Privacy Policy – ROOG.STORE

Last update: 26.11.2025

This Privacy Policy sets out the rules for the processing of personal data by the ROOG.STORE, available at https://roog.store. The Policy has been prepared in accordance with the General Data Protection Regulation (GDPR), the Polish Personal Data Protection Act, and the Act on the Provision of Electronic Services.

1. PERSONAL DATA ADMINISTRATOR

The Data Administrator is: Echo Corp Sp. z o.o. Address: Komandosów 10, 85-549 Bydgoszcz, Poland

Correspondence Address: Wiece 11/C, 60-638 Poznań, Poland

E-mail: contact.roog.store@gmail.com

Phone: +48 600 353 698

The Administrator processes data in accordance with applicable law and ensures its maximum security through technical and organizational measures.

2. SCOPE OF PROCESSED DATA

The Administrator may process the following personal data:

• Identification data: First and last name.

• Contact details: E-mail address, phone number.

• Address data: Delivery address, billing address.

• Transaction data: Invoicing details, order history (note: payment card details are handled exclusively by external operators like Przelewy24).

• Technical data: IP address, cookies, and analytical data.

3. PURPOSES AND LEGAL BASIS OF PROCESSING

Data is processed for the following purposes:

• Order Fulfillment: Preparation, shipment, and handling of purchases.

  • Legal basis: Art. 6(1)(b) GDPR (Performance of a contract).

• Customer Service: Responding to inquiries, handling complaints, and returns.

  • Legal basis: Art. 6(1)(b) and (f) GDPR (Contract performance and legitimate interest).

• Marketing: Newsletter and remarketing campaigns.

  • Legal basis: Art. 6(1)(a) GDPR (User consent).

• Analytics: Improving website functionality and user experience.

  • Legal basis: Art. 6(1)(f) GDPR (Legitimate interest).

• Legal Obligations: Accounting and tax purposes.

  • Legal basis: Art. 6(1)(c) GDPR (Legal obligation).

4. COOKIES AND SIMILAR TECHNOLOGIES

The store uses cookies to ensure proper operation, analyze traffic, and personalize marketing content. Detailed information regarding the use of cookies can be found in our Cookies Policy.

5. DATA RECIPIENTS

To ensure the highest quality of service, your data may be shared with:

• Logistics partners: Courier companies (InPost, international carriers).

• Payment operators: Przelewy24 and international payment gateways.

• Service providers: Accounting firms, hosting providers, and technical support.

• Marketing partners: Providers of analytical and advertising tools (Google, Meta, TikTok).

6. DATA RETENTION PERIOD

Data is stored only for as long as necessary:

• Order data: 6 years (to comply with tax and accounting requirements).

• Marketing data: Until consent is withdrawn.

• User account data: Until the account is deleted by the user.

• Analytical data: Typically 12–26 months, in accordance with the Cookies Policy.

7. USER RIGHTS

Every User has the right to:

1. Access their personal data.

2. Rectify (correct) their data.

3. Delete data ("right to be forgotten").

4. Restrict processing.

5. Transfer data to another administrator.

6. Object to processing based on legitimate interest.

7. Withdraw consent at any time (without affecting the legality of prior processing).

8. Lodge a complaint with the President of the Personal Data Protection Office (UODO).

8. DATA SECURITY

The Administrator applies advanced security measures, including:

• SSL Encryption: Ensuring secure transmission of data on the website.

• Access Controls: Only authorized personnel have access to personal data.

• Server Protection: Using secured and monitored server infrastructure.

9. NEWSLETTER AND MARKETING

• Voluntary: Subscribing to the newsletter is entirely voluntary.

• Opt-out: The User may unsubscribe at any time via the "Unsubscribe" link in any e-mail or by contacting the Administrator.

• Content: The newsletter may contain commercial information and special offers.

10. INTERNATIONAL ORDERS

For orders outside the European Economic Area (EEA), data is transferred to foreign carriers and customs authorities only to the extent strictly necessary to complete the delivery. These transfers are governed by Standard Contractual Clauses (SCC) to ensure data safety.

11. CHANGES TO THE PRIVACY POLICY

The Administrator reserves the right to update this Policy. The new version becomes effective upon publication on the website. Users are encouraged to review this page regularly.

12. FULL ADMINISTRATOR DETAILS

Echo Corp Sp. z o.o. NIP: 9671478940 | REGON: 529328171 | KRS: 0001119806

E-mail: contact.roog.store@gmail.com

This Privacy Policy is effective from the moment of publication on the website.