why: To send information about dietary supplements, promotions, lectures, and news.
  • Legal Basis: Consent (GDPR Article 6.1.a).

2.7 Recruitment Data

  • What: Name, contact details, CV, cover letter, and other application documents.
  • Why: To manage applications for jobs or internships at Rgenic.
  • Legal Basis: Legitimate interest in recruitment and, upon employment/internship, performance of a contract (GDPR Article 6.1.f and 6.1.b).

2.8 Lecture Data

  • What: Name, email address, phone number, and any preferences or questions related to the lecture.
  • Why: To administer registrations, send information about lectures (e.g., time and location), and follow up afterward.
  • Legal Basis: Performance of a contract (for bookings) or consent (for voluntary registration, GDPR Article 6.1.b and 6.1.a).

2.9 Partner Data (Influencers, Athletes, and Resellers)

  • What: Name, contact details, social media profiles (if applicable), payment details, and collaboration-related information (e.g., sales data or campaign results).
  • Why: To administer partnerships, communicate about campaigns, manage compensation, and fulfill agreements.
  • Legal Basis: Performance of a contract and legitimate interest in maintaining business relationships (GDPR Article 6.1.b and 6.1.f).

3. How Do We Collect Your Personal Data?

We collect data in the following ways:

  • Directly from you: When you place an order, create a customer account, sign up for a newsletter, contact us, apply for a job/internship, register for a lecture, or enter into a partnership with us as an influencer, athlete, or reseller.
  • Automatically: Through cookies and similar technologies when you visit our website (see Section 9).
  • From third parties: For example, from Stripe, Svea, or DHL sharing necessary information to complete your purchase or delivery, from references during recruitment, or from partners (e.g., social media platforms or payment services) during collaborations.

4. How Long Do We Store Your Data?

We store your personal data only as long as necessary for the purpose and in accordance with GDPR:

  • Order and payment data: Stored for 7 years under accounting laws.
  • Customer account: Stored as long as the account is active or until you request deletion.
  • Newsletter: Stored until you unsubscribe via the link in the email or contact us.
  • Support inquiries: Stored for up to 12 months after the matter is resolved, unless otherwise required by law.
  • Recruitment data: Stored for up to 2 years after the recruitment process ends (to address potential discrimination claims), unless you consent to longer storage for future opportunities.
  • Lecture data: Stored for up to 12 months after the lecture for follow-up purposes, unless otherwise agreed or consent is withdrawn.
  • Partner data: Stored during the collaboration and for up to 7 years after it ends to comply with accounting requirements or contractual obligations.
  • Digital data: Stored according to cookie settings (see Section 9).
  • After these periods, the data is securely deleted or anonymized.

5. Who Do We Share Your Data With?

We only share your data when necessary and always with GDPR-compliant entities:

  • Shipping companies: DHL to deliver your dietary supplements to the specified address.
  • Payment providers: Stripe and Svea to handle payments, including invoices, card payments, direct payments, and compensation to partners.
  • IT partners: For the operation of our website, email, and storage systems.
  • Marketing services: For sending newsletters and information about lectures or campaigns (only with consent).
  • Authorities: When required by law, e.g., the Swedish Tax Agency.
  • Recruitment partners: Potential external recruitment firms or references (for job/internship applications).
  • Partners: Influencers, athletes, and resellers may access limited information (e.g., campaign data) under agreements, and we may share necessary data with third parties (e.g., social media platforms) to carry out collaborations.
  • We collaborate only with third parties with whom we have agreements to protect your data in accordance with GDPR. Rgenic never sells your data to third parties for their own purposes.

6. Where Is Your Data Processed?

Rgenic strives to always process your personal data within the EU/EEA, where GDPR ensures strong data protection. In exceptional cases where data needs to be transferred to third countries (e.g., for certain technical services or collaborations with international platforms), this is done only with appropriate safeguards under GDPR, such as the EU Commission’s Standard Contractual Clauses.

7. Your Rights Under GDPR

As a customer, job applicant, lecture participant, or partner (such as an influencer, athlete, or reseller) with Rgenic, you have the following rights under GDPR:

  • Right to access: Request a record of the data we hold about you.
  • Right to rectification: Correct inaccurate or incomplete data.
  • Right to erasure (“right to be forgotten”): Request that we delete your data, unless it conflicts with legal requirements (e.g., accounting laws).
  • Right to restriction: Request that we restrict the processing of your data under certain circumstances.
  • Right to data portability: Obtain your data in a structured, machine-readable format.
  • Right to object: Object to processing based on legitimate interest (e.g., direct marketing).
  • Right to withdraw consent: Withdraw consent at any time for newsletters, lecture-related communication, or similar.

To exercise your rights, contact us at gdpr@rgenic.com. We will respond within 30 days. You may also file a complaint with the Swedish Authority for Privacy Protection (IMY) if you believe we have mishandled your data.

8. How Do We Protect Your Data?

We implement comprehensive technical and organizational measures to protect your personal data under GDPR:

  • Encryption: All data transfers occur via secure protocols (e.g., SSL/TLS).
  • Access control: Only authorized personnel have access to your data.
  • Secure storage: Data is stored on protected servers within the EU/EEA.
  • Regular reviews: We continuously monitor and update our security practices.

9. Cookies and Tracking Technology

We use cookies and similar technologies to:

  • Ensure website functionality (necessary cookies).
  • Analyze traffic and user behavior (analytical cookies).
  • Offer tailored promotions (marketing cookies).

You can manage which cookies are used via our cookie banner. More information is available in our Cookie Policy.

10. Marketing, Newsletters, Lectures, and Partnerships

If you have given your consent, we send newsletters with information about our dietary supplements, promotions, lectures, and health tips. When registering for our lectures, we may also use your data to send practical information and follow-ups. For influencers, athletes, and resellers, we may use your data to communicate about partnerships, campaigns, and compensation under agreements. You can unsubscribe from newsletters or lecture-related communication at any time via a link in the email or by contacting us. We do not use your data for profiling or automated decisions that legally affect you.

11. Changes to the Privacy Policy

We may update this policy to reflect changes in our operations or legislation. For significant changes, we will notify you via email or on our website. The latest version is always available at www.rgenic.com/privacy-policy.

12. Contact Us

If you have questions, comments, or wish to exercise your rights related to privacy policy, contact us at:

Email: gdpr@rgenic.com

Address: Rgenic AB, Laholmsvägen 22, 312 45 Veinge, Sweden

This Privacy Policy is effective as of January 1, 2026.