Privacy & GDPR

Last updated: 22 April 2026

1. Data controller

RenewEarth SL is the data controller for personal data processed through OreNexus. Our registered office is at Paseo de Reding 43, 1º Izq, 29016 Málaga, Spain (N.I.F. B26785923).

2. Data we collect

• Account data: name, email, password hash, profile information.
• Usage data: pages viewed, features used, device and browser information.
• Content data: tracks, audio, images and metadata you upload.
• Payment data: handled by our payment processors; we do not store full card details.

3. How we use your data

• To provide, secure and improve the service.
• To communicate with you about your account and product updates.
• To comply with legal obligations.

4. Legal bases (EU GDPR)

We rely on contract performance, legitimate interests, consent (where required) and legal obligation as the lawful bases for processing.

5. Data sharing

We share data with vetted processors (hosting, analytics, payments, email) under data processing agreements. We do not sell your personal data.

6. International transfers

Where data is transferred outside the EEA, we rely on adequacy decisions or Standard Contractual Clauses.

7. Retention

We retain personal data for as long as your account is active and for a reasonable period afterward to comply with legal obligations.

8. Your rights

• Access, rectification and erasure of your data
• Restriction and objection to processing
• Data portability
• Withdrawal of consent at any time
• Complaint to a supervisory authority (in Spain, the AEPD)

9. Contact

For any privacy request or DPO enquiry, email privacy@orenexus.com.