It is our concern to handle your personal data with care. We are aware of our responsibility and thank you for your trust. Your data is protected against unauthorized access by a variety of technical and organizational measures.
Our company is a participant in the Alliance for Cyber Security of the German Federal Office for Information Security (BSI).
Your data is stored on a secured server in Germany (Datacenter Nuremberg). It is integrated into the
Backbone Europe infrastructure and equipped with the latest technologies and energy-efficient hardware. The power supply is realized with 100% green electricity from hydropower.
Likewise, our e-mail correspondence takes place via a German mail server (Datacenter Berlin), which meets all consumer protection and security requirements, in particular the technical guideline "Secure e-mail transport" (
BSI TR-03108) of the Federal Office for Information Security. This server is operated entirely with green electricity too.
Privacy policy § 1 General information This privacy policy only applies to our website at underwear-shopping.de. If you are redirected to our website via links from other websites, please inform yourself there about the respective handling of your data. On our websites, your personal data (e.g. name, address, e-mail address, telephone number, bank details, credit card number) are processed exclusively in accordance with the provisions of German data protection law and the data protection law of the European Union (EU).
In addition to the processing purposes, recipients, legal bases and storage periods, the following provisions also inform you about your rights and name the person responsible for your data processing.
§ 2 Data processing for the fulfilment of the contract (1) Purpose of processing
In order to conclude a purchase contract with us, personal data is required, which is provided during the ordering process. You are not obliged to provide your personal data, but we cannot deliver any goods to you without knowing your address. For certain payment methods, we require the necessary payment data in order to pass this on to a payment service provider commissioned by us to process the payment. The data you provide during the ordering process is therefore processed for the purpose of contract fulfilment.
If you send us an enquiry by email, via a contact form, etc. before concluding a contract, we process the data received in this way to carry out pre-contractual measures and, for example, answer your questions about our product(s).
(2) Legal basis
The legal basis for this processing is Art. 6 para. 1 b) GDPR.
(3) Categories of recipients
Payment service providers, shipping service providers, hosting providers.
(4) Storage period
We store the data required to fulfil the contract until the expiry of the statutory warranty and, if applicable, contractual guarantee periods.
We store the data required under commercial and tax law for the legally prescribed periods (generally 10 years (cf. § 257 HGB, § 147 AO)).
The data processed to carry out pre-contractual measures will be deleted as soon as the measures have been carried out and it is recognisable that no contract has been concluded.
§ 3 Comments (1) Purpose of processing
It is possible to write comments. Your personal data (e.g. name, e-mail address) will then only be processed for the purpose of publishing the corresponding comment.
(2) Legal basis
The legal basis for this processing is Art. 6 para. 1 f) GDPR.
(3) Legitimate interest
Our legitimate interest is the public exchange of user opinions on goods and the publication therefore also serves the purpose of transparency and opinion-forming. Your interest in data protection is safeguarded, as you can also publish the comment under a pseudonym.
(4) Storage period
There is no specific storage period. You can request the deletion of your comment at any time.
(5) Right to object
You have the right to object, on grounds relating to your particular situation, at any time to data processing which is based on Article 6(1)(f) GDPR and is not used for direct marketing purposes.
In the case of direct advertising, you can object to the processing at any time without giving reasons.
§ 4 Shop evaluation (1) Purpose of processing
If you decide to rate our service, we process your email address, your order number and the order date in order to send you a request for rating confirmation and a final rating request as well as to assign your rating and prevent rating abuse.
(2) Legal basis
This processing is based on our legitimate interests in improving our services and preventing review abuse in accordance with Art. 6 para. 1 f) GDPR.
(3) Recipient
SHOPVOTE - Blickreif GmbH, Alter Messeplatz 2, 80339 Munich, Germany
(4) Storage period
Your data will be stored for as long as the ShopVote rating is displayed on our website.
§ 5 Further information Your personal data will only be passed on to third parties if this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR.
This includes, in particular, the transfer to transport companies for the purpose of delivering the goods you have ordered and the transfer of payment data to payment service providers or credit institutions in order to carry out a payment transaction. The data passed on may only be used by the third party for the stated purposes.
§ 6 PayPal transactions Please note that all PayPal transactions are subject to the PayPal privacy policy:
https://www.paypal.com/de/legalhub/paypal/privacy-full
§ 7 Information about cookies (1) Purpose of processing
Only technically necessary cookies are used on our websites. These are small text files that are stored in or by your web browser on your computer system. These cookies make it possible, for example, to place goods in the shopping basket.
(2) Legal basis
The legal basis for this processing is Art. 6 para. 1 f) GDPR.
(3) Legitimate interest
Our legitimate interest is the functionality of our websites. The user data collected by the technically necessary cookies is not used to create user profiles, which safeguards your interest in data protection.
(4) Storage duration
Technically necessary cookies are usually deleted when the web browser is closed. Permanently stored cookies have a different lifespan ranging from a few minutes to several years.
(5) Right to object
If you do not wish these cookies to be stored, please deactivate the acceptance of cookies in your web browser. However, this may restrict the functionality of our websites. You can also delete permanently stored cookies at any time via your web browser.
§ 8 Newsletter (1) Purpose of processing
When you register for the newsletter, your e-mail address will be used for advertising purposes. This means that we will inform you in particular about product(s) from our range as part of the newsletter. For statistical purposes, we can analyse which links in the newsletter are clicked. We cannot recognise which specific person has clicked on the link. You have expressly given the following consent: ‘I would like to be informed about news and offers by e-mail.’
(2) Legal basis
The legal basis for this processing is Art. 6 para. 1 a) GDPR.
(3) Categories of recipients
Newsletter mailing provider, if applicable
(4) Storage period
For the newsletter dispatch, your e-mail address will only be stored for the duration of the desired registration.
(5) Right of cancellation
You can revoke your consent at any time with effect for the future. If you no longer wish to receive the newsletter, you can unsubscribe via an unsubscribe link in the newsletter or on this page: https://www.underwear-shopping.de/newsletter.php by selecting the following text ‘unsubscribe’.
§ 9 CloudflareOur website uses services provided by Cloudflare Inc., 101 Townsend St, San Francisco, CA 94107, USA (“Cloudflare”) to improve the security and performance of the website. Cloudflare acts as a content delivery network (CDN) and security service provider (e.g., protection against DDoS attacks).
1. Description of data processing by Cloudflare:
As soon as you visit our website, your request is routed through Cloudflare's servers. Cloudflare processes the following data in particular:
IP address of the requesting device, information about the pages accessed, date and time of access, information about browser type and operating system, referrer URL
The purpose of this processing is to ward off attacks on our website, enable a stable connection, and optimize loading speed.
2. Cloudflare Turnstile (Captcha)
We use Cloudflare Turnstile to protect our forms from misuse. This system checks whether the use is by a human or automated (bot). This may involve an analysis of user behavior.
In particular, the following technical information is processed: mouse movements, keyboard entries (if available), IP address, timestamp, browser properties
3. Legal basis for processing
The processing of personal data by Cloudflare is based on Art. 6 (1) lit. f GDPR. Our legitimate interest lies in the secure and efficient provision of our website and in protection against attacks and misuse.
4. Data transfer to third countries
Cloudflare is a company based in the USA. The transfer of personal data to a third country cannot therefore be ruled out. Cloudflare relies on the standard contractual clauses of the European Commission (Art. 46 (2) (c) GDPR) to ensure an adequate level of data protection.
5. Order processing
An order processing agreement (OPA) has been concluded with Cloudflare in accordance with Art. 28 GDPR.
6. Further information
Further information on data protection at Cloudflare can be found at: https://www.cloudflare.com/privacypolicy/
§ 10 Your rights as a data subject If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis us as the controller:
1. right to information
You can request information about your personal data processed by us in accordance with Art. 15 GDPR.
2. right to rectification
If the information concerning you is not (or no longer) correct, you can request a correction in accordance with Art. 16 GDPR. If your data is incomplete, you can request that it be completed.
3. right to erasure
Under the conditions of Art. 17 GDPR, you can request the erasure of your personal data.
4. right to restriction of processing
Within the framework of the provisions of Art. 18 GDPR, you have the right to request that the processing of data concerning you be restricted.
5. right to data portability
In accordance with Art. 20 GDPR, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller.
6. right to revoke the declaration of consent under data protection law
In accordance with Art. 7 para. 3 GDPR, you have the right to withdraw your declaration of consent under data protection law at any time. This does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.
7 Right to lodge a complaint with a supervisory authority
If you believe that the processing of personal data concerning you is in breach of the GDPR, you have the right to lodge a complaint with a supervisory authority (in particular in the Member State of your habitual residence, place of work or place of the alleged infringement) in accordance with Art. 77 GDPR.
Please also note your right to object in accordance with Art. 21 GDPR: a) General: justified objection required
If the processing of your personal data is carried out
- to safeguard our overriding legitimate interest (legal basis pursuant to Art. 6 para. 1 f) GDPR) or
- in the public interest (legal basis according to Art. 6 para. 1 e) GDPR),
you have the right to object to the processing at any time for reasons arising from your particular situation; this also applies to profiling based on the provisions of the GDPR.
In the event of an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
b) Special case of direct marketing: a simple objection is sufficient
If your personal data is processed for the purpose of direct marketing, you have the right to object to this processing at any time and without stating reasons; this also applies to profiling insofar as it is associated with such direct marketing.
If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
Responsible for data processing:
Guido Bernhardt
Hufelandstr. 24, 09366 Stollberg
Telephone: 0800/7467736
[email protected]
Latest version of these privacy polica: 03/2025
