Privacy policy

of ROOTS & BRIDGES gGmbH

Last updated: November 24, 2025

ROOTS & BRIDGES gGmbH operates this shop and website, including all related content, tools, and services ("Services"). Our technical infrastructure is based on Shopify.

This Privacy Policy explains how we collect, process, store, and share personal data when you visit our website, use our Services, make purchases, donate, or otherwise interact with us.

By using our Services, you acknowledge this Privacy Policy.

1. What personal data do we process?

  • Contact data: Name, address, billing address, shipping address, phone number, email
  • Financial data: Payment method, transaction details (processed by payment providers)
  • Account data: Username, password, preferences
  • Transaction data: Orders, cart data, donations, returns
  • Communication data: Emails, support requests
  • Device and browser data: IP address, device ID, cookies, browser information
  • Usage data: Session duration, clicks, page views, referral sources
  • Donation-related data: Information required for donation receipts pursuant to Sections 51–63 AO
  • Payment information: Processed via Stripe, PayPal, Klarna, Google Pay, Apple Pay, Shopify Payments

2. Sources of personal data

  • Your direct input
  • Automated collection via cookies and tracking technologies
  • Shopify as our technical platform
  • Zoho One (CRM, Books, Inventory, Marketing Automation, SalesIQ, Analytics)
  • Payment service providers
  • Marketing and analytics partners

3. Purposes of data processing

  • Fulfillment of orders, donations, payments, shipping, and digital services
  • Compliance with tax obligations
  • Communication and customer support
  • Marketing, newsletters, automated campaigns, and personalization
  • Website optimization and user behavior analysis
  • Security and fraud prevention
  • Compliance with legal obligations

4. Sharing of personal data

  • Shopify
  • Zoho One (CRM, Books, Marketing Automation, Inventory, SalesIQ, Analytics)
  • Payment providers: Stripe, PayPal, Klarna, Shopify Payments, Google Pay, Apple Pay
  • Shipping and logistics partners
  • Dropshipping partners
  • Marketing and analytics partners
  • Authorities where legally required

5. Newsletter & Zoho Marketing Automation

Processing is based on your consent according to Art. 6 (1) lit. a GDPR.

  • Double opt-in registration
  • Storage of IP address, date, and time
  • Sending via Zoho Marketing Automation

EU entity: Zoho Corporation B.V., Utrecht, Netherlands

You can withdraw your consent at any time via the unsubscribe link or email.

6. Zoho SalesIQ & Website Tracking

We use Zoho SalesIQ and Zoho PageSense for analytics.

  • Visited pages
  • Click behavior
  • Time spent on pages
  • Approximate location
  • Technical device data

Legal basis: Art. 6 (1) lit. f GDPR.

7. WhatsApp Communication

We offer voluntary communication via WhatsApp Business.

  • Phone number
  • Usage and metadata
  • Message content (end-to-end encrypted)

Provider: WhatsApp Ireland Limited, Dublin, Ireland

8. International Data Transfers

Transfers outside the EU may occur based on standard contractual clauses and legal safeguards.

9. Storage and Retention

  • Duration of contractual relationship
  • Minimum 10 years for donation records
  • Until consent withdrawal
  • Legal retention obligations

10. Cookies & Tracking Technologies

We use cookies for functionality, analytics, personalization, and advertising. Settings can be adjusted via the cookie banner.

11. Your Rights under GDPR

  • Access
  • Rectification
  • Erasure
  • Restriction
  • Objection
  • Withdrawal of consent
  • Data portability
  • Right to lodge a complaint

Hamburg Data Protection Authority

12. Data Security

We implement appropriate security measures. However, no system is completely secure.

13. Third-Party Links

We are not responsible for external websites.

14. Children

Our Services are not intended for individuals under 16.

15. Changes to this Privacy Policy

We may update this policy at any time.

16. Contact

ROOTS & BRIDGES gGmbH
c/o WeWork
Gerhofstraße 1–3
20354 Hamburg
Germany

Email: info@roots-bridges.com
Phone: +49 1515 1551560

Controller under GDPR: ROOTS & BRIDGES gGmbH