We process personal data primarily for the following purposes:
• To operate and maintain our website for corporate and informational purposes.
• To manage marketing and cashback campaigns conducted through third-party platforms.
• To comply with legal obligations and respond to inquiries.
• To analyze website usage and improve our content and marketing performance.

The legal bases for our processing are as follows:
• Art. 6(1)(a) GDPR – consent for optional marketing and analytics cookies.
• Art. 6(1)(b) GDPR – processing necessary for the performance of a contract (e.g., participation in promotional campaigns).
• Art. 6(1)(f) GDPR – legitimate interests, including improving website functionality and protecting against abuse.

We may collect and process the following categories of personal data:
• Identification and contact data (name, email, phone number).
• Campaign participation data (proof of purchase, cashback details, responses to promotions).
• Technical data (IP address, browser type, device information, cookies, and usage logs).
• Communication data (correspondence with our team).

Our website uses cookies and similar technologies for technical operation, analytics, and marketing purposes. Detailed information about the cookies we use can be found in our Cookie Policy: https://www.albertroger.com/cookie-policy.

Visitors can manage or withdraw consent for cookies at any time through their browser settings or our cookie banner.

We may share personal data with trusted service providers who process data on our behalf, including marketing, IT hosting, and campaign management partners. All of our data processors operate within the United Kingdom or the European Union, ensuring that data remains protected under equivalent data protection standards.

We retain personal data only as long as necessary for the purposes described above, or as required by applicable law. Typically, marketing campaign data is stored for up to 24 months after the campaign ends, unless further retention is legally required.

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or destruction. Our security framework complies with Article 32 GDPR and includes access controls, encryption, and secure hosting environments.

Under the GDPR and UK GDPR, you have the following rights:
• Right to access – obtain a copy of your personal data.
• Right to rectification – correct inaccurate or incomplete data.
• Right to erasure – request deletion of your data (‘right to be forgotten’).
• Right to restriction of processing – limit how we use your data.
• Right to data portability – receive your data in a structured, machine-readable format.
• Right to object – object to certain processing, including direct marketing.
• Right to withdraw consent at any time.

We collaborate with third-party partners for marketing and cashback campaigns. These partners act as independent controllers or processors and are contractually obliged to process personal data in accordance with GDPR and applicable data protection laws.

If you believe your data has been processed unlawfully, you may file a complaint with your local supervisory authority:
• In the United Kingdom: Information Commissioner’s Office (ICO) – www.ico.org.uk
• In Germany: Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI) – www.bfdi.bund.de
• In the European Union: contact your national Data Protection Authority (DPA).

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The latest version is always available on our website at www.albertroger.com/privacy-policy.