Privacy policy

Privacy Policy

This policy explains how Rovenlissa processes personal data under the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). The controller is:

Rovenlissa
Cizan Raza
Betonstraße 8, 44379 Dortmund, Germany
Email: info@rovenlissa.com
Phone: +49 231 7260540

What we collect and why

To process an order we collect your name, delivery and billing address, email, phone and order details. The legal basis is performance of the sales contract (Art. 6(1)(b) GDPR). Payment is handled by our payment providers; we do not see or store your full card number. We keep accounting records for as long as German commercial and tax law requires (generally ten years), a legal obligation (Art. 6(1)(c)).

If you contact us, we process the details you give us to answer you (legitimate interest, Art. 6(1)(f)). With your consent we may send occasional email about our products (Art. 6(1)(a)); you can withdraw consent at any time.

Who processes it

Your data is shared only with the processors needed to run the shop: our e-commerce platform (Shopify), our payment providers, and the carriers who deliver your order. Transfers outside the EU/EEA rely on the European Commission's Standard Contractual Clauses or an adequacy decision.

Your rights

You have the right to access, rectification, erasure, restriction, objection and portability, and to withdraw consent. To exercise any of these, email info@rovenlissa.com. You may also lodge a complaint with a German data protection supervisory authority.