We are Deliver Labs s.r.o., ID No.: 29647479, with its registered office at Nové sady 988/2, Staré Brno, 602 00 Brno, Czech Republic, registered in the Commercial Register maintained by the Regional Court in Brno under file number C 152286. We operate the website available at ramble-books.com and make available digital content under the Ramble Books brand (hereinafter referred to as the “Website”).
If you visit our website, purchase or access our digital products, communicate with us, or otherwise interact with us, we may process your personal data as described in this Privacy Policy.
We process your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “GDPR”).
Please note that purchases of our digital products are processed through Lemon Squeezy. When you purchase a digital product, you provide certain personal data directly to Lemon Squeezy in its checkout environment. Lemon Squeezy may process such data as an independent controller for purposes such as payment processing, tax compliance, fraud prevention, invoicing, refunds, chargebacks and delivery of the purchased digital content. For more information about how Lemon Squeezy processes your personal data, please refer to Lemon Squeezy’s privacy documentation.
Personal Data Processed
We only process personal data to the extent necessary for the purposes described in this Privacy Policy. We may obtain personal data directly from you, automatically when you visit the Website, from your communication with us, or from Lemon Squeezy in connection with your purchase of our digital products.
Because Ramble Books does not require you to create a user account and does not provide its own checkout form, we generally process only a limited scope of personal data.
In particular, we may process the following categories of personal data:
Contact Data
Such as your e-mail address and any other contact details you provide to us when you communicate with us or, where applicable, when such data is made available to us through Lemon Squeezy in connection with your order.
Purchase and Order Data
Such as information about the digital product you purchased, order number or transaction identifier, purchase date, payment status, price, currency, refund or chargeback status, download/access status, and other information necessary to identify and manage your order.
Billing and Tax Data
Such as billing country, tax-related information, invoice information and other data processed in connection with tax, accounting or compliance obligations. These data are primarily processed by Lemon Squeezy as part of the checkout, payment, invoicing and tax compliance process. We may receive limited information to the extent necessary for our own accounting, compliance, support or business records.
Payment Data
Such as information that a payment has been made, payment status, transaction identifier, payment method type, refund status or chargeback information. We do not collect or store your full payment card details. Your payment card details are entered into and processed through the checkout environment operated by Lemon Squeezy and its payment partners.
Communication Data
Such as the content of your e-mails, messages, requests, complaints, refund requests, support inquiries, feedback or any other communication you send to us.
Cookies Data
Data obtained from technical files and similar tools and technologies.
We do not intentionally collect special categories of personal data, such as health data, data concerning your sex life or sexual orientation, political opinions, religious beliefs or similar sensitive information. However, because our digital products may concern personal and relationship-related topics, the fact that you purchased or viewed a particular product may be sensitive to you. We therefore treat such information carefully and use it only for the purposes described in this Privacy Policy.
The Website and digital content are not intended for children. We do not knowingly collect personal data from children. If you believe that a child has provided us with personal data, please contact us and we will take appropriate steps.
Purposes of the Processing of Personal Data
We process your personal data for the purposes listed below.
Performance of a Contractual Relationship and Delivery of Digital Products
We may process your personal data for the purpose of taking steps before entering into a contract with you, enabling you to purchase our digital products, operating the Website, redirecting you to the Lemon Squeezy checkout, making the purchased digital content available to you, identifying and managing your order, handling related customer support, and fulfilling our contractual obligations.
Purchases of our digital products are processed through Lemon Squeezy. Lemon Squeezy operates the checkout environment, processes the payment, handles certain tax, invoicing, fraud prevention, refund, chargeback and post-sale processes, and makes the purchased digital content available to you. In connection with your purchase, we may receive or otherwise process limited personal data from Lemon Squeezy where necessary to identify and manage your order, provide support, handle refunds or chargebacks or comply with our legal obligations.
For this purpose, we may process Contact Data, Purchase and Order Data, Billing and Tax Data, Payment Data and Communication Data. We may also process Cookies Data to the extent necessary to operate the Website, enable the purchase flow, maintain security, prevent misuse and ensure the technical functioning of the Website.
The legal basis for this processing is the performance of a contract with you or taking steps at your request before entering into a contract. In relation to tax, accounting and other statutory records, the legal basis is compliance with our legal obligations. In relation to fraud prevention, chargebacks, refunds, order management, cooperation with Lemon Squeezy and secure operation of the Website, the legal basis may also be our legitimate interest in ensuring that purchases are processed securely and properly.
We process personal data for this purpose for the time necessary to make the digital product available to you, manage the order and provide related support. Data that must be retained for accounting, tax or legal compliance purposes is kept for the period required by applicable law, generally for up to 10 years where required by tax or accounting regulations. After that, we may keep relevant data only for the period necessary to protect our rights and legal interests, or to handle refunds, chargebacks, complaints or similar requests.
Communication and Customer Support
We may process your personal data when you contact us, for example by e-mail or through another communication channel. This may include handling your questions, support requests, refund requests, complaints, feedback or other messages.
For this purpose, we may process Contact Data, Communication Data and, where relevant to your request, Purchase and Order Data, Billing and Tax Data and Payment Data.
The legal basis for this processing is our legitimate interest in communicating with you and handling your requests. Where the communication relates to an existing or potential purchase, the legal basis may also be the performance of a contract or taking steps prior to entering into a contract.
We process personal data for this purpose for the time necessary to handle the communication. We may then retain the communication for a reasonable period in case we need to refer back to it, protect our rights, or comply with legal obligations. Unless a longer retention period is required due to an order, legal claim, complaint or statutory obligation, communication data is generally deleted or anonymised within one year after the matter has been resolved.
Compliance with Legal Obligations
We may process personal data where this is necessary to comply with legal obligations applicable to us, in particular accounting, tax, consumer protection, data protection and other statutory obligations.
For this purpose, we may process Contact Data, Purchase and Order Data, Billing and Tax Data, Payment Data and Communication Data.
The legal basis for this processing is compliance with our legal obligations.
We process personal data for this purpose for the period required by applicable law. In particular, tax and accounting records may generally be retained for up to 10 years.
Protection of Our Rights and Legal Interests
We may process personal data to protect our rights and legitimate interests. This may include preventing misuse of the Website, handling disputes, refunds, chargebacks, complaints or legal claims, enforcing our terms, cooperating with authorities, and ensuring the security and integrity of the Website and our systems.
For this purpose, we may process all categories of personal data listed in this Privacy Policy, namely Contact Data, Purchase and Order Data, Billing and Tax Data, Payment Data, Communication Data and Cookies Data.
The legal basis for this processing is our legitimate interest in protecting our rights, property, business, customers and systems. Where we are legally required to process or disclose certain data, the legal basis is compliance with our legal obligations.
We process personal data for this purpose for the period necessary to protect our rights and legitimate interests. Where personal data relates to a contractual relationship, order, payment, refund, complaint or legal claim, we may retain it for the applicable limitation period and, where necessary, for up to 10 years after the relevant transaction or communication. If legal proceedings or another dispute are ongoing, we may retain the relevant data until the matter is finally resolved.
Analytics, Cookies and Website Improvement
We may use cookies, pixels and similar technologies to ensure the proper operation and security of the Website, analyse how visitors use the Website, measure performance, understand traffic sources, improve the Website and our digital products, and fix errors.
For this purpose, we may process Cookies Data and, where relevant, Communication Data.
The legal basis for processing strictly necessary cookies and similar technical data is our legitimate interest in ensuring the proper, secure and reliable operation of the Website. The legal basis for processing analytics cookies and similar technologies is your consent, where such consent is required by applicable law.
The retention period depends on the type of cookie or similar technology used. Session cookies are usually deleted after the end of your browsing session. Other cookies are retained for the period stated in the cookie banner or cookie settings, unless you withdraw your consent earlier or delete cookies in your browser.
Marketing and Remarketing
We may use marketing and remarketing tools to promote Ramble Books and our digital products, measure the effectiveness of our advertising campaigns, show relevant ads, and understand how visitors interact with our Website and advertisements.
For this purpose, we may process Cookies Data and, where relevant, Purchase and Order Data and Contact Data, for example to measure conversions, avoid showing irrelevant ads, or evaluate campaign performance.
The legal basis for this processing is your consent, where such consent is required by applicable law. Where we use limited data for general business analysis that does not require consent, the legal basis may also be our legitimate interest in promoting and improving our products.
We process personal data for this purpose for the period stated in the cookie banner, cookie settings or the relevant marketing tool, unless you withdraw your consent earlier.
Recipients of Personal Data
As part of processing your personal data, we may share data with third parties if they help us provide our services or if we are legally obliged to share such data. Recipients of personal data include:
- Members of our team and persons cooperating with us who need access to the data for the purposes described in this Privacy Policy;
- Providers of website hosting, cloud infrastructure, storage, security, CDN, backup and technical maintenance services and e-mail, communication, customer support and similar tools;
- Providers of legal, accounting, and tax services;
- Government authorities and institutions to the extent we are legally required to disclose information;
- Google Ireland Limited, which provides storage and analytics tools. If data is transferred to Google LLC, it is registered under the Data Privacy Framework;
- Sold through Link, LLC f/k/a Lemon Squeezy LLC, to the extent necessary for processing your order, accepting payment, making the purchased digital content available to you, handling invoices, taxes, refunds, chargebacks and related post-sale processes;
- Meta Platforms Ireland Limited, which provides analytics and marketing tools. If data is transferred to Meta Platforms, Inc., it is registered in the Data Privacy Framework.
Some of the recipients listed above may process personal data outside the European Economic Area. Where personal data is transferred outside the European Economic Area, we ensure that such transfer takes place only where an adequate level of protection is ensured, in particular on the basis of an adequacy decision of the European Commission, standard contractual clauses approved by the European Commission, the EU-U.S. Data Privacy Framework where applicable, or other appropriate safeguards under the GDPR.
Your Rights
Under the GDPR, you have certain rights with regard to your personal data. If you have any questions or complaints about the processing of your data, or if you wish to exercise any of the rights listed below, you can contact us via email at info@ramble-books.com.
We will process your request without undue delay, and in any case within one month of receipt. Given the complexity or volume of requests, this period may be extended by an additional two months. If so, we will notify you in advance, including the reason for the extension.
Right of Access
You have the right to obtain confirmation from us as to whether or not we are processing your personal data.
If we do process your personal data, you have the right to access that data and ask us to tell you the purpose of the processing, which categories of data we process about you and what the sources of the data are, who the recipients of the personal data are and for how long the processing takes place.
We will also inform you of your right to rectification, withdrawal of consent, erasure, portability, restriction of processing, objection to processing and the right to lodge a complaint with a supervisory authority. However, all this information is already provided in this Privacy Policy.
Right to Withdraw Consent
If we process your data based on your consent, you have the right to withdraw it at any time. Withdrawal does not affect the legality of processing before withdrawal.
Right to Rectification
You have the right to request correction of inaccurate personal data concerning you. Depending on the specific purpose of the processing, you may also have the right to have incomplete personal data completed, including by providing an additional declaration.
Right to Erasure (“Right to be Forgotten”)
As part of exercising your rights, you can also ask us to delete your personal data. We will comply with such a request if:
- we no longer need your personal data for the purposes for which it was collected or processed;
- you withdraw the consent on the basis of which we processed the personal data and we have no other reason for processing the data;
- you object to processing and there are no overriding reasons for processing; or you object to processing for direct marketing purposes;
- we have processed your data unlawfully.
Right to Restriction of Processing
You may request restriction of processing of your personal data if:
- you contest the accuracy of your personal data (in which case we will restrict processing until the accuracy of the personal data has been verified);
- the processing would be unlawful and you request restriction of processing instead of erasure;
- we no longer need your personal data for the purposes described above but you require it for the establishment, exercise or defence of legal claims;
- you have objected to the processing of the data (in which case we will restrict processing until we have verified that our legitimate interests in processing outweigh your legitimate interests).
Right to Data Portability
Where we process your personal data by automated means, you have the right to obtain from us the personal data relating to you in a structured, commonly used and machine-readable format and to request that we transfer that data to another controller. We may restrict the exercise of this right so as not to prejudice the rights and freedoms of others.
Right to Object
If we process your personal data on the basis of our legitimate interest, you have the right to object to this processing. Upon objection, we will no longer process your personal data if we do not have sufficient grounds for processing, establishing, exercising or defending legal claims or if we process the data for direct marketing purposes.
Right to File a Complaint
In addition to exercising the above rights with us, you also have the option to file a complaint with the competent supervisory authority in the country of your habitual residence, place of work, or the place where the alleged violation of the GDPR occurred.
Changes to This Privacy Policy
We may update this Privacy Policy if changes occur in how we process your personal data. The current version will always be available on our Website.