Privacy policy


1. General information

This Privacy Policy describes how personal data is collected and processed in the online store available at r2r-world.com (the “Online Store”).

The controller of your personal data is:

R2R
ul. Stefana Batorego 18/108
02-591 Warsaw, Poland
NIP: 6423116055
REGON: 383802872
Email: contact@r2r-world.com

Personal data is processed in accordance with applicable data protection laws, including Regulation (EU) 2016/679 (“GDPR”).

We take appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss or destruction.

 

2. What data we process and why

Depending on how you use the Online Store, we may process:

  • your name and surname;
  • billing and shipping address;
  • email address and telephone number;
  • order and purchase history;
  • information relating to payments, delivery, returns and complaints;
  • information provided when contacting us;
  • technical information such as IP address, browser, device and website activity;
  • marketing preferences and newsletter subscription status.

We process personal data where necessary to:

  • process and fulfil your order;
  • arrange payment and delivery;
  • handle returns, complaints and customer service;
  • comply with tax, accounting and other legal obligations;
  • protect the Online Store against fraud and security incidents;
  • establish, exercise or defend legal claims;
  • send marketing communications where you have provided the required consent;
  • analyse the use of the Online Store and measure advertising performance where the required consent has been obtained.

Depending on the purpose, the legal basis for processing is:

  • performance of a contract or taking steps at your request before entering into a contract;
  • compliance with a legal obligation;
  • our legitimate interests, where permitted by law;
  • your consent.

We do not store full payment card details. Payment information is processed by the relevant payment service provider.

 

3. How long we keep your data

Personal data is kept only for as long as necessary for the purpose for which it was collected.

Order, transaction and accounting information may be retained for the period required by applicable tax and accounting laws and for the time necessary to establish, exercise or defend legal claims.

Data processed on the basis of consent, including marketing data, is generally processed until the consent is withdrawn or the relevant purpose ceases to exist.

Where data is processed on the basis of our legitimate interests, it may be retained until those interests cease to apply or you successfully object to the processing.

 

4. Who we share data with

We may share personal data with service providers where this is necessary to operate the Online Store, fulfil your order or provide related services.

These may include:

  • Shopify, which provides the e-commerce platform used by the Online Store;
  • Shopify Payments, ING Pay and other payment service providers available at checkout;
  • shipping, courier, parcel locker, returns and logistics providers, including Apaczka / Alsendo Connect;
  • accounting and invoicing providers, including iFirma;
  • IT, hosting and technical service providers;
  • email and marketing service providers;
  • analytics and advertising providers, including Google and Meta;
  • legal, tax and accounting advisers;
  • public authorities where disclosure is required by law.

Only data necessary for the relevant purpose is shared.

Our Online Store is operated using Shopify. Shopify and some of our other service providers operate internationally, which means that personal data may in certain circumstances be processed outside the European Economic Area.

Where required, such transfers are made using safeguards recognised under applicable data protection law, including adequacy decisions or Standard Contractual Clauses.

 

5. Marketing, analytics and profiling

If you subscribe to our newsletter or otherwise provide marketing consent, we may send you information about R2R products, drops, promotions, events, content and other marketing communications.

You can withdraw your consent at any time by using the unsubscribe link included in our emails or by contacting us at contact@r2r-world.com.

Where you have provided the required consent, we may also use technologies provided by services such as Google, Meta and Shopify to:

  • analyse how the Online Store is used;
  • measure website and advertising performance;
  • create advertising audiences;
  • personalise advertising;
  • understand customer behaviour and improve the Online Store.

These activities may involve profiling.

We do not make decisions based solely on automated processing that produce legal effects or similarly significantly affect you.

 

6. Your rights

Under the GDPR, depending on the circumstances, you may have the right to:

  • access your personal data;
  • correct inaccurate or incomplete data;
  • request deletion of your data;
  • request restriction of processing;
  • receive certain personal data in a portable format;
  • object to processing based on legitimate interests;
  • object to direct marketing;
  • withdraw consent at any time where processing is based on consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before it was withdrawn.

Requests concerning personal data may be submitted to:

contact@r2r-world.com

You also have the right to lodge a complaint with the competent data protection authority.

In Poland, the competent authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).

 

7. Cookies and similar technologies

The Online Store uses cookies and similar technologies.

We may use:

Necessary cookies
These are required for the proper operation of the Online Store, including functions such as the shopping cart, checkout, payments, security and privacy preferences.

Analytics cookies
These help us understand how visitors use the Online Store, how customers interact with the website and how the website performs.

Marketing cookies
These may be used to measure advertising effectiveness, create advertising audiences and personalise advertising.

Where required by law, analytics and marketing technologies are used only after you provide consent.

You can accept, reject or manage non-essential cookies through the cookie preferences available in the Online Store. You may change or withdraw your consent at any time.

Rejecting non-essential cookies will not prevent you from placing an order, although some optional functionality may be limited.

 

8. Third-party websites and services

The Online Store may contain links to third-party websites or services.

We are not responsible for the privacy practices of third parties operating independently from R2R. When using external websites or services, you should review their privacy information separately.

 

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example if our services, technologies, service providers or legal obligations change.

The current version will always be available in the Online Store.

 

10. Contact

If you have any questions about this Privacy Policy or the way we process personal data, please contact:

R2R
ul. Stefana Batorego 18/108
02-591 Warsaw, Poland
Email: contact@r2r-world.com