Privacy policy
Data protection
We are pleased that you are visiting our online shop. The protection and security of your personal information when using our website is very important to us. We would therefore like to inform you at this point which of your personal data we collect when you visit our website and for what purposes it is used.
This data protection declaration applies to the Internet offering of this online shop, which can be accessed under the domain displayed in the address bar of the browser (“our website”) and is based on the requirements of the EU General Data Protection Regulation (EU-GDPR) and the Federal Data Protection Act (BDSG).
Who is responsible and how do I contact you?
Responsible person
The company specified in the imprint of this shop is responsible for processing personal data within the meaning of the EU General Data Protection Regulation (GDPR).
Data protection officer
We are not obliged to appoint a data protection officer.
What is it about?
This data protection declaration meets the legal requirements for transparency in the processing of personal data. This is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, your age, your address, your telephone number, your date of birth, your email address, your IP address or user behavior when visiting a website. Information for which we cannot (or only with disproportionate effort) establish a connection to you personally, e.g. through anonymization, is not personal data. The processing of personal data (e.g. collection, query, use, storage or transmission) always requires a legal basis and a defined purpose.
Stored personal data will be deleted as soon as the purpose of the processing has been achieved and there are no lawful reasons for further retention of the data. We will inform you about the specific storage periods and criteria for storage in the individual processing operations. Regardless of this, we store your personal data in individual cases to assert, exercise or defend legal claims and if there are statutory retention obligations.
Who gets my data?
We only pass on your personal data that we process on our website to third parties if this is necessary to fulfill the purposes and in the individual case is covered by the legal basis (e.g. consent or protection of legitimate interests). In addition, in individual cases we pass on personal data to third parties if this serves to assert, exercise or defend legal claims. Possible recipients can then be, for example, law enforcement authorities, lawyers, auditors, courts, etc.
To the extent that we use service providers to operate our website who process personal data on our behalf in accordance with Article 28 of the GDPR, these may be recipients of your personal data. Further information on the use of processors and web services can be found in the overview of the individual processing operations.
Do you use cookies?
No cookies are used. The communication that takes place between your access device (computer, mobile phone, tablet) and the provider's “web server” (fashion GbR) takes place using session IDs (session identification numbers). These are applied to applications using stateless protocols to map multiple requests to a single session.
What rights do I have?
Under the conditions of the legal provisions of the General Data Protection Regulation (GDPR), you as a data subject have the following rights: Information in accordance with Art. 15 GDPR about the data stored about you in the form of meaningful information on the details of the processing as well as a copy of your data;
Correction in accordance with Art. 16 GDPR of incorrect or incomplete data stored by us;
Deletion in accordance with Art. 17 GDPR of the data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
Restriction of processing in accordance with Art. 18 GDPR if the accuracy of the data is disputed, the processing is unlawful, we no longer need the data and you refuse its deletion because you need it to assert, exercise or defend legal claims or you object against the processing in accordance with Art. 21 GDPR.
Data portability in accordance with Art. 20 GDPR, as long as you provide us with personal data within the framework of consent in accordance with Article 6 Paragraph 1 Letter a of the GDPR or on the basis of a contract in accordance with Article 6 Paragraph 1 Letter b of the GDPR and these were processed by us using automated procedures. You will receive your data in a structured, common and machine-readable format or we will transmit the data directly to another person responsible, as long as this is technically feasible.
Objection in accordance with Art. 21 GDPR against the processing of your personal data, provided that this is based on Art. 6 Para. 1 lit. e, f GDPR and there are reasons for this that arise from your particular situation or the objection to direct advertising directed. The right to object does not exist if overriding, compelling legitimate reasons for the processing can be proven or if the processing is carried out to assert, exercise or defend legal claims. If there is no right to object to individual processing operations, this is stated there.
Revocation of your consent in accordance with Article 7 Paragraph 3 of the GDPR with effect for the future.
Complain to a supervisory authority in accordance with Article 77 of the GDPR if you believe that the processing of your personal data violates the GDPR. As a rule, you can contact the supervisory authority at your usual place of residence, your place of work or our company headquarters.
How is my data processed in detail?
Below we will inform you about the individual processing operations, the scope and purpose of data processing, the legal basis, the obligation to provide your data and the respective storage period. An automated decision in individual cases, including profiling, does not take place.
Provision of the website
Type and extent of processing
When you access and use our website, we collect personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called log file:
IP address of the requesting computer
Date and time of access
Name and URL of the retrieved file
Browser used and, if applicable, the operating system of your computer
User agent
Our website is not hosted by us, but by a service provider who processes the aforementioned data on our behalf in accordance with Article 28 of the GDPR.
All data is stored securely: exclusively in Munich, Germany
All data is stored on fashion GbR servers. The servers are located in a premium data center with state-of-the-art security features. Key data of the premium data center: Level3, Munich-Trudering location, certified according to ISO 27001, 24/7 CCTV, access control, diesel NEA preheated, N+1 UPS, fire detection, green electricity, up to 6kw per rack. For further information see: Premium data center
This data will not be merged with other data sources. The basis for data processing is Article 6 Paragraph 1 Letter b GDPR, which allows the processing of data to fulfill a contract or pre-contractual measures.
Purpose and legal basis
The processing is carried out to protect our overriding legitimate interest in displaying our website and ensuring security and stability on the basis of Article 6 (f) GDPR. The collection of data and storage in log files is absolutely necessary for the operation of the website. There is no right to object to processing due to the exception under Article 21 (1) GDPR. To the extent that further storage of log files is required by law, processing is carried out on the basis of Art. 6 Para. 1 lit. c GDPR. There is no legal or contractual obligation to provide the data, although accessing our website is technically not possible without providing the data.
Storage period
The aforementioned data will be stored for the duration of the website display and, for technical reasons, for a maximum of 7 days.
contact form
Type and extent of processing
On our website we offer you the opportunity to contact us using a form provided. The information collected via mandatory fields is required to process the request. In addition, you can voluntarily provide additional information that you believe is necessary to process the contact request.
When you use the contact form, your personal data will not be passed on to third parties.
Purpose and legal basis
The processing of your data by using our contact form is carried out for the purpose of communicating and processing your request based on your consent in accordance with Art. 6 Para. 1 lit. a GDPR. If your request relates to an existing contractual relationship with us, processing will take place at Z
Purpose of contract fulfillment based on Article 6 Paragraph 1 Letter b GDPR. There is no legal or contractual obligation to provide your data, but processing your request is not possible without providing the information in the mandatory fields. If you do not wish to provide this information, please contact us by other means.
Storage period
If you use the contact form based on your consent, we will store the data collected for each request for a period of three years, starting with the completion of your request or until you revoke your consent.
If you use the contact form as part of a contractual relationship, we will store the data collected for each inquiry for a period of three years from the end of the contractual relationship.
Newsletter
Type and extent of processing
We send the newsletter directly. Your data will not be passed on to third parties or processors within the meaning of Art. 28 GDPR.
Newsletter Sign up
You have the option to order a newsletter. After activating the checkbox to order a newsletter and agreeing to the collection, storage and processing of your personal data, we will receive your request when you click on the “Send” button. The “spam protection calculation task” must be solved correctly beforehand. We work with the “double opt-in” procedure. After ordering the newsletter, you will receive an order confirmation by email that includes a further link. Only when you confirm by activating the link can the newsletter be sent to the email address you provided.
Newsletter unsubscribe
There is a corresponding deactivation link in every newsletter you receive from us. You will be deleted from the newsletter distribution if this deactivation link is activated. Of course, you can also contact us in another way if you no longer wish to receive our newsletter. You will find our contact information in the imprint.
Purpose and legal basis
We process your data for the purpose of sending newsletters based on your consent in accordance with Article 6 (1) (a) GDPR. By unsubscribing from the newsletter, you can declare your revocation at any time with future effect in accordance with Art. 7 Para. 3 GDPR. There is no legal or contractual obligation to provide your data, but sending the newsletter is not possible without providing your data.
Storage period
After registering for the newsletter, we store the data for a maximum of 30 days until the registration is confirmed. After successful confirmation, we will store your data until you revoke your consent (unsubscribe from the newsletter) and for a maximum of 7 days beyond that for technical reasons.
Registration of a user account
Type and extent of processing
To use certain areas of our website, you have the option of registering a user account. The information collected during registration via the mandatory fields is necessary to provide access to the user account. In addition, you can voluntarily provide additional information for additional (convenience) functions.
When registering a user account, your personal data will only be passed on in accordance with this data protection declaration.
Purpose and legal basis
We process your data for the purpose of providing a user account to fulfill a contract with you in accordance with Article 6 Paragraph 1 Letter b GDPR. There is a contractual obligation to provide your data, as this information is necessary to identify you and to fulfill the contract on our part. There is no legal obligation to provide the data. Without providing this information, it is not possible to register a user account and therefore conclude a contract.
In addition, additional voluntarily provided information is processed for the purpose of providing additional (comfort) functions based on your consent in accordance with Article 6 Paragraph 1 Letter a GDPR. By deactivating the functions / deleting the voluntary information in the user account, you can declare your revocation at any time with future effect in accordance with Art. 7 Para. 3 GDPR.
Storage period
We store your personal data as part of the provision of the user account for the duration of the contractual relationship. After the contract has ended / the user account has been deleted, your data will only be stored further if there are legal retention requirements (e.g. tax and commercial law).
Additional information that you provide to us based on your consent will only be stored until you revoke your consent by deactivating the functions / deleting the data, but at the latest until the end of the contract on which the provision of the user account is based.
Registration of a customer account
Type and extent of processing
As part of order processing, we collect your personal data to register a customer account. You can choose whether you would like to order as a guest or register a permanent user account. The information collected via the mandatory fields during registration is identical in both cases and is required to process the order in the online shop. When registering a permanent user account, a password is also created. The initial password is generated by the webshop system and can be subsequently adjusted to any password by the administrator. In addition, you can voluntarily provide additional information that you believe is necessary to process the order.
Your personal data will only be passed on to third parties (e.g. shipping service providers/forwarding companies) and contract processors in accordance with Art. 28 GDPR to the extent that this is necessary for the processing of the order.
Purpose and legal basis
We process your personal data for the purpose of registering a customer account to fulfill a contract with you in accordance with Article 6 (1) (b) GDPR. There is a contractual obligation to provide your data insofar as it relates to the mandatory fields, as this information is necessary to identify you personally and to fulfill the contract on our part. There is no legal obligation to provide the data. Without providing this information, it is not possible to order in our online shop and therefore conclude a contract. There is no obligation to provide additional information provided voluntarily. Ordering in our online shop is also possible without disclosing voluntary information.
The additional processing of your password to register the permanent user account is carried out for the purpose of providing a customer account and to display your previous purchases as well as to store your purchase-related data (e.g. storage of billing address, different delivery addresses) based on your consent in accordance with Article 6 Paragraph 1 lit. a GDPR. By deleting your customer account, you can declare your revocation at any time with future effect in accordance with Art. 7 Para. 3 GDPR.
Storage period
If you order as a guest, we store your personal data until your order has been completely processed (end of contract). When registering a permanent customer account, we store the purchase-related data beyond the end of the contract until you revoke your consent (deletion of the customer account). In both cases, your data will only be stored further if there are legal retention requirements (e.g. tax and commercial law).