Effective Date: 29 October 2026
Last Updated: 29 October 2026
Data Controller: Renzue Media
Postal Address: Bengaluru, Karnataka, India - 560034
Data Protection Contact: privacy@renzue.com
1. Introduction
1.1. This GDPR / EU-UK Privacy Notice ("Notice") explains how Renzue Media("we", "us", "our") processes "personal data" relating to individuals located in the European Economic Area ("EEA") and the United Kingdom ("UK") when they visit or use renzue.com (the "Site").
1.2. This Notice supplements our main Privacy Policy and Cookie Policy. Where this Notice and the general Privacy Policy differ on matters governed by the EU GDPR or UK GDPR, this Notice prevails for EEA and UK residents.
1.3. Data Controller: For processing described in this Notice, Renzue Media acts as a data controller under Article 4(7) GDPR. Contact: privacy@renzue.com.
2. Lawful Bases for Processing (Article 6)
Under Article 6 of the EU GDPR and UK GDPR, we process personal data under the following lawful bases:
2.1 Account and Provision of Services
Lawful basis: Performance of a Contract (Article 6(1)(b)) to create accounts, authenticate logins, and manage user profile preferences.
2.2 Comments, Discussions, and Moderation
Lawful basis: Performance of a Contract (Article 6(1)(b)) and Legitimate Interests (Article 6(1)(f)) to operate an orderly, safe public discussion space.
2.3 Newsletter and Editorial Updates
Lawful basis: Consent (Article 6(1)(a)). Clear opt-in consent is obtained before sending newsletters; withdrawable at any time.
2.4 Analytics and Site Improvement
Lawful basis: Consent (Article 6(1)(a)) collected through Renzue Consent Preferences before non-essential analytics cookies load.
2.5 Security, Fraud Prevention, and Anti-Abuse
Lawful basis: Legitimate Interests (Article 6(1)(f)) in protecting platform integrity, preventing denial-of-service, and stopping malicious scraping.
2.6 Legal Compliance
Lawful basis: Compliance with a Legal Obligation (Article 6(1)(c)) where applicable law requires disclosure or record retention.
3. Special Category Data (Article 9)
We do not request or require sensitive special category data. When users voluntarily disclose opinions or details in public discussion threads, processing is based on Article 9(2)(e) (data manifestly made public by the data subject). We do not use special category data for advertising or profiling.
4. Your Data Subject Rights
EEA and UK individuals enjoy the following rights under Articles 12-22:
- Right of Access (Art. 15): Request a free electronic copy of personal data held about you.
- Right to Rectification (Art. 16): Correct inaccurate or incomplete information.
- Right to Erasure (Art. 17): "Right to be forgotten" upon account closure or consent withdrawal.
- Right to Restriction of Processing (Art. 18): Restrict processing while disputes or accuracy checks are resolved.
- Right to Object (Art. 21): Object to processing based on legitimate interests or direct marketing at any time.
- Right to Data Portability (Art. 20): Receive your submitted content in structured JSON or CSV format.
- Rights Related to Automated Decision Making (Art. 22): Renzue does not make purely automated legal-effect decisions.
To exercise any of these rights, email privacy@renzue.com. We respond within one month free of charge.
5. Withdrawing Consent
Where processing relies on consent, withdrawal is as easy as giving consent. You can unsubscribe from emails via the one-click footer link, adjust cookie categories in our Cookie Policy, or contact privacy@renzue.com.
6. International Transfers (Chapter V)
Because Renzue Media operates from India, personal data of EEA and UK users is transferred to and processed in India. We rely on the European Commission's Standard Contractual Clauses (SCCs - Implementing Decision (EU) 2021/914) and the UK International Data Transfer Addendum, supplemented by Transfer Impact Assessments (TIAs) and end-to-end encryption (TLS 1.2+ in transit and AES-256 at rest).
7. Security Measures (Article 32)
We enforce robust technical controls including bcrypt password hashing, role-based access limitation, web application firewalls, rate limiting, and encrypted offsite backups.
8. Supervisory Authority Complaints (Article 77)
You have the right to lodge a complaint with your local EU Member State supervisory authority (e.g., Data Protection Commission in Ireland, CNIL in France, BfDI in Germany) or the UK Information Commissioner's Office (ico.org.uk). We ask that you contact us first at privacy@renzue.com so we can resolve any issue promptly.
9. EU Representative (Article 27)
Article 27 EU Representative Contact:
Available on request via our mandated GDPR inquiry channel: privacy@renzue.com
Renzue Media, Bengaluru, Karnataka, India - 560034