Your data is safe with us.
The protection of your personal data is very important to us. We treat your data confidentially, transparently, and in accordance with applicable data protection laws — in particular the General Data Protection Regulation (GDPR) — as well as this Privacy Policy. Below, you will find information about which data we collect, what we use it for, and which rights you have.
The controller responsible for data processing on this website is:
Rovellane
Email: contact@rovellane.com
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.
We generally process personal data of our users only to the extent necessary to provide a functional website, as well as our content and services. Processing is generally carried out only with the user’s consent or where processing is permitted by legal provisions.
Legal bases: Where we obtain consent for processing operations, Article 6(1)(a) GDPR serves as the legal basis. For processing necessary to perform a contract, Article 6(1)(b) GDPR serves as the legal basis. Where processing is necessary to comply with a legal obligation, Article 6(1)(c) GDPR serves as the legal basis. Where processing is necessary to protect a legitimate interest, Article 6(1)(f) GDPR serves as the legal basis.
For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. You can recognize an encrypted connection when the browser address line changes from “http://” to “https://” and by the lock symbol in your browser bar. When SSL/TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Our online store is hosted on the Shopify platform operated by Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland. Shopify processes personal data on our behalf that is necessary for operating the store and processing your orders. A data processing agreement in accordance with Article 28 GDPR is in place with Shopify. The legal basis is Article 6(1)(f) GDPR, based on our legitimate interest in providing a secure and efficient online offering, as well as Article 6(1)(b) GDPR for contract processing.
When you visit our website, certain information is automatically collected in so-called server log files, which your browser transmits. This includes, in particular, browser type and version, operating system used, referrer URL, hostname of the accessing device, time of the server request, and IP address. This data is not combined with other data sources. The collection of this data is based on Article 6(1)(f) GDPR for the technically error-free display and optimization of the website.
Our website uses cookies — small text files that are stored on your device. They do not cause any damage and do not contain viruses.
You may withdraw your consent at any time through our cookie settings and configure your browser to inform you about the use of cookies or to reject cookies entirely.
When you place an order with us, we collect the data necessary to process the contract: first and last name, billing and shipping address, email address, phone number if applicable, and payment data. We process this data to fulfill the purchase contract on the basis of Article 6(1)(b) GDPR. Order data is retained in accordance with commercial and tax retention periods, usually for 6 to 10 years, based on Article 6(1)(c) GDPR.
You may optionally create a customer account with us. This makes future orders easier and allows you to view your order history. Processing is based on Article 6(1)(b) GDPR. You may request deletion of your customer account at any time by contacting us at contact@rovellane.com.
To process payments, we work with various payment service providers, such as Shopify Payments, PayPal, Klarna, Apple Pay, and Google Pay. When you select a payment method, the data required for payment processing is transmitted to the respective payment provider. The legal basis is Article 6(1)(b) GDPR for the performance of the contract. We do not store complete credit card data ourselves — this data is processed exclusively in encrypted form by certified payment service providers. The privacy policies of the respective providers also apply.
To deliver your order, we share your name and shipping address with the commissioned shipping company, such as DHL, DPD, GLS, or UPS. If required for shipment tracking, we may also transmit your email address with your consent. The legal basis is Article 6(1)(b) GDPR.
If you contact us by email or through a contact form, your information will be stored for the purpose of processing the request and for possible follow-up questions. The legal basis is Article 6(1)(b) GDPR if the request is related to a contract, or Article 6(1)(f) GDPR based on our legitimate interest in responding to your request. We do not share this data without your consent.
If you subscribe to our newsletter, we use your email address to send you information about products and offers. Registration takes place through a double opt-in procedure. The legal basis is your consent in accordance with Article 6(1)(a) GDPR. You may unsubscribe from the newsletter at any time using the unsubscribe link in each email or by contacting us directly.
Where activated, we use analytics and marketing services, such as Google Analytics and Meta Pixel, to improve our offering and make advertising more relevant. These services are used exclusively on the basis of your consent in accordance with Article 6(1)(a) GDPR and Section 25(1) TDDDG. Data may also be transferred to servers in third countries, such as the United States. In such cases, appropriate safeguards are in place, such as EU Standard Contractual Clauses. You may withdraw your consent at any time with effect for the future.
We store personal data only for as long as necessary for the respective purposes or as required by statutory retention periods. Once the purpose no longer applies or the applicable periods expire, the data is routinely deleted.
You have the right at any time to:
To exercise your rights, simply send an informal message to contact@rovellane.com. We will process your request as quickly as possible.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your residence, your place of work, or the place of the alleged infringement.
We hereby object to the use of contact details published as part of legal notice obligations for the purpose of sending unsolicited advertising and informational materials. We expressly reserve the right to take legal action in the event of unsolicited advertising information being sent, such as spam emails.
This Privacy Policy is currently valid. Due to the further development of our website or changes in legal requirements, it may become necessary to update this Privacy Policy.
Last updated: May 28, 2026
Rovellane · contact@rovellane.com