Back

Privacy Policy

1. Privacy at a glance

In this privacy notice, we explain which personal data we process on our website and for which purposes.

We comply with the Swiss Federal Act on Data Protection (FADP) and, where visitors from the European Economic Area (EEA) are concerned, additionally with the EU General Data Protection Regulation (GDPR).

2. Newsletter sign-up

If you subscribe to our newsletter, we process your email address and your selected language to send you information about our launch, new drops and similar offers from Root Clothing.

The legal basis is your consent (Art. 6(1)(a) GDPR and the corresponding consent under Swiss data protection law). Providing your email address is voluntary, but required for us to send you the newsletter.

We store your data with our processor Supabase (Supabase, Inc., Dublin, Ireland) in an EU region selected by us. We have concluded a data processing agreement with Supabase.

For sending emails, we use the service Resend (Resend, Inc., 3045 Park Blvd. Ste 11 #245, Palo Alto, CA 94306, USA). For this purpose, we transfer your email address and language to Resend. Transfers to the USA are based on the EU Standard Contractual Clauses.

We store your data until you unsubscribe from the newsletter or withdraw your consent. Afterwards, we delete your email address from our mailing list, unless statutory retention obligations require a longer storage.

Each newsletter email contains a personalised unsubscribe link. If you click this link, we remove you from the list and will no longer send you newsletters. You can also request deletion at any time by contacting us at info@rootcl.com.

3. Hosting & access data (Vercel)

Our website is hosted by Vercel, Inc. When you access the website, certain access data are processed automatically (e.g. IP address, date and time of access, browser information, referrer URL, error and performance logs).

We need these data to deliver the website technically, to ensure stability and security, and to detect abuse.

The legal basis is our legitimate interest in operating a secure and stable website (Art. 6(1)(f) GDPR and the corresponding legitimate interest under Swiss data protection law).

Vercel may process data on servers outside Switzerland and the EU. Appropriate safeguards (in particular Standard Contractual Clauses) are used to ensure an adequate level of data protection.

4. Google reCAPTCHA

We use Google reCAPTCHA v3 to protect our forms against misuse (e.g. automated bots). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

reCAPTCHA analyses the behaviour of visitors in the background (e.g. IP address, mouse movements, time spent on the page, browser information). This information is transmitted to Google and evaluated there.

The legal basis is our legitimate interest in protecting our systems against misuse and ensuring the availability of the website (Art. 6(1)(f) GDPR and the corresponding legitimate interest under Swiss data protection law).

Further information can be found in Google’s Privacy Policy and Terms of Service.

5. Your rights

Depending on the applicable law, you have the following rights in relation to your personal data:

  • Right of access to the personal data we process
  • Right to rectification of inaccurate or incomplete data
  • Right to erasure of your data, unless retention obligations require continued storage
  • Right to restriction of processing
  • Right to object to processing on grounds relating to your particular situation (where provided by law)
  • Right to data portability (receipt of your data in a structured, commonly used format)
  • Right to withdraw your consent with effect for the future, e.g. for the newsletter

5. Your rights – contact & complaints

To exercise your rights, you can contact us at any time at info@rootcl.com.

You also have the right to lodge a complaint with a data protection supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC). If you live in the EEA, you can contact the competent authority in your country of residence.

6. Controller

The controller responsible for data processing on this website is:

Root Clothing

8000 Zurich

E-mail: info@rootcl.com

Privacy Policy – Root Clothing