Privacy Policy

01Data Controller

Morenta operates as the data controller for all personal data processed through our website and services. You may contact us at any time regarding your data.

02Personal Data We Collect

We may collect and process the following categories of personal data, depending on your interactions with us:

• Identity data: Your full name, title, and any identification you provide when creating an account or placing an order.
• Contact data: Email address, telephone number, postal address, and billing address.
• Financial data: Payment card details (processed securely by our payment providers; we do not store full card numbers).
• Transaction data: Details of purchases, order history, and correspondence related to your orders.
• Technical data: IP address, browser type and version, time zone, device type, operating system, and unique device identifiers (when you consent to analytics cookies).
• Usage data: Information about how you use our website, including pages visited, time spent, and navigation paths.
• Communication data: Messages you send us via contact forms, email, or other channels.

03Purposes of Processing

We process your personal data for the following purposes, each supported by a lawful basis under GDPR:

• To process and fulfill your orders, including payment processing and delivery.
• To respond to your inquiries, support requests, and feedback.
• To send you order confirmations, shipping updates, and essential service communications.
• To send marketing communications where you have given explicit consent.
• To improve our website, products, and services through analytics and user feedback.
• To detect, prevent, and address fraud, security incidents, and abuse.
• To comply with legal obligations, including tax, accounting, and regulatory requirements.
• To protect our legitimate interests, such as defending legal claims and ensuring business continuity.

04Legal Basis for Processing

Under Article 6 of the GDPR, we rely on the following legal bases:

• Consent: When you explicitly agree to our Privacy Policy, Cookie Policy, or marketing communications.
• Contract: When processing is necessary to perform our contract with you (e.g., fulfilling orders).
• Legitimate interest: When we have a legitimate business interest that is not overridden by your rights (e.g., fraud prevention, website security).
• Legal obligation: When we must process data to comply with applicable laws.

05Retention Periods

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law:

• Order and inquiry data: 3 years from last contact for customer service purposes; up to 5 years for accounting records as required by Danish law.
• Marketing consent: Until you withdraw consent; we will cease processing upon request.
• Analytics data: Up to 26 months when analytics cookies are accepted.
• Technical and security logs: Up to 90 days for security monitoring and incident response.
• Legal and compliance records: As required by applicable retention obligations.

06Your Rights Under GDPR

As a data subject in the EU/EEA, you have the following rights:

• Right of access (Article 15): Request a copy of your personal data and information about how we process it.
• Right to rectification (Article 16): Request correction of inaccurate or incomplete data.
• Right to erasure (Article 17): Request deletion of your data ("right to be forgotten") where applicable.
• Right to restrict processing (Article 18): Request limitation of processing in certain circumstances.
• Right to data portability (Article 20): Receive your data in a structured, commonly used, machine-readable format.
• Right to object (Article 21): Object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent.
• Right to lodge a complaint: Lodge a complaint with the Danish Data Protection Agency (Datatilsynet) or your local supervisory authority.

To exercise any of these rights, contact us at question@whrixxenex.world. We will respond within one month.

07Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• HTTPS/TLS encryption for all data transmitted between your browser and our servers.
• Secure storage with access controls, encryption at rest where applicable.
• Regular security assessments and vulnerability testing.
• Limited access to personal data on a strict need-to-know basis.
• Employee training on data protection and confidentiality.
• Incident response procedures for data breaches.

08Data Sharing and Recipients

We do not sell your personal data. We may share data with the following categories of recipients:

• Service providers: Hosting, payment processing, email delivery, and analytics providers, all bound by data processing agreements.
• Legal and regulatory authorities: When required by law or to protect our rights.

Recipients outside the EU/EEA are subject to appropriate safeguards, including Standard Contractual Clauses approved by the European Commission.

09International Transfers

Where we transfer data outside the EU/EEA, we ensure adequate protection through mechanisms such as adequacy decisions, Standard Contractual Clauses, or Binding Corporate Rules. You may request details of these safeguards by contacting us.

10Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised "Last updated" date. We encourage you to review this policy periodically.