In Development
Coming Soon
We're currently crafting a brand-new shopping experience for you. Our site is still under construction, so please check back soon — and be the first to know the moment we open our doors by signing up below.
By signing up, you agree to our privacy policy. You can unsubscribe at any time.
Legal notice
Sarah Valeria D GmbH
Riedlstraße 3
80538 Munich
Germany
Email: hello@rousseline.com
Represented by the Managing Director: Sarah Valeria Duda
Registered office: Munich
Registration court: Local Court München
Commercial register number: HRB 313260
VAT ID number pursuant to § 27a UStG: DE 463761577
This legal notice also applies to the following social media profiles:
- https://www.instagram.com/rousseline.official/
Privacy policy
We value your trust and take the utmost care and apply the highest security standards to protect your personal data from unauthorized access.
The processing of personal data on our website rousseline.com (hereinafter referred to as the “website”) is carried out in accordance with the provisions of the General Data Protection Regulation (GDPR), the Telecommunications and Digital Services Data Protection Act (TDDDG), and the Federal Data Protection Act (BDSG), as well as on the basis of this Privacy Policy.
Name and Address of the Data Controller
The controller within the meaning of the General Data Protection Regulation is:
Sarah Valeria D GmbH
Represented by the Managing Director: Sarah Valeria Duda
Riedlstraße 3
80538 Munich
Email: hello@rousseline.com
Contact Person for Data Protection Inquiries
If you have any questions regarding data protection, exercising your rights (e.g., access or deletion), or other data protection-related concerns, you can contact us directly at any time: hello@rousseline.com.
Data Processing on Our Website
When you visit our website, our web server temporarily logs each visit in a log file. The following data is collected and stored until it is automatically deleted:
- IP address of the requesting computer
- Date and time of the visit
- Name and URL of the file accessed
- Amount of data transferred
- Indication of whether the request was successful
- Identification data of the browser and operating system used.
This data is processed for the purpose of enabling the use of the website (establishing a connection), ensuring system security, performing technical administration, maintaining the network infrastructure, and optimizing the website. This data is not used to identify individuals. This data is not combined with other data sources. The log file data is deleted as soon as it is no longer necessary for the stated purposes. IP addresses are deleted or anonymized after 7 days at the latest.
The legal basis for data processing is Article 6(1)(f) of the GDPR. Our legitimate interest lies in providing you with a functional, user-friendly, and secure website.
Our Security Standards
Your personal data is transmitted over the Internet on our website using the SSL security system (Secure Socket Layer). This technology offers a high level of security and is therefore also used by banks, for example, to protect data during online banking. We secure our website and other systems through technical and organizational measures against the loss, destruction, unauthorized access, alteration, or disclosure of your data by unauthorized persons.
Automated Decision-Making and Profiling
Your personal data is not used for automated decision-making or profiling.
Data Processing When Contacting Us
You can contact us by phone, mail, email, or through the contact form. You can find the relevant contact options on our contact page at https://rousseline.com/pages/contact.
When you contact us, we process the personal data you provide, including your name, address, email address, and, if applicable, phone number, as well as the content of your message and any other information you voluntarily provide, to the extent necessary to handle your inquiry.
The processing is carried out to handle your inquiry, to communicate with you, and—to the extent your inquiry is aimed at concluding or performing a contract—to carry out pre-contractual measures or to fulfill a contract.
The legal basis for the processing is Article 6(1)(b) of the GDPR, to the extent that the contact serves the purpose of initiating or performing a contract. In all other cases, the processing is based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR. Our legitimate interest consists in the proper handling and response to inquiries, as well as the maintenance of existing and future business relationships. In addition, we process personal data on the basis of Article 6(1)(f) of the GDPR to the extent that this is necessary to assert, exercise, or defend legal claims or to safeguard our legitimate interests in the proper conduct of business.
Your data will subsequently be deleted, unless this is precluded by retention periods under tax or commercial law or you have not consented to further processing and use.
The legal basis for the retention of your personal data under tax and commercial law is Article 6(1)(c) of the GDPR in conjunction with § 147 of the German Fiscal Code (AO) and § 257 of the German Commercial Code (HGB). We process the data you provide when contacting us and communicating with us until the purpose for processing no longer applies (e.g., after your inquiry has been fully processed) and no mandatory legal provisions (e.g., retention obligations or rights) prevent deletion.
Operation of the Online Store (Shopify)
We operate our online store using the store system provided by Shopify International Limited, Victoria Buildings, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”). Shopify processes personal data on our behalf, in particular to provide and ensure the technical security of the online store, as well as to process orders and returns. In particular, IP addresses, device and usage data, and - in the case of an order - name, address, contact information, and order details may be processed.
To the extent that Shopify processes personal data on our behalf, such processing is carried out for the purpose of implementing pre-contractual measures and fulfilling the contract in place with you in accordance with Article 6(1)(b) of the GDPR. To the extent that processing is necessary for the secure and functional operation of the online store, it is carried out—provided the legal requirements are met—on the basis of Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure and technically reliable operation of our online store.
We use Shopify Payments to process credit card payments. As part of the payment processing, we process the personal data necessary to execute and process the payment, as well as any refunds required in connection with a return. This may include, in particular, payment and transaction data, as well as other information necessary for payment processing. This processing is carried out for the purpose of fulfilling the contract in accordance with Article 6(1)(b) of the GDPR.
For more information on the processing of personal data in connection with Shopify Payments, please see Shopify’s Privacy Policy: https://www.shopify.com/de/legal/datenschutz.
We have entered into a Data Processing Addendum (DPA) with Shopify in accordance with Article 28 of the GDPR. Shopify may engage other affiliated companies and subprocessors to provide its services.
To support the operation and functions of our online store, we also use various Shopify apps. These include, in particular, the Shopify Flow app for automating processes and the DHL app to support shipping processing. To the extent that these applications process personal data, this is done primarily to fulfill and process orders, as well as to provide technical and organizational support for the operation of the store. Processing is carried out, to the extent necessary to fulfill the contract, on the basis of Article 6(1)(b) of the GDPR or, in other cases, on the basis of Article 6(1)(f) of the GDPR, provided that the legal requirements for this are met.
We use the “Pandectes” app to manage consent and control cookies and similar technologies. In particular, the app enables the collection and management of your consent decisions, as well as the corresponding control of cookies and similar technologies that require consent. Processing is carried out, to the extent necessary to fulfill legal obligations, on the basis of Article 6(1)(c) of the GDPR and, in all other respects, on the basis of Article 6(1)(f) of the GDPR for the technically necessary administration and documentation of your consent decisions. To the extent that consent is obtained regarding the use of cookies or similar technologies, the associated processing is based on your consent pursuant to Article 6(1)(a) of the GDPR.
For individuals in the European Economic Area, personal data is initially received by Shopify International Limited in Ireland, according to Shopify. Shopify may subsequently transfer personal data to other Shopify companies and service providers in third countries, particularly Canada and the United States. For transfers to Canada, an adequacy decision by the European Commission applies, to the extent that its scope of application is applicable. For transfers to other Shopify entities outside the European Economic Area and Switzerland, Shopify states that it relies on Binding Corporate Rules approved by the relevant European data protection supervisory authorities. To the extent necessary for further transfers to third countries, Shopify implements appropriate safeguards, in particular the Standard Data Protection Clauses adopted by the European Commission.
For more information, please see Shopify’s Privacy Policy: https://www.shopify.com/de/legal/datenschutz.
Data Processing When Using Our Online Store and for Order Processing
If you wish to place an order in our online store, you must provide your personal data—which we need to process your order—in order to conclude the contract. The mandatory information required to fulfill the contracts is marked separately; additional information is voluntary. We process the data you provide to fulfill your order, including billing. To this end, we may share your payment information with our bank. The legal basis for this is Article 6(1)(b) of the GDPR.
You may voluntarily create a customer account, which allows us to store your data for future purchases. When you create an account under “My Account,” the data you provide is stored on a revocable basis. You can delete all other data, including your user account, at any time in the customer area.
The collected customer data will be deleted upon completion of the order or termination of the business relationship. Statutory retention periods (e.g., commercial and tax law requirements) remain unaffected.
We use the data you provide to process your order. To this end, we share your address information with a contracted shipping company and, for the purpose of tracking your shipment, with the relevant service provider. We delete this data after the contract has been fulfilled and the retention obligations under tax and commercial law have expired. The legal basis for the collection and processing of your data for the purpose of order fulfillment is Article 6(1)(b) of the GDPR, as the processing is necessary for the performance of the contract concluded with you. The engagement of the service provider and the associated transfer of your personal data to the service provider is necessary to safeguard our legitimate interests, Article 6(1)(f) of the GDPR. Our legitimate interest lies in offering the most reliable and transparent shipping process possible, from which you, as a customer, also benefit.
Data Processing When Using a Customer Account
If you wish to use our online store as a registered user, you must register by providing your email address, a password of your choice, and [additional information, if applicable]. We use the so-called double opt-in procedure for registration, which means your registration is not complete until you have entered and confirmed your registration via a confirmation email sent to you for this purpose by entering the six-digit code you received. If you do not confirm your registration within 24 hours, your registration will be automatically deleted from our database. Providing the aforementioned data is mandatory; you may voluntarily provide any additional information when using our online store.
If you use our online store with a customer account, we will store the data necessary for contract fulfillment—including payment method details—until you permanently delete your account. Furthermore, we will store the voluntary data you provide for the duration of your account use, unless you delete it beforehand. You can manage and change all your information in the secure customer area. The legal basis is Article 6(1)(f) of the GDPR.
Data Processing for Newsletters
You can subscribe to our newsletter on our website. To do so, we process your email address. Additional information is voluntary and is used exclusively to address you personally or to tailor the content of the newsletter.
Registration is carried out using the double opt-in procedure. After you register, you will receive an email in which you must confirm your registration by clicking on a confirmation link. Your newsletter subscription will not take effect until after this confirmation. This ensures that no one can register using someone else’s email address.
To the extent that you have consented to this, we analyze usage behavior in connection with the newsletter. This includes, in particular, the analysis of open and click-through rates. The analysis serves to tailor our newsletters to the interests of our recipients, measure their success, and continuously improve the information we provide.
The legal basis for sending the newsletter and for any subsequent usage analysis is your consent pursuant to Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect, in particular by using the unsubscribe link in each newsletter or by using the corresponding function in your customer account. The lawfulness of the processing carried out prior to revocation remains unaffected.
To verify your consent, we store the time of registration and confirmation (double opt-in) as well as the log data collected in this process. This processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in being able to verify proper registration for the newsletter and the consent you have provided.
Your personal data will be processed for the purpose of sending the newsletter and for usage analysis until you revoke your consent or the newsletter is permanently discontinued. The log data stored to verify consent will be deleted as soon as it is no longer necessary to verify consent, to fulfill legal accountability obligations, or to assert, exercise, or defend legal claims.
We use a technical service provider to send the newsletter. To the extent that personal data is processed on our behalf in this context, this is done on the basis of a data processing agreement in accordance with Article 28 of the GDPR. The service provider does not process the data for its own purposes.
Cookies
Our website uses cookies and similar technologies (in particular local storage, session storage, IndexedDB, and pixels) to ensure the security and functionality of the website and—subject to your consent—to personalize content, statistically analyze the use of our website, and carry out marketing activities.
Technically necessary cookies and similar technologies are used pursuant to § 25(2) of the TDDDG. To the extent that personal data is processed in this context, such processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in providing our website in a secure, stable, and user-friendly manner.
All other cookies and similar technologies—in particular those used for analytics, statistics, convenience, and marketing purposes—are used exclusively with your prior consent in accordance with § 25(1) of the TDDDG and Article 6(1)(a) of the GDPR.
When you visit our website for the first time, you can use our consent management tool to specify which categories of cookies and similar technologies you wish to allow. Your consent is voluntary and may be modified or revoked at any time with future effect via the “Cookie Settings” on our website. The lawfulness of the processing carried out up until the time of revocation remains unaffected.
Use of Google Analytics
To the extent that you have consented to this, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
Google Analytics enables us to statistically analyze the use of our website and continuously improve our online offering. To this end, cookies and technologies comparable to are used to collect information about the use of our website. The information collected in this process may include, in particular, IP addresses, device information, browser information, usage behavior, and interactions with our website.
Google truncates the IP address within the European Union or the European Economic Area prior to further processing, to the extent that this is technically feasible.
We use Google Analytics exclusively on the basis of your consent in accordance with Art. 6(1)(a) of the GDPR and § 25(1) of the TDDDG.
The collected data may be transferred to servers operated by Google LLC in the United States. For data transfers to the United States, Google relies on the European Commission’s Adequacy Decision regarding the EU-U.S. Data Privacy Framework, provided that its requirements are met.
You may revoke your consent at any time with future effect via the cookie settings on our website.
For more information on data processing by Google, please see Google’s Privacy Policy.
Data Processing for Gift Certificates
On our website, you have the option to purchase gift certificates. In doing so, we process the personal data you provide during the ordering process—in particular your name, contact information, and order and payment details—for the purpose of fulfilling and processing your gift certificate order.
The legal basis for this processing is Article 6(1)(b) of the GDPR, as the processing is necessary for the performance of the contract concluded with you or for the implementation of pre-contractual measures.
For the technical provision and operation of our gift card shop, we engage Shopify International Limited, 2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (hereinafter “Shopify”) as a data processor in accordance with Article 28 of the GDPR. Shopify processes your personal data exclusively on our behalf and in accordance with our instructions.
To the extent necessary for the fulfillment of the gift card order, personal data may be transferred to other service providers, in particular payment service providers or shipping service providers.
Your personal data will be stored only for as long as is necessary to fulfill the gift card order and to comply with statutory retention requirements. In addition, we store the data until the expiration of the statutory limitation periods, to the extent necessary to assert, exercise, or defend legal claims.
The legal basis for this is Article 6(1)(f) of the GDPR. Our legitimate interest lies in asserting, exercising, or defending legal claims.
If you exercise your right of withdrawal, we process the personal data you provide (e.g., name, address, gift card number, and email address) to process and handle your withdrawal. This applies both when you exercise your right of withdrawal using the electronic withdrawal function provided on our website and when you submit your withdrawal by other means (e.g., via email or mail).
The legal basis for the processing is Article 6(1)(b) of the GDPR, as the processing is necessary for the performance and fulfillment of the contract, including the reversal of the transaction following the exercise of the right of withdrawal.
The data processed in connection with the cancellation will be stored only for as long as is necessary to process and handle the cancellation, as well as to fulfill statutory retention and documentation obligations. In addition, we store the data until the expiration of the statutory limitation periods, to the extent necessary to assert, exercise, or defend legal claims.
The legal basis for this is Article 6(1)(f) of the GDPR. Our legitimate interest lies in asserting, exercising, or defending legal claims.
Gift Certificate: Use of Wallet Features
You have the option to transfer purchased gift cards as a barcode or QR code to a digital Apple Wallet and store them there.
When using this feature, the data required to display and manage the gift certificate is transmitted to or made available for the Wallet application you have selected. This may include, in particular, the gift certificate code or ID, details regarding the gift certificate value or the booked service, and, if applicable, validity dates. If the gift certificate is personalized, the name of the gift certificate holder may also be processed.
Further processing of this data is the sole responsibility of the respective wallet provider under data protection law. We have no influence over the processing of data by the respective provider. Therefore, please refer to Apple’s privacy policy at https://www.apple.com/legal/privacy/
for information on the nature, scope, and purpose of data processing there.
It is possible that the respective wallet provider may also process personal data outside the European Union or the European Economic Area. For more information on this, please refer to the privacy policy of the respective provider.
The legal basis for providing the Wallet feature is Article 6(1)(f) of the GDPR. Our legitimate interest lies in providing you with a user-friendly and modern way to manage your gift cards digitally.
Payment Service Providers and Payment Methods
We offer various payment options for the products we provide. The available payment methods are displayed during the respective booking or ordering process.
Credit Card Payment
We offer credit card payments for products and gift cards. Specifically, we accept [Visa, Mastercard, American Express, JCB, and UnionPay, as well as Apple Pay, provided it is linked to a credit card] .
Payment processing is handled by our payment service provider, Shopify Payments. If you select credit card as your payment method, the personal data required to process the payment will be transmitted to Shopify Payments, as well as to the payment networks and card-issuing institutions involved in the payment process. This may include, in particular, the following data:
- Cardholder’s name,
- billing address,
- Credit card details (card number, expiration date, and security code),
- payment amount, and
- transaction details.
This data is processed exclusively for the purpose of fulfilling the contract concluded with you, processing payments, and preventing fraud and misuse. The legal basis is Article 6(1)(b) of the GDPR (performance of a contract) and Article 6(1)(f) of the GDPR (legitimate interest in secure and efficient payment processing and fraud prevention).
As a general rule, we do not store complete credit card data. The processing of sensitive payment data is typically carried out directly by the payment service provider or the relevant payment networks in accordance with the applicable security standards of the credit card industry (PCI DSS), to the extent necessary for payment processing.
To the extent that personal data is transferred to recipients outside the European Union or the European Economic Area in the context of payment processing, this is done exclusively in compliance with the requirements of Articles 44 et seq. of the GDPR, in particular on the basis of an adequacy decision by the European Commission or appropriate safeguards within the meaning of Article 46 of the GDPR.
For more information on data processing by Shopify Payments, please refer to the payment service provider’s privacy policy at: https://www.shopify.com/de/legal/datenschutz.
Social Media
Our website contains links to various social media platforms. These are merely links to external websites operated by third-party social media providers and are not plugins. Consequently, simply visiting our website at does not establish any connections or result in the transfer of personal data to these third-party providers. When you click on the respective button marked with the provider’s icon, you will be redirected to that provider’s website. At that moment, you leave our website. If you have any questions regarding data collection by third-party providers, please read the privacy policies provided by those providers. We link to the following social media platforms:
Instagram is a service provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. For more information, please see Instagram’s privacy policy: http://instagram.com/about/legal/privacy/.
TikTok
TikTok is a video platform for short clips that also offers social networking features. It is operated by the Chinese company ByteDance (Chinese name: Douyin/抖音短视频). For more information, visit: https://www.tiktok.com/legal/page/eea/privacy-policy/de.
Pinterest is a visual search engine and social media platform where users collect ideas, images, and videos on virtual pinboards. The platform is operated by Pinterest Inc., 651 Brannan Street, San Francisco, CA 94107, USA.
For more information, please see Pinterest’s Privacy Policy:
https://policy.pinterest.com/de/privacy-policy
Recipients of Personal Data
Within our company, only those employees who require your personal data to fulfill their respective tasks are granted access to it.
To the extent necessary to fulfill our contractual or legal obligations, we transfer personal data to external recipients. These may include, in particular, IT and hosting service providers, payment service providers, shipping and postal service providers, tax advisors, legal advisors, as well as government agencies or other public authorities, to the extent that a legal obligation exists to do so.
To the extent that we engage external service providers to process personal data on our behalf, this is done exclusively on the basis of a data processing agreement in accordance with Article 28 of the GDPR. These service providers process the data exclusively in accordance with our instructions and only to the extent necessary for the respective service.
For more information about the recipients of personal data in connection with specific processing operations, please refer to the relevant sections of this Privacy Policy.
Data Subject Rights
Provided that the legal requirements are met, you have the following rights in particular under the General Data Protection Regulation (GDPR):
- The right to access information regarding the processing of your personal data pursuant to Article 15 of the GDPR,
- The right to have inaccurate personal data rectified or incomplete personal data completed pursuant to Article 16 of the GDPR,
- The right to erasure of your personal data pursuant to Article 17 of the GDPR,
- Right to restriction of processing pursuant to Article 18 of the GDPR,
- Right to data portability pursuant to Article 20 of the GDPR,
- Right to withdraw consent pursuant to Article 7(3) of the GDPR with future effect. The lawfulness of the processing carried out prior to the withdrawal remains unaffected.
- Right to lodge a complaint with a data protection supervisory authority pursuant to Article 77 of the GDPR if you believe that the processing of your personal data violates the GDPR.
In particular, you may contact the data protection supervisory authority responsible for us:
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Phone: +49 (0) 981 180093-0
Email: poststelle@lda.bayern.de
Right to Object
To the extent that we process your personal data on the basis of Article 6(1)(f) of the GDPR (legitimate interests), you have the right, pursuant to Article 21(1) of the GDPR, to object to such processing at any time on grounds relating to your particular situation.
If your personal data is processed for the purpose of direct marketing, you have the right, pursuant to Article 21(2) of the GDPR, to object at any time to the processing of your personal data for the purpose of such marketing.
If you wish to exercise your right to object, simply send a notice to the contact information provided in this Privacy Policy.
Current Status and Changes to This Privacy Policy
This Privacy Policy is current as of August 2026.
We reserve the right to amend this Privacy Policy to the extent necessary due to further development of our website, the services we offer, or changes in legal or regulatory requirements. The most current version of the Privacy Policy is available on our website.