Privacy policy

Rocco GmbH respects your privacy and informs you transparently about the processing of your personal data when using our website, as well as about your rights, in accordance with the General Data Protection Regulation (GDPR).

Name and address of the controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states, as well as other data protection regulations, is:

Rocco GmbH Feldgatterweg 19 39011 Lana Italy

Email: hello@sparklingrocco.com
Website: https://sparklingrocco.com

Nature and scope of data processing

When you access and use our website, we collect personal data that your browser automatically transmits to our server. This information is temporarily stored in a so-called log file. This includes:

  • IP address
  • Browser type and version
  • Operating system
  • Referrer URL
  • Date and time of access
  • Information about user behaviour (clickstream data)

This data is technically necessary to display the website and ensure system security.

The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the secure and technically error-free provision of our website as well as in the prevention of misuse and attacks.

Storage period

The data stored in log files is retained for a limited period and subsequently deleted or anonymised, unless it is still required to ensure technical operation or to investigate security-related incidents.

Storage beyond this period may occur in individual cases if this is necessary to fulfil legal obligations or to assert or defend legal claims. The collection of data for the provision of the website and storage in log files is absolutely necessary for the operation of the website. Therefore, objection to this processing is not possible.

Contact via contact form / email

When you contact us via our contact form or by email, we process your name, your email address and the content of your enquiry. Additionally, the IP address as well as the date and time of the enquiry are stored.

Processing takes place exclusively to handle your enquiry and to ensure IT security. Data is not passed on to third parties, or only with your consent if required.

The legal basis for the collection and submission of a contact enquiry is Art. 6 para. 1 lit. b GDPR.

Storage period Data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data from the contact form input mask and data sent by email, this is the case when the respective conversation has ended. This is the case when it can be inferred from the circumstances that the matter in question has been conclusively resolved.

Right to object and erasure When contacting us by email, you can object to the storage of your personal data at any time. In such a case, the conversation cannot be continued. All personal data stored in the course of contacting us will be deleted in this case.

Shopify

Our website is operated via the e-commerce platform Shopify (provider: Shopify International Ltd., Dublin, Ireland). Shopify provides the technical infrastructure, manages payment and order data, and processes personal data as a data processor. Shopify processes personal data exclusively on the basis of a data processing agreement pursuant to Art. 28 GDPR. Further information can be found at this link: https://www.shopify.com/legal/privacy

Consent management

We use Shopify's consent management tool to obtain and document your consent to the use of cookies and external services in a legally compliant manner. You can adjust or revoke your selection at any time via the cookie settings.

Third-party providers & tools

We use the following third-party providers based on your consent or legitimate interests:

  • Meta (Facebook & Instagram): Reach measurement and personalised advertising
  • TikTok: Marketing, conversion tracking and sales processing (TikTok Shop)
  • Google (Analytics, Ads, YouTube): Web analytics, video content and marketing
  • Klaviyo: Newsletter and email marketing
  • Loox Reviews: Display of product reviews
  • Kaching Card, Kaching Bundles: Display of product bundles, discounts and shopping cart functions

Cookies and similar technologies

Our website uses technically necessary cookies as well as analytics and marketing cookies.

Technically necessary cookies are required to provide the website. They are used to ensure the operation of the website (e.g. shopping cart, language settings). Analytics and marketing cookies are only set with your consent. These are used to analyse user behaviour and optimise marketing measures.

Storage period Cookies are automatically deleted either at the end of your visit (session cookies) or after a specified period. Details on the storage period can be found in the cookie settings. You can delete cookies at any time in your browser settings.

Revocation You can revoke your consent at any time via the cookie settings or through the appropriate settings in your browser.

Newsletter

If you subscribe to our newsletter, we process your email address to send you regular information about our products and offers. Registration is voluntary and takes place via a double opt-in procedure.

The legal basis for processing your data is your consent pursuant to Art. 6 para. 1 lit. a GDPR.

You can revoke your consent at any time via the unsubscribe link in the newsletter. Your data will be deleted after unsubscription.

Your rights

Under the General Data Protection Regulation (GDPR), you have the following rights:

  • Right to information about the personal data we process (Art. 15 GDPR)
  • Right to rectification of inaccurate or incomplete data (Art. 16 GDPR)
  • Right to erasure of your personal data (Art. 17 GDPR), unless statutory retention obligations apply
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to the processing of your data (Art. 21 GDPR), particularly for direct marketing purposes
  • Right to withdraw consent given with effect for the future

In addition, you have the right to lodge a complaint with a competent data protection supervisory authority (Art. 77 GDPR).

To exercise your rights, you can contact us at any time at hello@sparklingrocco.com .

Last updated: January 2026