PRIVACY POLICY (GDPR)
1. USER INFORMATION
THETATAU CORP, S.L., as the Data Controller, informs you that, in accordance with Regulation (EU) 2016/679 of 27 April (General Data Protection Regulation – GDPR) and Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), your personal data will be processed as described in this Privacy Policy.
This Privacy Policy explains how we collect your personal data, why we collect it, how we use it, with whom we share it, how we protect it, and the choices available to you regarding the processing of your personal data.
This Policy applies to the processing of personal data collected through the website rovoroneurope.com in order to provide our products and services.
By using this Website and accepting this Privacy Policy, you agree to the processing of your personal data as described herein.
2. CONTACT DETAILS
Company name: THETATAU CORP, S.L.
Trade name: THETATAU CORP
Tax ID (CIF): B72515109
Registered address: Urbanización Santelvira 15, 08110, Barcelona, Spain
Email: info@rovoroneurope.com
3. KEY PRINCIPLES
We are committed to processing personal data in a lawful, fair, and transparent manner. Our data protection principles include:
- Lawfulness: Personal data is collected only for specific, explicit, and legitimate purposes.
- Data Minimization: Only data strictly necessary for each purpose is processed.
- Purpose Limitation: Data will not be processed for purposes incompatible with those originally stated.
- Accuracy: Personal data is kept accurate and up to date.
- Data Security: Appropriate technical and organizational measures are applied to prevent unauthorized access, loss, alteration, or disclosure.
- Access and Rectification: Users may access and correct their data at any time.
- Retention Limitation: Data is retained only for the period necessary to fulfill its purpose.
- International Transfers: Where applicable, data transfers outside the EU/EEA will be protected in accordance with GDPR.
- Third Parties: Data sharing with third parties is carried out only under lawful and contractual safeguards.
- Marketing and Cookies: Processing related to advertising and cookies complies with applicable legislation.
4. COLLECTION AND PROCESSING OF PERSONAL DATA
When you visit the Website, we may collect information about your device, browsing behavior, and interactions with the Website. Additional data may be collected when you place an order or contact customer support.
For the purposes of this Privacy Policy, “Personal Data” means any information that identifies or may identify a natural person.
a) Website usage data
Examples of data collected:
Browser type, IP address, time zone, cookies, visited pages, viewed products, search terms, and interaction data.
Purpose:
To ensure correct Website functionality, improve user experience, and analyze usage statistics.
Source:
Collected automatically through cookies, log files, pixels, and similar technologies.
Disclosure:
Shared with technical service providers and analytics partners acting as Data Processors.
Further details are available in our Cookie Policy.
b) Order and customer data
Examples of data collected:
Name, billing and shipping address, email address, telephone number, payment details (processed securely through third-party payment providers), and order history.
Purpose:
To process orders, manage payments, arrange shipping, issue invoices, provide customer support, communicate order-related information, prevent fraud, and—where permitted—send commercial communications.
Source:
Collected directly from the User.
Disclosure:
Shared with payment gateways, logistics companies, order fulfillment partners, and service providers necessary for transaction completion.
Whenever personal data is requested, Users will be informed of its purpose.
5. LAWFUL BASIS FOR PROCESSING
Personal data is processed based on one or more of the following legal grounds:
- The User has given explicit consent
- Processing is necessary for the performance of a contract
- Processing is required to comply with a legal obligation
- Processing is based on legitimate interest that does not override the User’s fundamental rights
- Processing is necessary for billing, accounting, or tax compliance
Consent may be withdrawn at any time.
6. DISCLOSURE OF PERSONAL DATA
Personal data may be disclosed to service providers acting as Data Processors under contractual confidentiality and data protection obligations.
No personal data will be transferred to third parties except where legally required or necessary for service delivery.
7. USER RIGHTS
Users may exercise the following rights at any time:
- Right of access (Article 15 GDPR)
- Right to rectification (Article 16 GDPR)
- Right to erasure (Article 17 GDPR)
- Right to restriction of processing (Article 18 GDPR)
- Right to data portability (Article 20 GDPR)
- Right to object (Article 21 GDPR)
Where processing is based on consent, the User may withdraw consent at any time without affecting prior lawful processing.
To exercise these rights, please send a reasoned request to:
Users also have the right to file a complaint with the competent supervisory authority, particularly the Spanish Data Protection Agency (AEPD), if they believe that data processing does not comply with current regulations.
8. LEGAL INFORMATION
The provisions of this Privacy Policy complement and do not replace other applicable data protection laws.
This Policy may be updated periodically to reflect legal or operational changes. When updates occur, Users will be informed where required and may be asked to review and accept the revised version.