1. Controller and contact
RomeoBlack is operated by GOLDENSIO SL, La Oliva, Fuerteventura, Espana, NIF B72723364. Contact: info@goldensio.com. GOLDENSIO SL is the data controller for the website, QR service, accounts, orders and support.
2. Data we process
Order data: email, selected region, product, model, size, quantity, price, order status, Stripe checkout identifiers and fulfillment status.
Account data: name, email, password hash, Google identifier, Google avatar and encrypted Google tokens when Google login with Drive is selected.
QR and scan data: unique serial, private QR token, destination URL, activation date, notification settings, scan time, hashed IP address, user agent, referrer and optional browser geolocation only when the scanner grants permission.
3. Purposes and legal bases
We use data to sell products, generate unique QR codes, activate QR links, provide dashboards, record scan statistics, send operational notices, prevent abuse, comply with accounting and tax duties and answer support requests.
Legal bases include contract performance, consent, legitimate interests in security and service improvement, and legal obligations.
4. Providers and sharing
We share data only when needed with payment providers such as Stripe, Google OAuth/Drive when selected, print-on-demand and fulfillment providers such as Printify when configured, hosting providers, email providers and technical support tools.
RomeoBlack does not store full payment card numbers. Print providers receive only the information needed to produce and ship an order.
5. Transfers, retention and security
Some providers may process data outside the EEA using appropriate safeguards such as adequacy decisions, standard contractual clauses or data processing agreements.
Order records are kept for tax, accounting and consumer law periods. Account and QR data are kept while the service is active. Security logs are kept only as long as reasonably necessary.
We use HTTPS, password hashing, encrypted secrets, access controls and limited administrative access.
6. Your rights
You may request access, rectification, erasure, restriction, portability, objection and withdrawal of consent by emailing info@goldensio.com. You may complain to a competent supervisory authority, including the Spanish Agencia Espanola de Proteccion de Datos (AEPD).
Company contact
GOLDENSIO SL - La Oliva, Fuerteventura, Espana - NIF B72723364
Email: info@goldensio.com