Last updated: 30 August 2026
This Privacy Policy explains how rodesi projects GmbH ("we", "us") processes personal data when you place an order in the Fondo Oro Magazine Shop at fondo-oro.art/shop. It applies specifically to the Shop; for information about how we process data elsewhere on fondo-oro.art (e.g. server log files, cookies, newsletter sign-up), please see our general Privacy Policy.
1. Who is responsible
rodesi projects GmbH Hoffnungsthaler Str. 31A 51503 Rösrath, Germany
Registered with the Amtsgericht Bergisch Gladbach, HRB [Handelsregisternummer] Managing Director: Roberto De Simone VAT ID (USt-IdNr.): [USt-IdNr.] Email: info@fondo-oro.art Phone: [phone number]
2. What data we process, and why
When you place an order, we process:
Order and contact data — name, billing and shipping address, email address, phone number (if provided), and the items and prices of your order. Purpose: to conclude and fulfil the purchase contract. Legal basis: Art. 6(1)(b) GDPR (performance of a contract).
Payment data — depending on the payment method you choose, payment is processed by Squarespace Payments and/or Stripe, Inc. We do not store full card numbers ourselves; the payment provider processes this data on our behalf. Purpose: to process your payment. Legal basis: Art. 6(1)(b) GDPR.
Shipping data — your name and delivery address are passed to our shipping provider, DHL, so your order can be delivered. For deliveries outside the EU, this may include additional data required for customs declarations (e.g. item description and value). Purpose: to deliver your order. Legal basis: Art. 6(1)(b) GDPR; for customs purposes also Art. 6(1)(c) GDPR (compliance with a legal obligation).
Communication — if you contact us about an order (e.g. a return or a question), we process the content of your message and your contact details to respond. Legal basis: Art. 6(1)(b) GDPR and, where applicable, Art. 6(1)(f) GDPR (legitimate interest in handling customer inquiries).
Statutory retention — German commercial and tax law require us to keep invoices and order records for up to 10 years (§ 257 HGB, § 147 AO). Legal basis: Art. 6(1)(c) GDPR.
We do not use your order data for marketing without your separate consent.
3. Who receives your data
We share data only where necessary for the purposes above, with:
Squarespace (website hosting and checkout infrastructure) — Squarespace, Inc., USA
Squarespace Payments and/or Stripe, Inc. (payment processing) — USA
Deutsche Post DHL Group (shipping)
Tax advisors and authorities, where legally required
4. International data transfers
Squarespace, Inc. and Stripe, Inc. are based in the United States. Where personal data is transferred there, we rely on the safeguards recognised under Art. 44 et seq. GDPR (e.g. Standard Contractual Clauses and, where applicable, participation in the EU–U.S. Data Privacy Framework). Further details are available on request.
5. How long we keep your data
Order and invoice data: up to 10 years, per statutory commercial and tax retention obligations.
Data related to a customer inquiry: for as long as needed to resolve the matter, then deleted unless further retention is legally required.
6. Your rights
Under the GDPR, you have the right to:
request access to the personal data we hold about you (Art. 15),
request correction of inaccurate data (Art. 16),
request erasure, where no statutory retention obligation applies (Art. 17),
request restriction of processing (Art. 18),
receive your data in a portable format (Art. 20),
object to processing based on legitimate interest (Art. 21),
lodge a complaint with a data protection supervisory authority — for us, typically the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen.
To exercise these rights, contact us at info@fondo-oro.art.
7. Changes to this policy
We may update this Privacy Policy if our order, payment or shipping process changes. The current version is always available on this page.