Privacy policy
Privacy Policy
§ 1 General Information
Your personal data (e.g., salutation, name, address, email address, telephone number, bank details, credit card number) is processed by us only in accordance with the provisions of German data protection law and the data protection law of the European Union (EU). The following provisions inform you about the purposes of processing, recipients, legal bases, storage periods, your rights, and the data controller responsible for your data processing. This privacy policy applies solely to our website. If you are redirected to other sites via links on our pages, please consult the respective privacy policies of those sites.
§ 2 Data Processing for Contract Fulfillment
(1) Purpose of Processing
The personal data you provide during the ordering process is necessary for the conclusion of a contract with us. You are not obliged to provide your personal data, but without your address, we cannot deliver the goods. For certain payment methods, we require the necessary payment data to forward to a payment service provider commissioned by us.
The data entered during the ordering process is therefore processed to fulfill the contract.
If you contact us before the conclusion of a contract via email or a contact form, the data obtained in this manner will be processed to carry out pre-contractual measures and answer your inquiries about our products.
If you create a customer account, your data (in particular, name, address, payment method, email, and password) will be processed for registration and to enable customer login. This allows you to shop more quickly and view your orders at any time. You can delete the account by notifying us or using a delete function.
(2) Legal Basis
The legal basis for this processing is Art. 6 (1) b) GDPR.
(3) Categories of Recipients
Payment service providers, shipping service providers, hosting providers, and, if applicable, merchandise management systems.
(4) Storage Period
We store the data necessary for contract processing until the expiry of the statutory warranty and, if applicable, contractual guarantee periods.
Data required by commercial and tax law is retained for the statutory periods, typically ten years (§257 HGB, §147 AO).
Data processed for pre-contractual measures is deleted once those measures have been completed and it is clear no contract will be concluded.
§ 3 Information About Cookies
(1) Purpose of Processing
This website uses technically necessary cookies. These are small text files stored on your computer system by your internet browser. These cookies allow functionalities such as adding multiple products to a shopping cart.
(2) Legal Basis
The legal basis for this processing is Art. 6 (1) f) GDPR.
(3) Legitimate Interest
Our legitimate interest lies in ensuring the functionality of our website. The user data collected through technically necessary cookies is not used to create user profiles, thereby protecting your interest in data protection.
(4) Storage Period
Technically necessary cookies are generally deleted when you close your browser. Persistent cookies have varying lifespans, from a few minutes to several years.
(5) Right to Object
If you do not wish for these cookies to be stored, please disable their acceptance in your internet browser. This may, however, limit the functionality of our website. Persistent cookies can also be deleted at any time via your browser.
§ 4 Your Rights as a Data Subject
If your personal data is processed, you are a data subject within the meaning of the GDPR and have the following rights with respect to us as the controller:
(1) Right of Access
Under Art. 15 GDPR, you can request information about the personal data we process about you.
(2) Right to Rectification
If your personal data is incorrect or incomplete, you have the right to request rectification or completion under Art. 16 GDPR.
(3) Right to Erasure
You can request the deletion of your personal data under the conditions of Art. 17 GDPR.
(4) Right to Restriction of Processing
You have the right to request restriction of processing under the requirements of Art. 18 GDPR.
(5) Right to Data Portability
Under Art. 20 GDPR, you have the right to receive the personal data you provided to us in a structured, commonly used, and machine-readable format or to request the transfer to another controller.
(6) Right to Withdraw Consent
Under Art. 7 (3) GDPR, you have the right to withdraw your consent to data processing at any time. The legality of processing based on consent before withdrawal remains unaffected.
(7) Right to Lodge a Complaint with a Supervisory Authority
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, particularly in the member state of your residence, workplace, or the place of the alleged infringement, under Art. 77 GDPR.
Right to Object Under Art. 21 GDPR:
(a) General: Justified Objection Required
If the processing of your personal data is based on our legitimate interest (Art. 6 (1) f) GDPR) or is carried out in the public interest (Art. 6 (1) e) GDPR), you have the right to object to the processing at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions.
We will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is for the establishment, exercise, or defense of legal claims.
(b) Special Case of Direct Marketing: Simple Objection Sufficient
If your personal data is processed for direct marketing purposes, you have the right to object to this processing at any time without providing reasons; this also applies to profiling insofar as it is related to direct marketing.
If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
Controller for Data Processing:
Manufaktur Rocca
Pierluigi Rocca
Ulmerstr. 51
73262 Reichenbach
kontakt@manufaktur-rocca.de