Privacy Policy & Legal Notice

We are delighted by your interest in our brand, Dustyrosa. The protection of your personal data is of utmost importance to us. Below, we provide you with detailed information about how we handle your data.

1. Legal Notice & Data Controller Information

The party responsible for data processing on this website (the "controller") in accordance with the General Data Protection Regulation (GDPR) is:

Company: Kevser Atik-Labadi & Amr Labadi GbR
Brand Name: Dustyrosa
Address: Walther-Grosse-Ring 3, 38855 Wernigerode, Germany
Email: info@dustyrosa.store

VAT ID (USt-IdNr.): DE353881962
Tax Number (Steuernummer): 117/175/68801
EORI Number: DE365263673624128

2. General Information on Data Processing

We process personal data of our users only to the extent necessary to provide a functional website and our content and services. The processing of personal data of our users takes place regularly only with the user's consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.

3. Data Collection on Our Website

Hosting via Shopify

Our store is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products and services to you. Your data is stored through Shopify’s data storage, databases, and the general Shopify application. They store your data on a secure server behind a firewall.

If you choose a direct payment gateway to complete your purchase, then Shopify stores your credit card data. It is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS). For more insight, you may also want to read Shopify’s Terms of Service (https://www.shopify.com/legal/terms) or Privacy Statement (https://www.shopify.com/legal/privacy).

Server Log Files

When you visit our website, the provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are typically: browser type and version, operating system used, referrer URL, host name of the accessing computer, and time of the server request. This data is not merged with other data sources. The basis for this data processing is Art. 6 (1) (f) GDPR, our legitimate interest in the technically flawless presentation and optimization of our website.

Contacting Us

If you contact us by email or via a contact form, the information you provide will be stored by us in order to answer your questions. We delete the data that arises in this context after the storage is no longer required, or restrict the processing if there are statutory retention requirements. The basis for this is Art. 6 (1) (b) GDPR if your request is related to the fulfillment of a contract, or our legitimate interest under Art. 6 (1) (f) GDPR to effectively process inquiries addressed to us.

Processing of Customer and Contract Data

We collect, process, and use personal data only insofar as it is necessary for the establishment, content, or modification of the legal relationship (inventory data). This is done on the basis of Art. 6 (1) (b) GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures. We process personal data about the use of our website (usage data) only to the extent necessary to enable the user to use the service or to bill for it.

4. Your Rights as a Data Subject

As a data subject, you have the following rights under the GDPR:

• Right to Information (Art. 15 GDPR): You have the right to request information about your personal data processed by us.
• Right to Rectification (Art. 16 GDPR): You have the right to demand the immediate correction of incorrect or completion of your personal data stored by us.
• Right to Erasure (Art. 17 GDPR): You have the right to demand the erasure of your personal data stored by us, unless processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest, or to assert, exercise or defend legal claims.
• Right to Restriction of Processing (Art. 18 GDPR): You have the right to demand the restriction of the processing of your personal data.
• Right to Data Portability (Art. 20 GDPR): You have the right to receive your personal data that you have provided to us in a structured, common, and machine-readable format or to request its transmission to another controller.
• Right to Object (Art. 21 GDPR): You have the right to object to the processing of your personal data if it is processed on the basis of legitimate interests pursuant to Art. 6 (1) (f) GDPR.
• Right to Lodge a Complaint (Art. 77 GDPR): You have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or work or our company headquarters.

5. Data Security

We use the widespread SSL (Secure Socket Layer) method in connection with the highest level of encryption supported by your browser to protect the security of your information during transmission. You can see whether an individual page of our website is transmitted in encrypted form by the closed representation of the key or lock symbol in the status bar of your browser.

6. Changes to this Privacy Policy

We reserve the right to modify this privacy policy at any time to ensure it complies with current legal requirements or to implement changes to our services in the privacy policy. The new privacy policy will apply to your next visit.

Last Updated: August 10, 2025