Menu

Privacy Policy

As of October 2026

1. Responsible person

The entity responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

RoacXtremeClimbing GmbH (RX Climbing Holds)
Wallenburger Straße 35
83714 Miesbach
Germany
Managing Director: Raul Ortiz
E-mail: info@rxclimbingholds.com
Telephone: +49 171 3406069

Further details can be found in our Legal notice.

2. General information and legal basis

Personal data is any data that can be used to identify you personally. We process your data exclusively on the basis of legal regulations (GDPR, BDSG, TDDDG). The most important legal bases are:

The storage of information on your device or access to it (e.g., cookies) takes place according to Section 25 Paragraph 1 TDDDG only with your consent, unless this is absolutely necessary for the service you have expressly requested (Section 25 Paragraph 2 TDDDG).

Some of the service providers we use are based in the USA or other third countries. Data is only transferred to these countries if an adequate level of data protection is guaranteed – in particular on the basis of an adequacy decision by the EU Commission (e.g., the EU-US Data Privacy Framework, provided the recipient is certified) or the EU Standard Contractual Clauses (Art. 46 GDPR).

3. Your rights

You have the right to:

Right to object (Art. 21 GDPR): Where we process data based on legitimate interests, you may object at any time for reasons arising from your particular situation. You may object to advertising at any time without giving reasons.

To exercise your rights, simply send an email to info@rxclimbingholds.com.

You also have the right to lodge a complaint with a data protection supervisory authority. The Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, is the supervisory authority responsible for us.

4. Storage duration

We only store personal data for as long as it is necessary for the respective purpose. Afterwards, it is deleted unless there are legal retention obligations. Due to commercial and tax law requirements (§ 257 HGB, § 147 AO), we generally retain order and invoice data for 6 to 10 years.

5. Hosting and server log files

This website is hosted by Namecheap, Inc. (USA). When you access our website, information transmitted by your browser is automatically stored in server log files: IP address, date and time of access, page accessed, referrer URL, browser type and version, and operating system.

This data is technically necessary to display the website and to ensure its stability and security. The legal basis for this is Article 6(1)(f) GDPR. A data processing agreement (Article 28 GDPR) exists with the hosting provider. Data transfer to the USA is based on the EU Standard Contractual Clauses. Further information: Namecheap Privacy Policy.

To speed up the website, we use the caching plugin LiteSpeed Cache, which works exclusively on our own server.

6. SSL/TLS encryption

This website uses SSL/TLS encryption for security reasons. You can recognize an encrypted connection by "https://" and the padlock symbol in your browser's address bar.

7. Cookies and consent management (Real Cookie Banner)

We use cookies and similar technologies. Technically necessary cookies (e.g., for shopping cart, checkout, and customer login) are set on the basis of Section 25 Paragraph 2 of the German Telemedia Act (TDDG) and Article 6 Paragraph 1 Letters b and f of the GDPR. All other cookies and services (statistics, marketing, external media) are only loaded after you have given your consent (Section 25 Paragraph 1 TDDG, Article 6 Paragraph 1 Letter a GDPR).

We use the WordPress plugin to manage your consents. Real Cookie Banner (devowl.io GmbH, Germany). Your consent decision, a pseudonymous identifier, date and time, and browser information are stored to respect your choice and to fulfill our obligation to provide evidence (Art. 7 para. 1 GDPR). The data is stored exclusively on our own server. The legal basis is Art. 6 para. 1 lit. c GDPR.

You can change or withdraw your consent at any time via the cookie settings (link or symbol on each page).

8. Making contact

When you contact us via contact form, email, or telephone, we process your information (e.g., name, email address, message) to hold your inquiry. The legal basis for this processing is Article 6(1)(b) GDPR if your inquiry relates to a contract; otherwise, it is Article 6(1)(f) GDPR. The data will be deleted as soon as your inquiry has been fully processed and there are no legal obligations to retain it.

WhatsApp: On our website, we offer a link to contact us via WhatsApp. You will only be redirected to WhatsApp after clicking this link. The provider is WhatsApp Ireland Limited, Ireland. WhatsApp processes your phone number, metadata, and message content according to its own terms and conditions; data may be transferred to the USA. Use of this service is voluntary – you can also contact us by email or phone at any time. Further information: WhatsApp Privacy Policy.

9. Customer account

You can create a customer account in our shop. We store the data you provide (e.g., name, address, email address, order history) to facilitate future orders. The legal basis for this is Article 6(1)(b) GDPR. You can have your customer account deleted at any time; simply send us an email. Statutory retention obligations remain unaffected.

10. Order processing and shipping

Our online shop is based on WooCommerce. To process your order, we process your order data (name, billing and delivery address, email address, telephone number, ordered items, payment method). The legal basis for this is Article 6(1)(b) GDPR, and for retention obligations, Article 6(1)(c) GDPR.

For delivery purposes, we will forward your name and delivery address to the shipping company. We will only transmit your email address or telephone number if this is necessary for delivery (e.g., delivery notification) or if you have given your consent.

We use the plugin to provide information about the shipment status. Trakoo – Orders Tracking for WooCommerce. Your order number and tracking number will be processed to show you the delivery status or to inform you by email (Art. 6 para. 1 lit. b GDPR).

We use [method/method] for correct tax calculation. WooCommerce Tax Automattic Inc. (USA). Delivery address data may be transmitted to Automattic's servers for processing purposes (Art. 6 para. 1 lit. b and c GDPR). Further information: Automattic's privacy policy.

11. Payment service providers

For payment processing, we transmit the necessary data (e.g., name, address, order amount, payment details) to your chosen payment service provider. The legal basis for this is Article 6(1)(b) GDPR. The payment service providers are partly responsible for the processing themselves and may conduct identity and credit checks for fraud prevention. We offer the following payment methods:

With Apple Pay and Google Pay, additional data is processed by Apple Distribution International Ltd. (Ireland) and Google Ireland Limited (Ireland), respectively. Data may be transferred to the USA with some providers (see section 2).

12. Sending emails

We send order confirmations and other system messages via the plugin. WP Mail SMTP via the mail server of our email provider. Your email address and the content of the message will be processed in this process (Art. 6 para. 1 lit. b GDPR).

13. Google Analytics 4 and Google Site Kit

With your consent, we use Google Analytics 4, integrated via the Site Kit plugin by Google. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies and similar technologies to evaluate the use of our website (e.g., pages visited, time spent on the site, device, approximate location). IP addresses are not stored by Google Analytics 4. Data may be transferred to Google LLC in the USA (see section 2).

The legal basis is your consent (Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TDDDG), which you can withdraw at any time via the cookie settings. Further information: Google's privacy policy.

14. Google Ads, Conversion Tracking and Google Merchant Center

With your consent, we use Google Ads Conversion tracking is integrated via the Google for WooCommerce plugin. The provider is Google Ireland Limited, Ireland. A cookie is set when you access our website via a Google ad so that we can recognize whether an ad led to a purchase. Visitors can also be tracked for personalized advertising (remarketing). Data may be transferred to Google LLC in the USA.

We transmit our product data to the Google Merchant Center in order to display it in Google Shopping; no personal data of our visitors is transmitted in this process.

The legal basis is your consent (Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TDDDG). Further information: Google's privacy policy.

15. Meta Pixel (Facebook/Instagram)

With your consent, we use the Meta-Pixel, This service is integrated via the Meta for WooCommerce plugin. The provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. The Meta pixel allows us to track visitor behavior after clicking on a Facebook or Instagram ad (e.g., product views, purchases) and to display targeted advertising. Meta may link this data to your Facebook or Instagram account and transfer it to Meta Platforms Inc. in the USA.

We are jointly responsible with Meta for the collection and transmission of data (Art. 26 GDPR). The legal basis is your consent (Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TDDDG). Further information: Meta's Privacy Policy.

16. Instagram feed

On our website, we display posts from our Instagram account (Smash Balloon Instagram Feed plugin). This may involve loading images and content from servers of Meta Platforms Ireland Limited (Ireland), which will transmit your IP address to Meta. This only occurs with your consent (Art. 6 para. 1 lit. a GDPR). Further information: Instagram's privacy policy.

17. Google Maps

On our website we link maps from Google Maps a (Google Ireland Limited, Ireland). When the map loads, your IP address and other information will be transmitted to Google; transmission to Google LLC in the USA is possible. The map will only be loaded after your consent (Art. 6 para. 1 lit. a GDPR). Further information: Google's privacy policy.

18. Gravatar

Profile pictures can be used in comments or product reviews via the service. Gravatar This information will be displayed by Automattic Inc. (USA). An encrypted string (hash) of your email address will be transmitted to Gravatar to check if a profile picture is stored. The legal basis for this is Article 6(1)(f) GDPR (appealing display of reviews). Further information: Automattic's privacy policy.

19. Changes to this Privacy Policy

We will update this privacy policy as soon as there are changes to our website or to legal requirements. The current version published here always applies.

en_GBEnglish
de_DEGerman en_GBEnglish