privacy policy
1. Responsible Party
The responsible party for the processing of personal data on this website and in the context of the online shop operated through this website is:
Hannah Rotthaus
Dieselstr. 30
12057 Berlin
Germany
2. General Information
The protection of your personal data is important to us. We process your personal data exclusively in accordance with the applicable data protection regulations, particularly the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).
Personal data refers to all information that relates to an identified or identifiable natural person.
3. Accessing Our Website
When you access our website, technical information may be transmitted automatically by the browser used. This may include:
The processing of this data is carried out, as far as necessary, for the technical provision, security, and stability of our website.
The legal basis is Art. 6 (1) lit. f GDPR. Our legitimate interest lies in the secure and reliable provision of our online services.
4. Hosting and Technical Infrastructure
Our website is operated via WordPress with Laytheme. WordPress provides, among other things, the technical infrastructure for the website and the online shop.
In the context of the provision, personal data may be processed that arise when visiting the website, using the online shop, or placing orders.
WordPress processes personal data in accordance with its own privacy policies and the data protection agreements applicable between WordPress and its customers.
Additionally, we use STRATO for the services we have booked there, particularly for domain and/or email services.
STRATO may process personal data as a processor in the context of providing these services. If necessary, there is an agreement on data processing according to Art. 28 GDPR.
STRATO states that it operates its data centers in Germany.
5. Contacting Us via Email
If you contact us via email, we process the personal data you provide, particularly your email address, your name, and the information contained in your message.
The processing is carried out to handle your request.
The legal basis is Art. 6 (1) lit. b GDPR, if your request is related to the initiation or execution of a contract.
In other cases, the processing is based on our legitimate interest in processing inquiries according to Art. 6 (1) lit. f GDPR.
The data will be deleted as soon as the request has been fully processed and no legal retention obligations or other legal grounds for further storage exist.
6. Orders in Our Online Shop
When you place an order through our online shop, we process the personal data necessary for processing and fulfilling the order.
This includes in particular:
The processing is carried out for the performance of the purchase contract or for the execution of pre-contractual measures according to Art. 6 (1) lit. b GDPR.
If we are required by law to retain certain documents, the storage will also be based on Art. 6 (1) lit. c GDPR.
7. Payment Processing via PayPal
If you choose to pay via PayPal, the data necessary for payment processing will be transmitted to PayPal.
Provider: PayPal (Europe) S.à r.l. et Cie, S.C.A.
The processing is carried out for the execution of the payment and purchase contract according to Art. 6 (1) lit. b GDPR.
PayPal processes personal data, among other things, for payment processing as well as to prevent fraud and abuse.
Further information on the processing of personal data by PayPal can be found in PayPal’s privacy policy.
8. Payment by Bank Transfer
If you select payment by bank transfer, we process the necessary data, particularly your name, order information, and details regarding the payment receipt.
The processing is carried out for the execution of the contract according to Art. 6 (1) lit. b GDPR.
9. Shipping and Delivery
To process the order, we pass on the necessary personal data for delivery to the respective shipping company.
Depending on the size and weight of the ordered goods, delivery may be carried out by a parcel service or a freight forwarder.
The following data will be transmitted:
The processing is carried out for the execution of the purchase contract according to Art. 6 (1) lit. b GDPR.
10. Cookies and Similar Technologies
Our website uses cookies and similar technologies.
Some cookies may be technically necessary for the website and the online shop to function properly.
In addition, depending on the configuration of WordPress and the plugins used, additional cookies or similar technologies may be employed, for example, to store settings or analyze website usage.
Non-technically necessary cookies and similar technologies will only be used after your consent, as required by law.
You can manage your cookie settings through the cookie consent management implemented on our website and can change or revoke your consent at any time with effect for the future.
11. Analysis and Marketing Tools
Currently, we do not use any additional analysis or marketing tools such as Google Analytics, Google Ads, Meta Pixel, or similar tracking services.
Should such services be used in the future, this privacy policy will be updated accordingly, and consent will be obtained prior to their use if necessary.
12. Recipients of Personal Data
In the context of the described processing, personal data may be transmitted to the following categories of recipients:
Disclosure will only occur if there is a corresponding legal basis under data protection law.
13. Data Transfer to Third Countries
When using individual services from WordPress or other service providers, processing of personal data outside the European Union or the European Economic Area cannot be completely ruled out.
If a transfer to a third country occurs, it will only take place in compliance with the legal requirements of Art. 44 et seq. GDPR.
Specific information on international data transfers and the guarantees used for this can be found in the privacy information of the respective service providers.
14. Retention Period
We generally store personal data only as long as it is necessary for the respective purpose.
In addition, there are legal retention obligations, particularly under commercial and tax law. The relevant data will be stored for the legally prescribed duration and subsequently deleted, provided that there is no other legal basis for storage.
15. Your Rights
You have the following rights under the legal provisions:
To exercise your rights, you can contact us at any time at the following email address: info@roh-furniture.de
16. Right to Lodge a Complaint with a Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.
For companies based in Berlin, the relevant Berlin data protection authority is particularly relevant.
17. Updating This Privacy Policy
We reserve the right to adjust this privacy policy if the services, technical procedures, or legal requirements we use change.
