Privacy Policy

The Data Controller responsible for processing your data is:
ROCKWORLD Łukasz Pawlik
Kochanowskiego 21
48-130 Kietrz ​​
biuro@rockworld.pl

Thank you for your interest in our online store. Your privacy is very important to us. Below you will find detailed information about how we handle your data.

1. Access data and hosting

You can visit our websites without providing any personal information. Every time a webpage is accessed, the server automatically saves only a so-called server log, such as the name of the requested file, your IP address, date and time of access, data volume transferred and the internet service provider making the request (access logs) and documents the webpage access.

This access data is analyzed exclusively for the purpose of ensuring the smooth operation of the website and improving our offer. This serves according to Art. 6 para. 1 lit. f GDPR to protect our legitimate interest in the correct presentation of our website and the offer. All access data is deleted no later than seven days after the end of your visit to the site.

Hosting

The hosting services for our website are partly provided on our behalf by our service providers as part of processing on our orders. Unless otherwise stated in this privacy policy, all access data and data collected in the forms provided for this purpose on our website will be processed on their servers. If you have any questions about our service providers and the basis of our cooperation with them, please contact us. You can find our contact details in the section "Our contact details and your rights".

2. Data collection and use for contract processing, contact and opening a customer account

We collect personal data only when you voluntarily provide it to us when placing your order or when contacting us (e.g., via contact form or email). Mandatory fields are marked as such because the data they contain are required to perform the contract or to process your contact request, and you would not be able to complete the order or contact us without providing them. It is evident from the forms into which data is entered what data is collected. We use the data provided by you in accordance with Art. 6 para. 1 lit. b GDPR for contract execution and to respond to your inquiries. Furthermore, if you give your consent according to Art. 6 para. 1 lit. a GDPR to open a customer account, we will process your data for this purpose. Further information on the processing of your data, especially on the transfer of data to our service providers for order, payment and shipping purposes, can be found in the following sections of this privacy policy.

After complete contract processing or deletion of your customer account, data processing will be restricted, and your data will be deleted upon expiration of the retention periods defined in tax and commercial law (Art. 6 para. 1 lit. c GDPR), unless you expressly consent to further use of your data (Art. 6 para. 1 lit. a GDPR) or we reserve the right to further use your data in a manner permitted by law, which we inform you about in this policy. You can delete your customer account at any time. You can either send a message to our contact address as specified in the section "Our contact details and your rights" or use a corresponding function in your customer account settings.

3. Data transfer for delivery purposes

In order to fulfill the contract (Art. 6 para. 1 lit. b GDPR), we transfer your data to the shipping company selected during the order process, which is tasked with delivering the ordered products.

4. Data processing for payment processing

For payment processing in our online store, we work with external payment service providers and transfer your data to the payment service provider selected during the order process. This serves to fulfill the contract (Art. 6 para. 1 lit. b GDPR).

Data processing to prevent fraud and optimize payment processes

In some cases, we may transfer additional information to our service providers, which they may use along with the information necessary to process the payment as our processors and provide services for fraud prevention and optimization of payment processes (e.g., invoicing, transaction analysis, accounting support). According to Art. 6 para. 1 lit. f GDPR, this serves our legitimate interests in protecting against fraud and effective payment management.

Installment purchase

If you choose "installment purchase" as a payment option and give the relevant consent (Art. 6 para. 1 lit. a GDPR), your personal data (name, surname, address, email, phone number, date of birth, IP address, gender) along with the data required for transaction processing (article, invoice amount, due date, total amount, invoice number, taxes, currency, order date and time) will be transferred to our partner Santander Consumer Bank S.A., ul. Strzegomska 42 c, 53 – 611 Wrocław, Poland, for payment processing. To verify the creditworthiness of the customer making the installment purchase, our partner checks and collects information from publicly available databases and from economic information offices and agencies. You can find a list of service providers from whom information is obtained, including information on the customer's creditworthiness determined based on mathematical-statistical models, and information on data processing after their transfer to our partner Santander Consumer Bank S.A., in their privacy policy at: https://www.santanderconsumer.pl/zakupy-na-raty/raty-w-sklepie-internetowym,1.html.

The information received regarding the statistical probability of non-payment will be used by our partner Santander Consumer Bank S.A. to make a decision on establishing, executing or terminating a contractual relationship. You have the right to express your point of view and disagree with the decision by contacting our partner Santander Consumer Bank S.A. The consent given during the order process for data transfer can be revoked by you at any time without giving reasons, with effect for the future.

5. Marketing channels: email (e.g., newsletter), telephone contact

Email advertising after signing up for the newsletter

If you subscribe to our newsletter, we use the data necessary or separately provided by you to regularly send you our electronic newsletter based on your consent (Art. 6 para. 1 lit. a GDPR). You can unsubscribe from the newsletter at any time by sending a message to our contact address as specified in the section "Our contact details and your rights" or by using the link provided in the newsletter. After unsubscribing, we will delete your email address unless you expressly consent to further use of your data or we reserve the right to further use your data in a manner permitted by law, which we inform you about in this policy.

Sending an invitation to submit a review of the purchase

If, during or after placing your order, you have given your consent (Art. 6 para. 1 lit. a GDPR), we use your email address to send you an electronic invitation to review the purchase made in our store. The review/opinion is made through the review system we use. The consent given can be withdrawn at any time by sending a message to our contact address as specified in the section "Our contact details and your rights" or by using the corresponding link provided in the invitation email to submit a review.

Telephone advertising

If, during or after placing your order, you have given your consent (Art. 6 para. 1 lit. a GDPR), we use your data for our own advertising purposes, e.g., to inform you about our new products and promotions. You can revoke your consent at any time by sending a message to our contact address as specified in the section "Our contact details and your rights" or by making a corresponding oral statement during a phone call. After revoking your consent, we will delete your phone number unless you expressly consent to further use of your data or we reserve the right to further use your data in a manner permitted by law, which we inform you about in this policy.

6. Cookies and similar technologies

General information

To make visiting our website attractive and to enable the use of certain functions, we use technological tools including cookies on our site. Cookies are small text files that are automatically saved on your end device. Some of the cookies we use are deleted at the end of the internet browser session, i.e., after you close it (session cookies). Other cookies remain on your end device and enable us to recognize your browser on your next visit (persistent cookies). We use technologies that are strictly necessary to ensure the proper and optimal use of the essential functions of our website (e.g., shopping cart function). These technologies process data such as your IP address, time of the site visit, information about the device and browser, and information about the use of our website (e.g., content of the shopping cart). This serves according to Art. 6 para. 1 lit. f GDPR to protect our legitimate interest in the optimal presentation of our offer.

We also use technological tools to fulfill legal obligations to which we are subject (e.g., to prove the receipt of consent to process your personal data) and for internet analytics and online marketing. Further information on this, including the relevant legal bases for data processing, can be found in the following sections of this privacy policy.

Instructions on changing cookie settings can be found in the help menu of your internet browser. The links are available here: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

When consent has been given for the use of specific technological tools (Art. 6 para. 1 lit. a GDPR), it can be withdrawn by you at any time. To withdraw consent, please contact us using the contact address specified in the section "Our contact details and your rights".

7. Using cookies and similar technological tools for internet analytics and marketing purposes

With your consent (Art. 6 para. 1 lit. a GDPR), we use the cookies and other similar technological tools from external service providers listed below on our website. Once the purpose of data processing has been fulfilled and the use of a particular technological tool has ended, the data collected with these tools will be deleted. Consent given can be withdrawn by you at any time. Detailed information on the possibility of withdrawing consent and your right to object can be found in the section "Cookies and similar technologies". More information can be found on the pages of individual service providers. If you have any questions about our service providers and the basis of our cooperation with them, please contact us. You can find our contact details in the section "Our contact details and your rights".

Using Google services

We use the technological tools from Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), as listed below. The information automatically collected by Google technologies about your use of our website is usually transferred to and stored on a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. The European Commission has not issued a decision on an adequate level of data protection for the USA. Our cooperation is based on standard data protection clauses adopted by the European Commission. If your IP address is processed by Google technological tools, it is shortened before being saved on Google's servers thanks to the activated IP anonymization. Only in exceptional cases will the full IP address be sent to Google's server and shortened there. Unless specified otherwise for individual Google technologies described in this privacy policy, data processing is carried out based on a joint data processing agreement with Google according to Art. 26 GDPR. Further information on data processing by Google can be found in Google's privacy policy.

Google Analytics

We use Google Analytics, a web analytics tool by Google, to analyze the use of our website, which automatically processes your data (IP address, time of the site visit, information about the device and browser, and information about the use of our website) and creates pseudonymized user profiles. Cookies may be used for this purpose. Your IP address is not merged with other data collected by Google. Data processing in Google Analytics is based on a data processing agreement with Google.

To optimize and make our website offer more attractive, we have also activated data sharing settings for "Google products and services". This allows Google to access data collected and processed in Google Analytics and use it to improve Google's products and services. Sharing data with Google is based on an additional agreement between the data controllers. We have no influence on subsequent data processing by Google.

We also use the Google Optimize tool, which is an extension of Google Analytics, for creating and conducting A/B tests of our website.

For web analytics purposes, we also use the Google Signals tool, which is an extension of Google Analytics and enables so-called "cross-device tracking" (identifying users using multiple devices). This means that if your internet-enabled devices are connected to your Google account and you have activated the "personalized advertising" option on your Google account, Google can generate reports on the usage of our site (especially the number of users using different devices), even if you change the device. We do not process your personal data in this regard, we only receive statistics based on Google Signals functions and technologies.

For internet analytics and advertising purposes in the Google Analytics service, we also use the so-called DoubleClick-Cookie, which allows recognizing your browser when using other websites. Google will use this information to compile a report on your activity on our website and to provide other services related to the use of the website.

Google AdSense

Our website advertises through Google AdSense space for other providers and advertising networks. These ads are shown to you at various places on our website. As part of the integration of Google AdSense, the so-called DoubleClick cookie by Google is saved on your end device during your visit to our site, which allows interest-based ad display and processes your data (IP address, time of the site visit, information about the device and browser, and information about the use of our website) and automatically assigns you a pseudonymized UserID.

Google Ads

With the help of Google Ads, we promote our website in search results and on third-party websites. In this case, when you visit our website, Google automatically saves a remarketing cookie on your device, which allows the display of interest-based ads based on the pages you visit by processing your data using a pseudonymous identifier (ID) (IP address, time of the site visit, information about the device and browser, and information about the use of our website). Further data processing only takes place if you have activated the option to personalize ads in your Google account settings. In such a case - if you are logged into Google services while visiting our website, Google will use your data together with data collected by Google Analytics to create and define so-called target group lists for cross-device remarketing purposes.

For internet analytics purposes, we use the Google Ads Conversion Tracking tool to measure and analyze your behavior when you have visited our site through Google Ads. Cookies may be used for this purpose, and data such as your IP address, time of the visit, information about the device and browser, and information about the use of our website, e.g., visiting a website or registering for the newsletter, are processed. Based on this data, pseudonymized user profiles are then created.

Google Maps

To visually present geographic information, Google Maps will store and process information about your use of maps and individual functions, including your IP address and location data. We have no influence on this data processing by Google.

Google reCAPTCHA

To secure against spam and to prevent abuse and improper use of our online forms (e.g., by malicious bots), Google reCAPTCHA is integrated with our website, which processes your data (IP address, time of the site visit, information about the device and browser, and information about the use of our website) and analyzes your use of our website using JavaScript scripts and cookies. Personal data entered by you in individual fields of forms on our pages are not read or saved.

Google Fonts

To ensure consistent presentation of content on our websites, the "Google Fonts" script is integrated with our website, which processes your data (IP address, time of the site visit, information about the device and browser, and information about the use of our website). We have no influence on this data processing by Google.

YouTube Video Plugin

To integrate third-party content with the YouTube video plugin, Google processes the following data during video playback: IP address, time of visit, and information about the user's device and browser.

Using Facebook services

Facebook Pixel

We use the Facebook Pixel tool provided by Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook"). The scope of functionalities of the Facebook Pixel tool used by us is indicated below. The Facebook Pixel automatically collects and stores data (your IP address, time of the site visit, information about the device and browser, and information about the use of our website, e.g., visiting a website or signing up for the newsletter). Based on this data, pseudonymized user profiles are created.
As part of the so-called extended data matching in Facebook Analytics, hashed information that can identify individuals (e.g., first and last names, email addresses, and phone numbers) is also