Privacy Policy

1. Data Controller

The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

David Richard
Friesenwall 116
50672 Cologne
Germany
Email: [email protected]

2. General Information on Data Protection

The protection of your personal data is important to us. We process personal data confidentially and in accordance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR).

Personal data means any information that can be used to directly or indirectly identify a natural person.

3. Data We Collect

When you use our website, place orders, register, or contact us, the following personal data in particular may be processed:

• First and last name
• Email address
• Telephone number
• Billing address and, where applicable, other address details provided as part of an order
• IP address and technical connection data
• Order and contractual data
• Payment information required for processing the transaction

The data actually processed depends on which functions of our website you use.

4. Purposes and Legal Bases for Processing

We process personal data in particular for the following purposes and on the following legal bases:

Orders and Contract Fulfilment
Personal data is processed insofar as this is necessary to process your order, provide the ordered digital products or services, and fulfil the contract.
Legal basis: Art. 6(1)(b) GDPR.

Customer Service and Communication
If you contact us, we process the data you provide in order to handle your request.
Where the communication is necessary for the performance of a contract or to take steps prior to entering into a contract, the processing is based on Art. 6(1)(b) GDPR.
Where processing is necessary to handle other enquiries, it may be based on our legitimate interest in efficient customer communication pursuant to Art. 6(1)(f) GDPR.

Compliance with Legal Obligations
Where we are required to process or retain personal data due to legal obligations, in particular commercial or tax-related obligations, the processing is based on Art. 6(1)(c) GDPR.

Website Security and Prevention of Misuse
Where technical data is processed to ensure the security and proper functioning of our website or to prevent misuse, this processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR.

Processing Based on Consent
Where we obtain your consent for a specific type of processing, the processing is based on Art. 6(1)(a) GDPR.
Consent that has been given may be withdrawn at any time with effect for the future.

5. Payment Providers

External payment service providers, such as PayPal, Stripe, or Wise, may be used to process payments.

The data required to process a payment may be transmitted to the payment service provider selected by you.

RoyShop does not store complete credit card or bank details where these are processed directly by the respective payment service provider.

Where processing is necessary for payment and contract fulfilment, it is based on Art. 6(1)(b) GDPR. Where statutory retention obligations apply, processing is based on Art. 6(1)(c) GDPR.

The respective payment service provider's privacy policy additionally applies to its further processing of personal data.

6. Cookies

Our website may use cookies and comparable technologies.

Technically necessary cookies are used insofar as they are required for the basic functions of the website and the ordering process.

Where consent is required for certain cookies or comparable technologies, these will only be used after the corresponding consent has been given.

7. Data Security

This website uses SSL/TLS encryption (HTTPS) to protect the transmission of confidential information.

We also implement appropriate technical and organisational measures to protect personal data.

8. Recipients of Personal Data

Personal data may be disclosed to external service providers insofar as this is necessary for the operation of the website, contract fulfilment, or compliance with legal obligations.

These recipients may include, in particular, payment service providers, hosting and IT service providers, as well as public authorities where there is a legal obligation to disclose the data.

9. Data Retention

Personal data is stored only for as long as necessary for the respective processing purpose.

Where statutory retention obligations apply, the relevant data will be stored for the period required by law.

10. Your Rights

Subject to the applicable legal requirements, you have the following rights in particular:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing based on Art. 6(1)(e) or (f) GDPR (Art. 21 GDPR)
• Right to withdraw data protection consent with effect for the future (Art. 7(3) GDPR)
• Right to lodge a complaint with a competent data protection supervisory authority (Art. 77 GDPR)

An objection pursuant to Art. 21 GDPR relates exclusively to certain types of data processing, for example processing based on legitimate interests. It does not affect an existing contract for digital products and does not create a right to return a product, receive a refund, or terminate the contract.

To exercise your data protection rights, you can contact us at:
[email protected]

11. Digital Products – No Right of Withdrawal, No Returns

RoyShop offers digital content and digital services, including downloads, access credentials, licences, files, and comparable non-physical services.

Pursuant to Section 356(5) of the German Civil Code (BGB), the right of withdrawal for contracts concerning digital content that is not supplied on a tangible medium expires when:

1. RoyShop has begun performance of the contract,
2. the consumer has expressly consented to RoyShop beginning performance before the expiry of the withdrawal period, and
3. the consumer has confirmed their awareness that, by giving this consent, they lose their right of withdrawal.

For digital services, the corresponding provisions of Section 356(4) BGB apply once the service has been fully performed and the required confirmations have been provided.

Therefore, once performance has begun or the digital product has been made available, there is in particular no right of withdrawal, no right of return, and no entitlement to a refund solely due to a subsequent change of mind.

This does not affect statutory rights in the event of technical defects, non-delivery, or defective digital products.

The required consents and confirmations are obtained and documented during the ordering process.

12. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy if legal requirements, the services we use, or the processing of personal data change.

The current version published on this website applies.