Privacy policy

Controller

RUKO GmbH, Industriestraße 1, 78532 Tuttlingen, Germany, is the data controller. Contact privacy@ruko.de for privacy questions.

Data we process

• Contact details: title, name, email address, and postal address
• Entry data: net purchase value, purchase date, and uploaded receipt
• Consents: acceptance of privacy/terms, optional newsletter signup, and email confirmation via double opt-in
• Technical data: session identifier for spam protection and form security

Purposes and legal bases

We process your data to run the campaign, verify receipts, deliver premiums, and administer the Vespa prize draw (Art. 6(1)(b) GDPR).

Newsletter signup is processed only with your explicit consent (Art. 6(1)(a) GDPR) and can be withdrawn at any time.

Strictly necessary session data is used for security and abuse prevention (Art. 6(1)(f) GDPR).

Recipients and processors

Data may be shared with hosting providers and shipping partners where required. Data processing agreements are in place under Art. 28 GDPR.

Retention

Entry data is kept for the campaign period and statutory retention periods, typically up to three years after the campaign ends unless longer retention is required by law.

Your rights

• Access, rectification, erasure, restriction, and data portability
• Objection to processing based on legitimate interests
• Withdrawal of consent with future effect
• Complaint to a supervisory authority

Cookies

We use only strictly necessary session cookies. No analytics, marketing, or tracking cookies are set without your consent.