Privacy Policy - Rounver Corp.

This Privacy Policy explains how Rounver Corp. ("Rounver", "we", "us") collects and processes personal data when you visit rounver.com or contact us. We comply with the EU General Data Protection Regulation (GDPR), the UK GDPR and the Data Protection Act 2018. We also comply with applicable US federal and state privacy and data protection laws, including the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), where applicable.

1. Data controller

Rounver Corp., 1207 Delaware Ave #2978, Wilmington, DE 19806, USA. EIN: 98-1845546. Rounver Corp. is responsible for the processing described in this policy, including for users in the EU and the UK. Contact: info@rounver.com.

2. Data we collect

Contact data you submit (name, email, message).
Technical data: IP address, browser type, device, pages visited.
Cookies - see section 5.

3. Why we process it (lawful basis)

To reply to enquiries - legitimate interest (Art. 6(1)(f) GDPR).
To operate and secure the site - legitimate interest.
Analytics - only with your consent (Art. 6(1)(a)).

4. Sharing & international transfers

We do not sell personal data. We may share data with hosting and email providers acting as processors under contract. International transfers rely on Standard Contractual Clauses or equivalent safeguards.

5. Cookies

We use strictly necessary cookies to operate the site. Analytics and any non-essential cookies are only set after you accept via the consent banner. You can withdraw consent at any time by clearing site data in your browser.

6. Your rights

Access, rectification and erasure
Restriction and objection to processing
Data portability
Withdraw consent at any time
Lodge a complaint with your supervisory authority (e.g. the UK ICO)

To exercise any right, email info@rounver.com.

California residents (CCPA/CPRA)

Where the CCPA/CPRA applies, California residents have the following rights, subject to statutory exceptions:

Know and access the categories and specific pieces of personal information collected, its sources, purposes of use, and the categories of third parties to whom it is disclosed.
Request deletion, correction and a portable copy of their personal information.
Opt out of the sale of personal information or its sharing for cross-context behavioral advertising, where such processing occurs.
Limit the use and disclosure of sensitive personal information, where applicable.
Exercise privacy rights without unlawful discrimination.

The categories of information, sources, purposes, recipients and retention periods are described in sections 2–4 and 7. We do not sell personal data. Requests may be submitted using the email address above, including through an authorized agent. We may request information reasonably necessary to verify your identity or the agent's authority, as permitted by law, and will respond within the applicable legal deadlines.

Residents of other US states

Depending on your state of residence and the law applicable to our processing, you may have rights to access, correct, delete and obtain a portable copy of your personal data, and to opt out of targeted advertising, sale of personal data or certain profiling. Where provided by law, you may also appeal a denied request by contacting us at the email address above. These rights are subject to the relevant law's scope and exceptions.

7. Retention

Contact messages are retained for up to 24 months. Server logs are retained for up to 12 months. Consent records are retained as required by law.

8. Updates

We may update this policy; the date at the top reflects the latest version.