Image
Joomla Plugins

Privacy Notice

Robilau – Creative Outputs · robilau.com
Last updated: 21 October 2026

1. Who is responsible for your data?

The controller responsible for processing personal data described in this notice is:

Laurent ROBIN
Trading as

Robilau – Creative Outputs
Alsenberger Str. 69
95028, Germany
Email: support@robilau.com

This notice explains how we process personal data when you visit robilau.com, purchase our GPL-licensed Joomla or WordPress plugins and extensions, download products, or contact us for support.

2. Visiting our website

When you access our website, our hosting infrastructure processes information needed to deliver the website and maintain its security. Depending on the configuration, this includes your IP address, request date and time, requested page or file, response status, referring page, and browser and operating-system information.

Purpose and legal basis: Necessary website delivery, troubleshooting and protection against misuse are based on Article 6(1)(f) GDPR. Our legitimate interests are operating a reliable website and protecting our systems and visitors.

3. Orders, payments and customer accounts

We process the information necessary to handle your order, such as your name, email address, billing address, purchased products, order date, payment status and transaction reference. Where relevant, we also process business details, VAT identification numbers and information required to determine applicable taxes.

We use this information to process payments, provide downloads, issue invoices, manage customer access and administer your support and update entitlement.

Purchases include 12 months of support and updates. Renewal is optional. We process entitlement dates and renewal orders to provide these services.

Legal bases:

  • Article 6(1)(b) GDPR, where necessary to enter into or perform our contract with you.

  • Article 6(1)(c) GDPR, where processing is required by applicable tax or accounting law, including applicable duties under the German Fiscal Code and Commercial Code.

  • Article 6(1)(f) GDPR for necessary fraud prevention and handling business customers’ contact persons. Our legitimate interests are protecting transactions and managing business relationships.

Customer accounts: Accounts are required, the account information stored and can be deleted on demand.

Information marked as mandatory is needed for the stated contractual or legal purpose. Without it, we may be unable to complete your purchase or provide the requested service. Optional information is identified as such.

Payment providers

Payment providers may process information under their own legal responsibilities, including payment-security and anti-money-laundering obligations. Their privacy notices explain that processing.

Whether payment credentials are entered directly with the payment provider and whether Robilau receives or stores any card or bank details.

4. Downloads, updates and plugin connections

We process actual data, such as order identifier, account identifier, download token, entitlement expiry date and download logs to provide purchased downloads and access to support and updates.

Legal basis: Article 6(1)(b) GDPR where necessary to provide the purchased services. Necessary security and abuse-prevention records are processed under Article 6(1)(f) GDPR, based on our interest in protecting the service.

Retention: Actual retention period for download and entitlement records, including what happens after the 12-month service period ends.

Connections from installed plugins or extensions: none. exceptions are documented.

The GPL licence does not itself require consent to analytics or telemetry. Any optional telemetry must be described separately, including how to enable or disable it and withdraw consent where consent is used.

5. Contact and support

When you email support@robilau.com or use [contact form/support portal, if applicable], we process your contact details, message, order information and any attachments or technical information you provide.

Purposes and legal bases: We process enquiries concerning a potential or existing contract under Article 6(1)(b) GDPR. For other enquiries, Article 6(1)(f) GDPR applies; our legitimate interest is responding to correspondence and resolving issues.

 

6. Cookies and similar technologies

Our website uses cookies.

Under § 25 TDDDG, storing information on your device or accessing information already stored there generally requires consent. An exception applies where the operation is strictly necessary to provide a digital service you expressly request, or solely to transmit a communication.

Any subsequent processing of personal data also requires a GDPR legal basis. Depending on the purpose, this is Article 6(1)(b), Article 6(1)(f), or—with your consent—Article 6(1)(a) GDPR.

Optional analytics, advertising and embedded services are activated only after you give the required consent. You can refuse them or withdraw consent at any time through [working “Privacy settings” link], as easily as you gave it.

You can also manage cookies through your browser. Blocking necessary cookies may affect features such as login or checkout.

 

7. Who receives personal data?

Personal data is accessible only to people and organisations that need it for the stated purposes. Depending on the service used, recipients include:

  • Hosting, infrastructure, backup, email and support providers.

  • Checkout and payment providers.

  • Accounting service providers and professional advisers.

  • Tax authorities and other public bodies where disclosure is legally required.

 

8. International transfers

We do not treat the worldwide availability of our products as consent to overseas data transfers.

10. How long we keep data

We retain personal data only as long as needed for the stated purpose or an applicable legal obligation.

  • Orders and accounts: Actual account and operational order-data retention criteria.

  • Invoices and accounting records: Generally eight years for accounting vouchers, ten years for certain books and records, and six years for relevant business correspondence, where the applicable German rules require this. The relevant period generally starts at the end of the calendar year specified by law. Particular tax rules or ongoing proceedings may require longer retention.

  • Legal claims: Necessary records may be retained until the applicable limitation period expires or a dispute is finally resolved.

  • Backups: Deleted data is removed from backups and is not used for ordinary business purposes while awaiting removal.

Expiry of support and updates does not automatically require deletion of invoices or other legally required records.

11. Your rights

Subject to the applicable legal conditions, you have the right to:

  • Access your personal data and receive a copy.

  • Have inaccurate data corrected and incomplete data completed.

  • Request erasure or restriction of processing.

  • Receive data you provided in a structured, commonly used, machine-readable format where processing is automated and based on consent or contract, and request transmission to another controller where technically feasible.

Right to object: Where processing is based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. We will stop unless we demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or processing is needed for legal claims. You may object to direct marketing, including related profiling, at any time; that processing will stop.

Withdrawal of consent: You may withdraw consent at any time, without affecting the lawfulness of processing before withdrawal. Use [privacy-settings link], an applicable unsubscribe link, or email support@robilau.com. Withdrawal concerns processing based on consent; it does not remove separate contractual or statutory processing obligations.

To exercise your rights, contact support@robilau.com. We may request proportionate information to verify your identity. We generally respond within one month; where legally permitted, this may be extended by two further months, with an explanation within the first month.

You may complain to a supervisory authority, particularly where you habitually live or work or where an alleged infringement occurred.

 

12. Automated decisions

We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.

13. Changes to this notice

We update this notice when our processing activities or legal requirements change. The current version is published on this page. Where required, we provide additional notice or obtain fresh consent before introducing the relevant processing.