Privacy policy

1. Data Controller
The data controller for the processing of data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

ROOGU Retail Robert Krukowski
Demianiplatz 16
02826 Görlitz
Germany
info@roogu.com

1.2 This website uses SSL or TLS encryption. This is done for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the data controller). An encrypted connection can be recognized by the "https://" and the lock symbol in your browser's address bar.

2. Provision of Personal Data
Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor necessary for the conclusion of a contract. You are not obliged to provide the data. There are no consequences if you do not provide your data. This only applies if no other information is given in the subsequent processing operations.
"Personal data" means any information relating to an identified or identifiable natural person. This includes information and details such as your name, address or other mailing address, telephone number, or email address.

3. Collection, Processing, and Use of Personal Data for Orders
If you have provided us with personal data, we will only use it to answer your inquiries, process contracts concluded with you, and for technical administration.
Providing data is necessary for the conclusion of a contract. Without providing data, the conclusion of a contract is not possible. Processing is carried out in accordance with Art. 6(1)(b) GDPR and is required for the fulfillment of the contract with you. Your personal data will only be passed on or transmitted to third parties if this is necessary for the purpose of contract processing - disclosure of order data to suppliers, service providers for order processing, web hosting, dropshipping dealers, IT service providers - is necessary for billing purposes, or if you have given your prior consent. The extent of data transmission is limited to a minimum. Data will not be passed on to third parties without your explicit consent. You have the right to revoke your consent at any time with future effect.

4. Duration of Storage
Once contract processing is complete, the data will initially be stored for the duration of the warranty period, and then stored in accordance with legal retention periods, especially tax and commercial retention periods, and deleted after expiration of the period, unless you have consented to further processing and use.

5. Shopify
Our online shop uses the Shopify Inc. platform ("Shopify"). When you place an order in our shop, you consent to the storage and processing of your personal data by Shopify. To achieve this, your personal data will be forwarded and processed in the United States at the Shopify data center. This storage and processing of data is for the purpose of supporting and processing your orders, your authentication, payment processing, and improving Shopify's services.
Shopify uses customer personal information to block certain transactions that appear fraudulent through automated decisions.
You can read Shopify's privacy policies here:
https://www.shopify.com/legal/privacy?utm_source=exacttarget&utm_medium=email&utm_campaign=support&utm_content=gdpr

6. PayPal and Google Pay
PayPal (PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg) and Google Pay (Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA "Google") are online payment service providers. Payments are processed via so-called PayPal and Google accounts. Additionally, with PayPal, it's possible to process virtual payments via credit cards if a user doesn't have a PayPal account.
If you select "PayPal" or "Google Pay" as the payment method during the order process in our online shop, your data will be automatically transmitted to PayPal or Google Pay. When you select these payment options, you consent to the transmission of personal data required for payment processing.
The personal data transmitted to PayPal or Google Pay usually includes first name, last name, address, email address, telephone number, mobile phone number, IP address, or other data necessary for payment processing. The data transmission is for payment processing and fraud prevention purposes.
All PayPal transactions are subject to PayPal's privacy policy. You can find it here:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full
All Google Pay transactions are subject to Google's privacy policy:
https://policies.google.com/privacy?hl=en
Privacy notices for Google Payments:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=en

**7. Stripe (Credit Card Payment)**

If you choose the payment method provided by the payment service provider Stripe (credit card payment), the payment processing will be carried out by the payment service provider Stripe Payments Europe Ltd, Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Ireland, to whom we will transmit the information you provided during the order process (name, address, account number, bank code, credit card number, invoice amount, currency, and transaction number) in accordance with Art. 6(1)(b) GDPR. The transmission of your data is exclusively for the purpose of payment processing with the payment service provider Stripe Payments Europe Ltd. and only to the extent necessary for this purpose. Further information on Stripe's privacy can be found at the URL https://stripe.com/en/terms

**8. Klarna**

If you select the payment method "Invoice" or (if offered) the payment method "Klarna Installments," the payment processing will be carried out by Klarna AB (publ) [https://www.klarna.com/en], Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"), to whom we will transmit the information you provided during the order process (first and last name, street, house number, postal code, city, gender, email address, telephone number, IP address, invoice amount, items, delivery method) in accordance with Art. 6(1)(a) GDPR if you have expressly consented to this during the order process in accordance with Art. 6(1)(a) GDPR. The transmission of your data is for the purpose of identity and credit checks. You can check the credit reporting agencies to which your data may be transmitted here: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/en_us/credit_rating_agencies
The credit check may include score values (probability values). To the extent that score values have significance for the result of the credit check, this is supported by a scientifically recognized mathematical-statistical method. Address data, among other things, are included in the calculation of the score values. Klarna uses the information about the statistical probability of a payment default for a reasonable decision about the establishment, implementation, or termination of the contract.
You can revoke your consent at any time by sending a message to the data controller or to Klarna. As far as this is necessary for the proper processing of payments, Klarna may continue to process your personal data, provided that this is necessary for the proper processing of payments.
Your personal data will be treated in accordance with applicable data protection regulations and in accordance with the information in Klarna's data protection information for individuals with a registered address in Germany https://cdn.klarna.com/1.0/shared/content/policy/data/en_de/data_protection.pdf or for individuals with a registered address in Austria https://cdn.klarna.com/1.0/shared/content/policy/data/en_at/data_protection.pdf.

**9. Sofortüberweisung (Instant Bank Transfer)**

If you select the payment method "Sofortüberweisung" (Instant Bank Transfer), the payment processing will be carried out by the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter "SOFORT"). SOFORT is part of the Klarna Group: Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden. We will transmit the information you provided during the order process (name, address, account number, bank code, credit card number, invoice amount, currency, and transaction number) in accordance with Art. 6(1)(b) GDPR. The transmission of your data is exclusively for the purpose of payment processing with the payment service provider SOFORT and only to the extent necessary for this purpose. Further information on SOFORT's privacy can be found at the URL https://www.klarna.com/sofort/datenschutz

**10. Cookies**

Our website uses cookies. Cookies are small text files that are stored by the internet browser or on the user's computer system by the internet browser. When a user visits a website, a cookie may be stored on the user's operating system. This cookie allows the browser to be uniquely identified when the website is accessed again. We use cookies to make our offer more effective and customer-oriented. Furthermore, cookies enable our systems to recognize your browser even after switching to another page and to offer you services such as the shopping cart.

Before processing or allowing the processing of data using cookies, we ask users for revocable consent at any time (opt-in solution). Before consent is given, only cookies necessary for the operation of our online shops are used. These cookies are necessary for the operation of the website and cannot be deactivated. They are only set in response to actions performed by you, such as language, currency, login session, and privacy settings. You can block these in your browser.

You can change your once-selected personal cookie settings for our shop page by manually deleting the cookie "shop.roogu.com" or all cookies in your browser and then accessing the page again.
Cookies are stored on your computer. You can find out how to manage (including disable) cookies in the major browsers using the links below:
Chrome Browser: https://support.google.com/accounts/answer/61416?hl=en
Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
Mozilla Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Processing is based on § 15(3) TMG and Art. 6(1)(f) GDPR due to the legitimate interest in the purposes mentioned above. The data collected from you in this way is pseudonymized using technical precautions. Therefore, it is not possible to assign the data to your person. The data is not stored together with other personal data from you. You have the right to object to the processing of personal data concerning you based on Art. 6(1)(f) GDPR for reasons arising from your particular situation.

The following third-party cookies are placed by advertising or analytics platforms or third-party networks to collect information about your visits to specific pages of our website:
a. Cloudflare Germany GmbH, Rosental 7, 80331 Munich. Learn more at:
https://www.cloudflare.com/en-gb/privacypolicy/?utm_referrer=https://www.cloudflare.com/en-gb/cookie-policy/?utm_referrer=https://www.cloudflare.com/
b. Bold Innovation Group LTD., 50 Fultz Blvd. Winnipeg MB, R3Y 0L6, USA. Learn more at:
https://boldcommerce.com/privacy

You can submit GDPR requests here:
https://shop.roogu.com/pages/gdpr-compliance

11. Google Analytics

We use Google Analytics, a web analysis service provided by Google Inc. ("Google"). Google Analytics employs "cookies," which are text files stored on your computer. This enables us to analyze your use of the website. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the USA and stored there.

We use Google Analytics only with IP anonymization. As a result, your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. This means that the transmitted information is not personally identifiable. Google uses this information to evaluate your website usage, compile reports on website activities, and provide other services related to website usage and internet usage. You can prevent the storage of cookies by adjusting your browser software accordingly (see 8aE).

You can also prevent the collection and use of related data (including your IP address) by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en. Google LLC, based in the USA, is certified under the US-European data protection agreement "Privacy Shield," which ensures compliance with the level of data protection applicable in the EU. For more information on terms of use and data protection, please visit http://www.google.com/analytics/terms/us.html or http://www.google.com/intl/en/analytics/privacyoverview.html.

12. Facebook: Profile on Facebook - Together with Meta Platforms Ireland Limited, we are responsible for the collection (but not further processing) of data from visitors to our Facebook page ("Fanpage"). This includes information about the types of content users view or interact with, or actions they take (see "Things You and Others Provide and Do" in Facebook's Data Policy: https://www.facebook.com/policy), as well as information about the devices used by users (e.g., IP addresses, operating systems, browser types, language settings, cookie data; see "Device Information" in Facebook's Data Policy: https://www.facebook.com/policy). As explained in "How We Use This Information" in Facebook's Data Policy, Facebook also collects and uses information to create "Page Insights" analytical services for page administrators, so they receive information about how people interact with their pages and associated content. We have entered into a special agreement with Facebook ("Page Insights Information," https://www.facebook.com/legal/terms/page_controller_addendum), which regulates, among other things, the security measures Facebook must follow and in which Facebook has agreed to fulfill data subjects' rights (e.g., users can directly address requests for information or deletion to Facebook). The user rights (particularly regarding information, deletion, objection, and complaint to the relevant supervisory authority) are not restricted by the agreements with Facebook. Further information can be found in the "Page Insights Information" (https://www.facebook.com/legal/terms/information_about_page_insights_data); Service Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; Legal Basis: Legitimate Interests (Art. 6(1)(f) GDPR); Website: https://www.facebook.com; Privacy Policy: https://www.facebook.com/about/privacy; Standard Contractual Clauses (Ensuring Data Protection Level for Processing in Third Countries): https://www.facebook.com/legal/EU_data_transfer_addendum; Further Information: Joint Controller Agreement: https://www.facebook.com/legal/terms/information_about_page_insights_data.**

13. Instagram - Social Network;**
Service Provider: Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA;
Legal Basis: Legitimate Interests (Art. 6(1)(f) GDPR);
Website: https://www.instagram.com;
Privacy Policy: https://instagram.com/about/legal/privacy.

14. Use of an External Merchandising System
For contract processing, we use a merchandise management system as part of order processing. For this purpose, the personal data collected in the course of the order will be transmitted to Mercheo Sp. z o.o, ul. Powstańców Śląskich 28-30-2B, 53-333 Wrocław, Poland.

15. Rights of the Data Subject
Subject to the legal requirements, you have the following rights pursuant to Art. 15 to 20 GDPR: Right of access, right to rectification, right to erasure, right to restriction of processing, right to notification, right to data portability.

a. Right of Access pursuant to Art. 15 GDPR
You have the right to access the personal data we process about you, the categories of personal data processed, the purposes of processing, the recipients or categories of recipients to whom your data has been or will be disclosed, the intended storage period or the criteria for determining the storage period, the existence of the right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it was not collected from you, the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the logic involved and the significance and intended consequences of such processing, as well as your right to be informed of which safeguards pursuant to Art. 46 GDPR apply when transferring your data to third countries.

b. Right to Rectification pursuant to Art. 16 GDPR
You have the right to request us to rectify without undue delay any inaccurate personal data concerning you. Taking into account the purposes of processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

c. Right to Erasure pursuant to Art. 17 GDPR
Stored personal data is erased if you withdraw your consent to storage, if knowledge of your data is no longer required to fulfill the purpose of storage, or if storage is otherwise inadmissible for legal reasons.

d. Right to Restriction of Processing pursuant to Art. 18 GDPR
You have the right to demand the restriction of processing your personal data while the accuracy of your data contested by you is being verified, if you reject the deletion of your data due to inadmissible data processing and instead request the restriction of processing your data, if you need your data for asserting, exercising or defending legal claims, after we no longer need these data after the purpose has been achieved or if you have objected to processing for reasons of your particular situation, as long as it is not yet clear whether our legitimate reasons prevail; Furthermore, you have the right to object under Art. 21 (1) GDPR to processing based on Art. 6 (1) f GDPR, as well as to processing for the purpose of direct marketing.

e. Right to Notification pursuant to Art. 19 GDPR
You have the right to have any rectification or erasure or restriction of processing we have undertaken communicated to all recipients to whom the personal data concerning you has been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.

f. Right to Data Portability pursuant to Art. 20 GDPR
You have the right to receive the personal data that you have provided to us in a structured, commonly used and machine-readable format or to request the transmission to another controller, provided that this is technically feasible.

g. Right to

Withdraw Consent Pursuant to Art. 7(3) GDPR
You have the right to revoke your data protection consent declaration at any time. Revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.

h. Right to Lodge a Complaint with a Supervisory Authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is not lawful.

14. We endeavor to store your personal data using all technical and organizational possibilities in a way that makes it inaccessible to third parties. However, full data security cannot be guaranteed when communicating by email, so we recommend using postal mail for confidential information.**

You can contact us at any time - you can find the contact details in our imprint.