Privacy policy

PRIVACY POLICY

1) WHO IS RESPONSIBLE

1.1 Thank you for visiting our website. Below we explain how we handle your personal data when you use it. Personal data means any data by which you can be personally identified.

1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Rosané Emporium, Roaz Frederick Thychio Detz, Alleenhouderstraat 34, 5041 LE Tilburg, Netherlands, email info@rosaneemporium.com, phone +43 670 3523774.

1.3 For security and to protect the transmission of personal data and other confidential content, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the "https://" prefix and the padlock symbol in your browser bar.

2) DATA COLLECTED WHEN YOU VISIT

If you simply browse without registering or otherwise submitting information, we collect only the data your browser sends to our server (server log files):

- the page visited
- date and time of access
- volume of data sent in bytes
- the source or referrer you arrived from
- browser used
- operating system used
- IP address (anonymised where applicable)

Processing is based on our legitimate interest in the stability and functionality of our website under Art. 6(1)(f) GDPR. This data is not passed on or used for any other purpose. We reserve the right to review log files retrospectively if there is concrete evidence of unlawful use.

3) COOKIES

We use cookies on various pages to make the site work and to enable certain functions. These are small text files stored on your device. Some are deleted when you close your browser (session cookies); others remain and allow us or our partners to recognise your browser on your next visit (persistent cookies).

Some cookies exist to simplify the ordering process, for example by remembering the contents of a basket. Where cookies process personal data, processing is based on Art. 6(1)(b) GDPR for performance of the contract, or Art. 6(1)(f) GDPR for our legitimate interest in the best possible functionality of the site.

You can set your browser to notify you about cookies and decide on each individually, or to refuse them entirely. Please note that refusing cookies may limit the functionality of this site.

4) CONTACTING US

When you contact us (for example by contact form or email), personal data is collected. It is stored and used solely to answer your enquiry. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR, or Art. 6(1)(b) GDPR where your enquiry is aimed at concluding a contract. Your data is deleted once your enquiry has been dealt with, unless statutory retention periods apply.

5) CUSTOMER ACCOUNTS AND CONTRACT PROCESSING

Under Art. 6(1)(b) GDPR, personal data is collected and processed when you provide it to us in order to perform a contract or open a customer account. You may delete your account at any time. Once a contract is fully performed, your data is restricted with regard to tax and commercial retention periods and deleted once those periods expire.

6) USING YOUR DATA FOR DIRECT MARKETING

6.1 Newsletter sign-up
If you sign up to our email newsletter we will send you regular information about our offers. The only mandatory field is your email address. We use the double opt-in procedure: you will only receive a newsletter once you have expressly confirmed via a confirmation link (Art. 6(1)(a) GDPR). You may unsubscribe at any time via the link in any newsletter or by contacting us.

6.2 Newsletter to existing customers
If you gave us your email address when buying goods, we reserve the right to send you offers for similar goods by email, based on our legitimate interest under Art. 6(1)(f) GDPR. You may object to this at any time with effect for the future.

7) ORDER PROCESSING

7.1 Personal data we collect is passed to the transport company commissioned with delivery, to the extent necessary to deliver the goods. The legal basis is Art. 6(1)(b) GDPR.

7.2 Payment providers
Shopify Payments — card payments are handled through Shopify Payments, the payment service integrated into our shop. Payment data processed is used solely to complete your payment under Art. 6(1)(b) GDPR. Further information is available in Shopify's privacy policy.

8) SOCIAL MEDIA PLUGINS

8.1 Facebook
Our website uses social plugins of the social network Facebook, operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. These buttons are embedded only as HTML links rather than full plugins, so no connection to Facebook servers is made when you open our page. Only when you click the button does a new window open with the Facebook page.

Data transfer to the USA takes place on the basis of appropriate safeguards, in particular the EU standard contractual clauses (Art. 46 GDPR) or, where applicable, the EU-US Data Privacy Framework. Further information: https://www.facebook.com/policy.php

8.2 Instagram
Our website uses social plugins of Instagram, operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. These buttons are likewise embedded only as HTML links; a connection to Instagram servers is made only when you click. Data transfer to the USA takes place on the basis of appropriate safeguards under Art. 46 GDPR. Further information: https://help.instagram.com/155833707900388/

9) ONLINE MARKETING AND RETARGETING

9.1 Facebook Custom Audience (pixel)
This website uses the Facebook Pixel of Meta Platforms Ireland Limited. Where you have given your express consent (Art. 6(1)(a) GDPR), this allows user behaviour to be tracked after a user has seen or clicked a Facebook advertisement, in order to evaluate the effectiveness of our advertising. Consent may only be given by users aged 13 and over. Further information: https://www.facebook.com/about/privacy/

You can also manage third-party advertising cookies via the Digital Advertising Alliance: https://www.aboutads.info/choices/

10) YOUR RIGHTS

10.1 Applicable data protection law grants you extensive rights against the controller:

- right of access under Art. 15 GDPR
- right to rectification under Art. 16 GDPR
- right to erasure under Art. 17 GDPR
- right to restriction of processing under Art. 18 GDPR
- right to notification under Art. 19 GDPR
- right to data portability under Art. 20 GDPR
- right to withdraw consent given under Art. 7(3) GDPR
- right to lodge a complaint with a supervisory authority under Art. 77 GDPR, in particular in the Member State of your residence, place of work or the place of the alleged infringement

10.2 Right to object
Where we process your personal data on the basis of our overriding legitimate interest, you have the right to object at any time, on grounds relating to your particular situation, with effect for the future. Where your data is processed for direct marketing purposes, you have the right to object at any time.

11) HOW LONG WE KEEP PERSONAL DATA

Storage periods are determined by the applicable statutory retention periods, for example under commercial and tax law. Once those periods expire, the data is routinely deleted, provided it is no longer needed to perform the contract and no legitimate interest in further storage remains.