Privacy policy · Datenschutzerklärung
A ROQUA piece is made around you, so we ask for a few personal details: your name, your size, the colours you love. This page explains what we collect, why, who helps us, and the rights you have under the EU General Data Protection Regulation (Datenschutz-Grundverordnung, GDPR / DSGVO).
As of October 2026
The controller (Verantwortliche) for data processing on this website is:
Roqua GmbH
c/o Myriam Chebance
Plumserjochstraße 19
81825 Munich
Germany
Managing Director (Geschäftsführerin): Myriam Chebance
Email: mc@roqua.com
Phone and WhatsApp: +49 179 4087197
ROQUA is a small atelier and is not required to appoint a data protection officer (Datenschutzbeauftragter). For any privacy question, write to Myriam directly at the address above.
Our website roqua.com, our request forms, the Style DNA quiz and our customer records run on FEA Create, a website and customer management platform. FEA Create is built on technology from HighLevel (LeadConnector LLC, Dallas, USA), so data may be stored on servers in the USA.
Provider: Carrie & Co. Ltd. (FEA Create), PO Box 164, Stockport, SK7 3WH, United Kingdom. Privacy policy: feacreate.com
When you visit the site, the server automatically records technical data: your IP address, date and time of access, the page visited, the website you came from, and your browser and operating system. We need this to show the website and keep it secure. Legal basis: our legitimate interest in a reliable, secure website (Art. 6 (1) (f) GDPR).
We have a data processing agreement (Auftragsverarbeitungsvertrag, Art. 28 GDPR) with the provider. Transfers to the United Kingdom are covered by the EU's adequacy decision for the UK (Art. 45 GDPR). Transfers to the USA are based on the EU-US Data Privacy Framework or on the EU Standard Contractual Clauses (Art. 46 GDPR). [Ask FEA which of the two applies]
Cookies are small text files your browser stores. When you first visit, a banner lets you choose "Accept essential" or "Accept all".
You can change or withdraw your choice at any time in the cookie settings or by deleting cookies in your browser.
This website uses the fonts Cormorant Garamond and Jost from Google Fonts, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. To show them, your browser connects to Google's servers and transmits your IP address.
Legal basis: our legitimate interest in a consistent, readable design (Art. 6 (1) (f) GDPR). More in Google's privacy policy: policies.google.com/privacy.
[If the fonts are uploaded to FEA and served from there instead, replace this section with: "The fonts on this website are hosted locally. No connection to Google is made."]
When you write to us by email or WhatsApp, we use your name, contact details and message to answer you and, if you order, to make your piece. Legal basis: preparing or fulfilling a contract (Art. 6 (1) (b) GDPR), or our legitimate interest in answering your questions (Art. 6 (1) (f) GDPR).
WhatsApp is provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, part of Meta. Messages are end-to-end encrypted, but WhatsApp processes metadata such as your phone number and time of contact, and data may be transferred to Meta in the USA (EU-US Data Privacy Framework). If you prefer not to use WhatsApp, simply email us at mc@roqua.com.
When you request a Signature Piece (Aya, Lillie, Rita or Bea), the form asks for your name, email address, phone number, usual EU size, and your choice of colour, fabric and details. After you order, we check your measurements with you.
We use this to send your personal preview within 24 hours on weekdays, to make your piece in our atelier and to deliver it. Legal basis: preparing and fulfilling the contract (Art. 6 (1) (b) GDPR). Without these details we cannot create your piece.
Your measurements and preferences are only seen by Myriam and the people in our atelier who make your piece. We do not sell your data or pass it on for advertising.
The Style DNA quiz asks about your style preferences and your email address, so we can send you your result. Legal basis: providing the service you asked for (Art. 6 (1) (b) GDPR). We only send you the newsletter if you separately tick that box.
To prepare your session, we use your quiz results and the outfit photos you send us. The session takes place as a live video call via [video call tool – e.g. Zoom or Google Meet, with provider name and address]. Afterwards you receive your personal Style DNA report. Legal basis: fulfilling the contract (Art. 6 (1) (b) GDPR).
The call is not recorded. Your photos are used only for your session and report.
If you buy the session as a gift voucher, we process the buyer's and, if given, the recipient's name and email to issue and redeem the voucher (Art. 6 (1) (b) GDPR).
You can pay by card or PayPal. The payment provider receives the details needed for the payment (name, amount, card or account details). We never see or store your full card number. Legal basis: fulfilling the contract (Art. 6 (1) (b) GDPR).
Stripe Payments Europe Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. Privacy policy: stripe.com/privacy
PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. Privacy policy: paypal.com/de/legalhub/privacy-full
To deliver your piece, we pass your name and delivery address to our shipping company: [shipping company – e.g. DHL or DPD]. If you agree, we also pass on your email address so the carrier can tell you when your parcel arrives. Legal basis: fulfilling the contract (Art. 6 (1) (b) GDPR) and, for the email address, your consent (Art. 6 (1) (a) GDPR).
If you sign up for "A little magic", our weekly letter, we use your email address and, if given, your first name to send it. We use double opt-in: you receive an email asking you to confirm, and only then are you subscribed. We record the time of sign-up and confirmation as proof.
The newsletter is sent with [newsletter tool – name and address of the provider], which processes your data on our behalf.
Legal basis: your consent (Art. 6 (1) (a) GDPR). You can unsubscribe at any time with the link in every newsletter or by writing to mc@roqua.com. We then delete your address from the list.
Our website links to our Instagram profile (@areyouroqua). This is a plain link: no data is sent to Instagram until you click it. Once you are on Instagram, the privacy policy of Meta Platforms Ireland Limited applies.
We keep personal data only as long as we need it for the purpose it was collected for. Messages and requests that don't lead to an order are deleted once the matter is closed.
Order data and invoices must be kept for up to ten years under German commercial and tax law (§ 257 HGB, § 147 AO). During that time we only store them, we don't use them for anything else.
We keep your measurements and style preferences after an order so we can make further pieces for you without asking again. If you want them deleted, just tell us.
You have the right to:
To use any of these rights, write to mc@roqua.com.
You can also complain to a data protection authority. The authority responsible for us is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany, lda.bayern.de.
This website uses SSL/TLS encryption. You can recognise it by "https://" and the lock symbol in your browser's address bar. Data you send us through our forms cannot be read by third parties on the way.
We update this privacy policy when our website or services change. The current version is always on this page.