Privacy Policy

1) Introduction and contact details of the data controller
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about how we handle your personal data when you use our website. Personal data is all data with which you can be personally identified.
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Marcin Robert Lubinski, Spółdzielców 31D, 72-006 Mierzyn, Poland, Tel.: 039749499799, Email: info@robertoluccini.de.
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

2) Data collection when visiting our website
2.1 When you visit our website for information purposes only, meaning you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

Website visited
Date and time of access
Amount of data sent in bytes
Source/reference from which you accessed the site
Browser used
Operating system used
IP address used (possibly anonymized)

Processing takes place in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. Your data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use.
2.2 For security reasons and to protect the transmission of personal data and confidential content (e.g., orders or inquiries), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the prefix “https://” and the lock symbol in your browser bar.

3) Hosting & Content Delivery Network
For hosting our website and displaying the content, we use a provider who processes data exclusively on servers located within the European Union, either directly or through selected subcontractors.
All data collected on our website is processed on these servers.
We have concluded a data processing agreement with the provider to ensure the protection of visitors’ data and to prohibit unauthorized disclosure to third parties.

4) Cookies
To make your visit to our website attractive and to enable the use of certain functions, we use cookies. Cookies are small text files stored on your device. Some cookies are deleted after closing the browser (so-called “session cookies”). Other cookies remain longer and allow us to store your settings (so-called “persistent cookies”).

If personal data is processed through cookies, processing takes place either according to Art. 6(1)(b) GDPR (performance of a contract), Art. 6(1)(a) GDPR (consent), or Art. 6(1)(f) GDPR (legitimate interest in optimal functionality and user-friendly design).

You can configure your browser to inform you about the use of cookies and allow or refuse them individually, or to generally exclude them. If you choose not to accept cookies, some functions of our website may be limited.

5) Contacting us
When you contact us (e.g., via contact form or email), personal data is processed solely for the purpose of handling your request and only as necessary.
Processing is based on our legitimate interest in responding to your inquiry in accordance with Art. 6(1)(f) GDPR. If your inquiry aims to conclude a contract, Art. 6(1)(b) GDPR applies additionally. Your data will be deleted once your request has been fully resolved, provided no statutory retention obligations exist.

6) Data processing when opening a customer account
According to Art. 6(1)(b) GDPR, personal data will be collected and processed when you provide it during the opening of a customer account. Which data is required can be seen on the respective input form.
You can delete your customer account at any time by sending a message to the controller. After deletion, your data will be removed provided that all contracts have been completed and no legal retention obligations or legitimate interests prevent deletion.

7) Use of customer data for direct marketing
7.1 Newsletter subscription
If you subscribe to our newsletter, we will regularly send you information about our offers. The only required field is your email address. Other information is optional and used to address you personally. We use a double opt-in process: you receive a confirmation link by email, which you must activate to complete your subscription.
With activation, you grant consent according to Art. 6(1)(a) GDPR. We store your IP address and the date and time of subscription for documentation.
You can unsubscribe at any time using the link in the newsletter or by sending a message to the controller.

7.2 Stock availability notifications
You may subscribe to receive a one-time email notification when temporarily unavailable products are back in stock. The procedure and legal basis are the same as in section 7.1. You can unsubscribe at any time.

8) Data processing for order handling
8.1 For the purpose of fulfilling the contract and delivery, we pass on personal data to transport companies and financial institutions, as necessary, in accordance with Art. 6(1)(b) GDPR.
If we are obliged to provide updates for goods with digital elements or digital products, we use your contact details to inform you (Art. 6(1)(c) GDPR).

8.2 Payment service providers (PayPal)
If you choose PayPal as a payment method, personal data such as name, address, and payment details will be transmitted to PayPal, according to Art. 6(1)(b) GDPR.

If PayPal performs a creditworthiness check, this is based on our legitimate interest (Art. 6(1)(f) GDPR). You may object to this processing at any time.

9) Rights of the data subject
You have the following rights regarding your personal data:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to notification (Art. 19 GDPR)
Right to data portability (Art. 20 GDPR)
Right to withdraw consent (Art. 7(3) GDPR)
Right to lodge a complaint (Art. 77 GDPR)

Right to object:
If we process your data based on legitimate interest (Art. 6(1)(f) GDPR), you may object at any time for reasons relating to your personal situation.
If we process your data for direct marketing purposes, you may object at any time without giving reasons.

10) Duration of data storage
The duration of storage depends on the legal basis, purpose of processing, and statutory retention periods.

Data processed on the basis of consent will be stored until consent is revoked.
Data processed to fulfill a contract will be stored until obligations are completed and retention periods expire.
Data processed on the basis of legitimate interest will be stored until an objection is made, unless we have compelling legitimate reasons.

Otherwise, personal data will be deleted when it is no longer necessary for the purposes for which it was collected.