Privacy Policy

Last updated: 10 September 2026

This Privacy Policy explains how RK Store (RK Tech & Print) collects, uses and shares personal data when you visit rk-store.de, place an order, create an account or contact us.

It covers our online store, including purchases of smartphones, accessories and 3D-printed products.

1. Who is responsible for your personal data?

The controller responsible for processing your personal data is:

Rok Koncic
Trading as RK Store (RK Tech & Print)
Germany

Email: kontakt@rk-store.de

You can contact us at this email address with questions about this policy or to exercise your data protection rights.

2. Personal data we collect

Depending on how you interact with us, we may process:

• Contact and delivery details: your name, billing address, shipping address, email address and telephone number.
• Order and transaction information: products ordered, order numbers, prices, selected payment method, payment status, delivery details, returns and refunds.
• Account information: account identifiers, saved addresses, preferences and order history.
• Personalisation information: names, text, images, designs or other details you provide for a custom or personalised product.
• Communications: enquiries, support messages, withdrawal requests and information provided when reporting a problem. This may include photographs or product serial numbers where relevant.
• Technical and usage information: IP address, browser and device information, access times, pages visited and interactions with our store. Optional tracking is subject to the consent requirements explained below.
• Privacy preferences: cookie choices, newsletter subscriptions and records of consent or withdrawal.

We receive information directly from you, automatically through our website, and from providers involved in payments, order fulfilment and delivery.

Please provide only the personal data needed for your purchase or enquiry.

3. Why we process personal data

We process personal data for the following purposes and on the corresponding GDPR legal bases:

Purpose	Legal basis
Processing purchases, payments, delivery, personalisation, returns and order-related support	Performance of a contract or steps requested before entering into a contract — Article 6(1)(b) GDPR
Providing an optional customer account at your request	Performance of a contract — Article 6(1)(b) GDPR
Meeting tax, accounting and applicable consumer-law obligations	Compliance with a legal obligation — Article 6(1)(c) GDPR
Maintaining website security, preventing fraud and establishing or defending legal claims	Legitimate interests — Article 6(1)(f) GDPR
Answering general enquiries unrelated to an existing or proposed contract	Legitimate interests in responding to enquiries — Article 6(1)(f) GDPR
Processing a delivery recipient’s details supplied by the purchaser	Legitimate interests in fulfilling the purchaser’s delivery instructions — Article 6(1)(f) GDPR
Sending optional newsletters and using optional analytics or advertising technologies	Consent — Article 6(1)(a) GDPR

Where we rely on legitimate interests, we consider the impact on your rights and reasonable expectations.

We need certain contact, delivery and payment information to fulfil an order. Without that information, we may be unable to complete your purchase. Providing information for optional marketing is voluntary.

4. Shopify

Our store is hosted on Shopify. Shopify International Limited, Ireland, and its service providers process personal data to operate the storefront, checkout, order management and related functions. For these services, Shopify generally processes data on our behalf.

Shopify Network Intelligence and enhanced services

If enabled, Shopify’s enhanced services may involve combining information about interactions with our store, other merchants and Shopify for analytics, personalisation and advertising. Shopify acts as an independent controller for the processing described in its enhanced-services terms.

Optional tracking and targeted advertising remain subject to applicable consent requirements.

Further information is available in Shopify’s Consumer Privacy Policy. You can also access Shopify’s Privacy Portal for privacy choices concerning Shopify’s own processing.

5. Payments and fraud prevention

Payments are handled by the payment providers available at checkout, which may include Shopify Payments, PayPal and Klarna, alongside supported card and wallet options.

The selected provider processes the information needed to authorise and complete your payment. We receive the transaction information needed to manage your order, such as payment status, transaction references and relevant billing details.

Payment providers may process information independently to meet legal obligations, prevent fraud or assess eligibility for particular payment methods. Their own privacy notices explain these activities, including any automated credit or risk assessments. See, for example, PayPal’s Privacy Statement.

6. Delivery, shipment tracking and withdrawal requests

Delivery and fulfilment

We share relevant order and delivery information with the suppliers, fulfilment partners, warehouses and carriers involved in your order. This may include your name, delivery address, necessary contact information and the products ordered.

Information is shared to arrange dispatch, deliver your order and resolve delivery problems.

AfterShip shipment tracking

We use AfterShip to provide shipment tracking. Relevant order and shipping information, such as tracking numbers, carrier details, delivery status and necessary recipient information, may be processed to provide this service.

AfterShip’s processing on our behalf is described in its Data Processing Agreement.

Online withdrawal form

Our online withdrawal function uses EU Widerrufsbutton, provided by 401layers UG (haftungsbeschränkt).

When you use this function, the information needed to identify your contract, record your withdrawal and send an acknowledgement is processed. This may include your name, email address, order reference, withdrawal statement and submission date and time.

We process this information to fulfil applicable legal obligations and handle the resulting return or refund. Further provider information is available in the EU Widerrufsbutton Privacy Policy.

7. Other recipients

Where necessary for the purposes described in this policy, personal data may also be disclosed to:

• Providers of hosting, email, IT support and related business services.
• Accountants, tax advisers and legal advisers.
• Public authorities where disclosure is legally required.
• Parties involved in establishing, exercising or defending legal claims, where disclosure is necessary and lawful.

Providers acting on our behalf are required to process personal data under appropriate contractual instructions and safeguards.

8. Cookies, analytics and advertising

Our website uses cookies and similar technologies.

Strictly necessary technologies support functions such as the shopping cart, checkout, security and the storage of your privacy choices. Where the legal conditions are met, these technologies do not require consent under Section 25(2) TDDDG.

Optional analytics and advertising technologies require your prior consent. These may measure website use, assess advertising performance or support personalised advertising. Their use is based on Section 25(1) TDDDG and, where personal data is processed on the basis of consent, Article 6(1)(a) GDPR. See Section 25 TDDDG.

You can review or change your choices through the Cookie settings / Cookie-Einstellungen link on our website. Withdrawing consent does not affect processing that was lawful before withdrawal.

Additional advertising-related choices may be available through our privacy choices page.

9. Newsletters and marketing emails

If you subscribe to our newsletter, we use your email address and relevant subscription preferences to send the communications you requested.

You can unsubscribe at any time using the link in a marketing email or by contacting kontakt@rk-store.de.

Unsubscribing does not stop necessary transactional communications, such as order confirmations, delivery updates or responses to your enquiries.

10. International transfers

Some service providers and fulfilment partners may process personal data outside the European Economic Area (EEA).

The protection applicable to a transfer depends on the provider, destination and processing arrangement. Transfer mechanisms may include an applicable European Commission adequacy decision, approved Binding Corporate Rules or Standard Contractual Clauses.

For relevant transfers within its group, Shopify describes reliance on Binding Corporate Rules. Its terms also provide for other safeguards, including Standard Contractual Clauses, where applicable. Details are available in Shopify’s Data Processing Addendum.

AfterShip’s Data Processing Agreement provides for Standard Contractual Clauses for relevant restricted transfers.

You may contact us for further information about the safeguards applicable to your data and how to obtain a copy.

11. How long we retain personal data

We retain personal data for the purposes described in this policy and for applicable legal retention periods.

• Accounting and tax records: where German statutory retention obligations apply, accounting vouchers are generally retained for eight years, relevant business correspondence for six years, and books and certain accounting records for ten years. The periods generally begin at the end of the relevant calendar year and may be extended where legally required. See Section 147 of the German Fiscal Code.
• Order and support information: retained for fulfilment, handling returns or complaints, and any necessary period for legal obligations or claims.
• Customer accounts: retained while needed to provide the account. Closing an account does not remove records we must retain separately.
• Personalisation files: retained only for production, related support and any justified legal or contractual retention needs.
• Marketing information: retained until you unsubscribe or the purpose ends. Limited consent records or suppression information may remain where necessary to demonstrate compliance and respect your preferences.
• Technical logs and tracking information: retained according to their security or service purpose and the applicable provider settings. Service-specific retention periods must be stated in the relevant disclosures.

When retention is no longer justified, personal data is deleted or anonymised.

12. Your rights

Subject to the applicable legal conditions, you may request access to your personal data, correction, erasure, restriction of processing and data portability. You may also withdraw consent at any time.

You may object to processing based on legitimate interests on grounds relating to your particular situation. We will stop unless we demonstrate overriding compelling grounds or need the data for legal claims.

You may object to direct marketing, including related profiling, at any time. We will stop processing your data for that purpose.

To exercise your rights, contact kontakt@rk-store.de. We generally respond within one month. For complex or numerous requests, we may extend this by up to two further months and explain the extension within the first month. Proportionate identity verification may be necessary. Requests are generally free of charge.

You also have the right to complain to a supervisory authority, particularly in the EU/EEA country where you live, work or believe an infringement occurred.

Further information is available from the European Data Protection Board.

13. Children and personalised products

Our store is intended for adult purchasers.

An adult may provide another person’s name or other information for a personalised product. We use this information for fulfilling the requested personalisation and related order administration.

Please avoid including unnecessary personal information, particularly sensitive information, in personalisation requests or uploaded files.

14. Data security

We use technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration and loss.

Access to personal data is limited according to the requirements of the relevant task or service.

15. Changes to this policy

We may update this Privacy Policy to reflect changes to our services, processing activities or legal requirements.

The date at the top indicates when this policy was last updated. Where required, we will provide additional notice or request consent before introducing new processing activities.

16. Contact

For questions about this Privacy Policy or the handling of your personal data, contact:

RK Store (RK Tech & Print)
Email: kontakt@rk-store.de