Skip to content
Rootora

Privacy policy

Placeholder — not legal advice. This text is a non-binding scaffold and must be reviewed and completed before go-live by a person specialising in food/e-commerce law.

1. Controller

The controller for data processing on this website is [Company name / Rootora, address, contact — see imprint].

2. Collection and processing of personal data

[Description of which data is collected when visiting the website, ordering and paying — server logs, order data, account and business customer data (incl. company name, VAT ID), email address.]

3. Payment processing (Stripe)

Payments are processed via Stripe; card data is captured exclusively in the input fields hosted by Stripe (Stripe Elements) — the merchant does not process any card data. [Add details on Stripe as a processor / third-country transfer and legal basis.]

4. Hosting & database

The storefront and commerce backend are operated separately; order data is stored in a managed PostgreSQL database (Neon, server location EU). [Add processing agreement, specific providers and server locations.]

5. Email delivery

Order confirmations and notifications are sent by email via the domain's mail server (SMTP). [Add provider/server location and legal basis.]

6. Newsletter

Our newsletter uses the double-opt-in procedure: your sign-up only becomes effective once you confirm it via the link in the confirmation email. We store your email address, the time of sign-up and confirmation, and a voucher code assigned to you. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time via the unsubscribe link in every newsletter email.

7. Cookies & local storage

We use only technically necessary cookies and local storage. Optional categories (statistics, marketing) are not currently in use and are only activated with consent via the cookie banner.

  • rootora_cart_id — links your cart (necessary, httpOnly cookie, lifetime approx. 7 days).
  • rootora_jwt — keeps you signed in to your account (necessary, httpOnly cookie, lifetime approx. 7 days).
  • rootora-consent-v1 — stores your cookie choice (necessary, local storage in the browser).
  • Stripe — at checkout for payment processing and fraud prevention (necessary / legitimate interest).

8. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to lodge a complaint with a supervisory authority. [Add contact for data subject rights.]