Policy

Introduction

This Privacy Policy explains how RAYANOVA ("we", "us", "our") collects, uses, stores, and protects your personal data when you visit rayanova.de or make a purchase. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679 — and the German Federal Data Protection Act (BDSG).

Data Controller

The data controller responsible for your personal data is:
RAYANOVA
Hamburg, Germany
Email: info@rayanova.de

What Data We Collect

We collect the following personal data when you use our website or place an order:

• Name and surname
• Email address
• Delivery address
• Payment information (processed securely by third-party payment providers — we do not store payment card details)
• IP address and browser information (collected automatically via cookies)
• Order history

How We Use Your Data

We use your personal data for the following purposes:

• To process and fulfil your orders
• To send order confirmations and shipping updates
• To respond to customer service enquiries
• To send marketing emails, if you have opted in (you may unsubscribe at any time)
• To improve our website and services
• To comply with legal obligations

Legal Basis for Processing

We process your personal data on the following legal bases under Article 6 GDPR:

• Contract performance (Art. 6(1)(b) GDPR) — to fulfil your order
• Legal obligation (Art. 6(1)(c) GDPR) — to comply with applicable laws
• Legitimate interests (Art. 6(1)(f) GDPR) — to improve our services
• Consent (Art. 6(1)(a) GDPR) — for marketing communications

Data Sharing

We do not sell your personal data. We may share your data with the following third parties solely for the purpose of fulfilling your order:

• Shipping carriers and logistics providers
• Payment processors (e.g. Shopify Payments, PayPal)
• Shopify Inc. — our e-commerce platform provider

All third-party providers are contractually obligated to handle your data in accordance with GDPR.

Data Transfers Outside the EU

Some of our third-party providers, including Shopify Inc., may process data outside the European Economic Area (EEA). In such cases, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Order data is retained for a minimum of 10 years in accordance with German commercial law (§ 257 HGB).

Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure / "right to be forgotten" (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent at any time

To exercise any of these rights, please contact us at info@rayanova.de. We will respond within 30 days.

Cookies

Our website uses cookies to improve your browsing experience, analyse site traffic, and enable certain features. You may control cookie preferences through your browser settings. For more information, please refer to our Cookie Policy.

Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the competent supervisory authority. In Germany, this is the Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (HmbBfDI): datenschutz.hamburg.de

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated date. We encourage you to review this policy periodically.