Privacy Policy

The Data Controller responsible for processing your personal data is:
ROCKWORLD Łukasz Pawlik
Kochanowskiego 21
48-130 Kietrz ​​
biuro@rockworld.pl

We appreciate your interest in our online store. Your privacy is very important to us. Below you will find detailed information on how your data is handled.

1. Access Data and Hosting

You can visit our websites without providing any personal information. Every time a webpage is called up, the server automatically stores only a so-called server log, such as the name of the requested file, your IP address, the date and time of access, transferred data volume, and the requesting provider (access data) and documents the page visit.

This access data is analyzed exclusively for the purpose of ensuring the smooth operation of the website and improving our offer. This serves according to Art. 6 para. 1 clause f GDPR to protect our legitimate interests in the proper presentation of our offer, which are overriding in the process of balancing of interests. All access data is deleted no later than seven days after the end of your visit to the site.

 Hosting

The services for hosting and displaying the website are performed by our service providers on the basis of processing on our behalf. Unless otherwise stated in this privacy policy, access data and all data collected in the forms provided on this website are processed on their servers. If you have any questions about our service providers and the basis of our cooperation with them, please contact us. You can find our contact details in the section “Our contact details and your rights”.

2. Data Collection and Use for Processing the Contract, Contact, and Opening a Customer Account

We collect personal data only when you voluntarily provide it to us when placing your order, contacting us (e.g., via contact form or email), or opening a customer account. Mandatory fields are marked as such because we need those data to fulfill the contract or to process your contact or open your customer account, and you would not be able to place your order or contact us without their provision. It is evident from the respective input forms what data is collected. We use the data communicated by you in accordance with Art. 6 para. 1 clause b GDPR for contract processing and handling your inquiries. After complete processing of the contract or deletion of your customer account, your data will be restricted for further processing and deleted after expiry of the retention periods under tax and commercial law (Art. 6 para. 1 clause c GDPR), unless you have expressly consented to the further use of your data (Art. 6 para. 1 clause a GDPR) or we reserve the right to further use data that is permitted by law. We inform you about such a reservation in this privacy policy. Your customer account can be deleted at any time. This can be done by sending a message to the contact address below or by using a function provided in the customer account settings.

3. Data Transfer for Delivery Purposes

For the performance of the contract (Art. 6 para. 1 clause b GDPR), we pass on your data to the shipping company responsible for delivery, insofar as this is necessary for the delivery of ordered goods.

4. Data Processing for Payment Handling

To process payments in our online store, we work with external payment service providers and pass on your data to the chosen payment service provider as necessary for payment processing. This serves the contract execution (Art. 6 para. 1 clause b GDPR).

 Data Processing for Fraud Prevention and Payment Optimization

In certain cases, we may transmit additional information to our service providers, which they may use along with the necessary information for payment processing as our processors for the purpose of fraud prevention and payment process optimization (e.g., invoicing, contested payments, accounting support). According to Art. 6 para. 1 clause f GDPR, this serves to protect our legitimate interests in protection against fraud and efficient payment management, which are overriding in the process of balancing of interests.

 Installment Purchase

If you select the payment method "installment purchase" and give the appropriate consent (Art. 6 para. 1 clause a GDPR), your personal data (first and last name, address, email, phone number, date of birth, IP address, gender) along with necessary transaction data (item, invoice amount, due dates, total amount, invoice number, taxes, currency, order date and time) will be transferred to our partner Santander Consumer Bank S.A., ul. Strzegomska 42 c, 53 – 611 Wrocław, Poland for the purpose of payment handling. For assessing the creditworthiness of the customer purchasing on installments, our partner checks and collects information from publicly accessible databases and credit information agencies. A list of service providers providing information, including creditworthiness information based on mathematical-statistical procedures, and further information on data processing after transmission to our partner Santander Consumer Bank S.A. can be found in its privacy policy at: https://www.santanderconsumer.pl/zakupy-na-raty/raty-w-sklepie-internetowym,1.html.

The received information regarding the statistical probability of non-payment is used by our partner Santander Consumer Bank S.A. to make a decision on the establishment, execution, or termination of the contractual relationship. You have the opportunity to present your point of view and contest the decision by contacting our partner Santander Consumer Bank S.A. Consent given during the order process for data transfer can be revoked at any time without stating the reasons, with future effect.

5. Email Marketing: Email Newsletter, Telephone Contact

 Email Advertisement Following Newsletter Subscription

If you subscribe to our newsletter, we will use the required data or data provided separately by you to send you our email newsletter regularly based on your consent (Art. 6 para. 1 clause a GDPR). You can unsubscribe from the newsletter at any time by sending a message to our contact address below or by clicking a link provided in the newsletter. After unsubscribing, we will delete your email address, unless you have expressly consented to the further use of your data or we reserve the right to further use your data in cases permitted by law, which we inform you about in this policy.

 Sending a Review Request by Email

If you have given us your express consent during or after your order (Art. 6 para. 1 clause a GDPR), we will use your email address to request an evaluation of your order via our rating system. You can withdraw your consent at any time by sending a message to our contact address below or by clicking a link provided in the review request email.

 Telephone Advertising

If you have given your explicit consent during or after your order (Art. 6 para. 1 clause a GDPR), we will use your data for our own advertising purposes, for example, to inform you about our new products and promotions. You can withdraw your consent at any time by sending a message to our contact address below or by making a corresponding verbal statement during a telephone call. After withdrawing consent, we will delete your phone number, unless you have expressly consented to the further use of your data or we reserve the right to further use your data in cases permitted by law, which we inform you about in this policy.

6. Cookies and Similar Technologies

 General Information

To make visiting our website attractive and enable the use of certain functions, we use technological tools, including so-called cookies. Cookies are small text files that are automatically saved on your end device. Some of the cookies we use are deleted after the end of the browser session, that is, after closing your browser (session cookies). Other cookies remain on your end device and enable us to recognize your browser on your next visit (persistent cookies). We use technologies necessary to provide the correct and optimal use of essential functions on our website (e.g., shopping cart function). These technologies process data such as your IP address, time of visit, information about the device and browser, as well as information about the use of our website (e.g., content of the shopping cart). This serves according to Art. 6 para. 1 clause f GDPR to protect our legitimate interests in an optimal presentation of our offer, which are overriding in the process of balancing of interests.

Additionally, we use technological tools to comply with the legal obligations we are subject to (e.g., to demonstrate consent to the processing of your personal data), as well as for online analytics and online marketing. Further information on this, including the legal basis for data processing, can be found in the following sections of this privacy policy.

In the auxiliary menu of the web browser, you will find explanations on how to change the cookie settings. They are available at the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™  

If you have given us your consent to the use of certain technological tools (Art. 6 para. 1 clause a GDPR), this consent can be withdrawn at any time. To revoke your consent, please contact us using the contact address provided in the section “Our contact details and your rights”.

7. Using Cookies and Similar Technological Tools for Online Analytics and Marketing Purposes

Provided that you have given your consent (Art. 6 para. 1 clause a GDPR), we use the following cookies and other similar technological tools from external service providers on our website. After the purpose of data processing has been achieved and the use of a given technological tool has ended, data collected through the use of these tools will be deleted. Given consent can be withdrawn by you at any time. Detailed information on the possibility of withdrawing consent and your right to object can be found in the section "Cookies and similar technologies". Further information can be found on the pages of individual service providers. If you have any questions about our service providers and the basis of our cooperation with them, please contact us. You can find our contact details in the section “Our contact details and your rights”.

 Using Google Services

We use the following technological tools from Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Information automatically collected by Google technologies about your use of our website is usually transmitted to and stored on a Google LLC server, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. The European Commission has not issued a decision on an adequate level of data protection for the USA. Our cooperation is based on standard data protection clauses adopted by the European Commission. If your IP address is processed through the use of Google's technological tools, it is shortened before being saved on Google's servers thanks to the activated IP anonymization feature. Only in exceptional cases is the full IP address sent to a Google server and shortened there. Unless specified otherwise for individual Google technologies described in this privacy policy, data processing is based on the agreed joint administration of personal data in accordance with Art. 26 GDPR. Further information on data processing by Google can be found in Google's privacy policy.

 Google Analytics

To analyze the use of our website, we use Google Analytics – an internet analytics tool from Google, which automatically processes your data (IP address, time of visit, device and browser information, as well as information regarding the use of our website) and creates pseudonymous user profiles. Cookies may be used for this purpose. Your IP address is not merged with other data collected by Google. Data processing within the Google Analytics service is based on the data processing agreement concluded with Google.

To optimize and improve our website offer, we have also activated data sharing settings for "Google products and services". This allows Google to access data collected and processed as part of the Google Analytics service and use it to improve Google's products and services. The sharing of data for this purpose with Google is based on an additional agreement between data controllers. We do not have control over the subsequent data processing by Google.

We also use the Google Optimize tool, which is an extension of Google Analytics services, to create and conduct A/B tests on our website.

We also use the Google Signals service, which is an extension of Google Analytics services and enables so-called "cross-device tracking" (identifying users using multiple devices). This means that if your internet-accessible devices are connected to your Google account and you have activated the "personalized advertising" option in your Google account settings, then Google may generate reports on how you use our website (in particular, the number of users using different devices), even if you change devices. We do not process your personal data in this area; we receive statistics based on Google Signals functions and technologies.

As part of the Google Analytics service, we also use the so-called DoubleClick-Cookie, which enables recognition of your browser when you use other websites. Google will use this information to compile a report on your activities on our website and provide other services related to the use of the website.

 Google AdSense

Our website promotes a space for advertisements from other providers and ad networks through Google AdSense. These ads are shown to you in various places on our website. As part of the integration of Google AdSense, when you visit our site, a so-called Google DoubleClick cookie will be saved on your end device, which enables the display of interest-based ads and processes your data (IP address, time of visit, device and browser information, as well as information regarding the use of our website) and automatically assigns you a pseudonymous UserID.

 Google Ads

With the help of Google Ads, we promote our website in search engine results and on third-party websites. For this purpose, when you visit our website, a remarketing cookie from Google is automatically saved on your device, which enables the display of interest-based ads based on the pages you visit, processing your data with a pseudonymous ID (IP address, time of visit, device and browser information, as well as information regarding the use of our website). Further data processing will only take place if you have activated the option for personalized ads in your Google account settings. In such a case - if you are logged into Google at the same time while visiting our website, Google will use your data together with Google Analytics data to create and define so-called target group lists for cross-device remarketing.

We use the Google Ads Conversion Tracking tool for online analytics to measure and analyze your behavior when you visit our website through a Google Ads ad. Cookies may be used for this purpose, and data such as the IP address, time of visit, device and browser information, as well as information regarding the use of our website, e.g. a visit to the website or signing up for the newsletter, are processed. Based on this data, pseudonymous user profiles are then created.

 Google Maps

To visually present geographic information, Google Maps will save and process information about how you use maps and individual functions, including your IP address and location data. We have no control over this data processing by Google.

 Google reCAPTCHA

To protect against spam and prevent misuse and improper use of our online forms (e.g., by harmful bots), our website has integrated the Google reCAPTCHA tool, which processes your data (IP address, time of visit, device and browser information, as well as information regarding the use of our website) and analyzes how you use our website by using JavaScript scripts and cookies. Personal data entered by you in the fields of forms on our pages will not be read or saved.

 Google Fonts

To ensure consistent presentation of content on our websites, a "Google Fonts" script is integrated with our website, which processes your data (IP address, time of visit, device and browser information, as well as information regarding the use of our website). We have no control over this data processing by Google.

 YouTube Video Plugin

To integrate third-party content via the YouTube video plugin – the following data is processed by Google when playing a video: IP address, time of visit, device and browser user information.

 Using Facebook Services

 Facebook Pixel

We use the Facebook Pixel tool provided by Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook"). The scope of functionalities of the Facebook Pixel tool that we use has been indicated below. The Facebook Pixel automatically collects and saves data (your IP address, time of visit, device and browser information, as well as information regarding the use of our website, e.g. a visit to the website or signing up for the newsletter) and subsequently creates pseudonymous user profiles.
As part of the so-called extended data matching in Facebook Analytics, hashed information is also collected and stored for comparison purposes, which can identify individuals (e.g., names and surnames, email addresses, and phone numbers).
For this purpose, when you visit our site, the Facebook Pixel saves a cookie on your device, which with a pseudonymous Cookie-ID, enables automatic recognition of your browser when you visit other websites. Facebook will combine this information with other data from your Facebook account and use it to compile reports on website activities as well as to provide other services related to your use