It is our concern to handle your personal data with care. We are aware of our responsibility and thank you for your trust. Your data is protected against unauthorized access by a variety of technical and organizational measures.
Our company is a participant in the Alliance for Cyber Security of the German Federal Office for Information Security (BSI).
Your data is stored on a secured server in Germany (Datacenter Nuremberg). It is integrated into the
Backbone Europe infrastructure and equipped with the latest technologies and energy-efficient hardware. The power supply is realized with 100% green electricity from hydropower.
Likewise, our e-mail correspondence takes place via a German mail server (Datacenter Berlin), which meets all consumer protection and security requirements, in particular the technical guideline "Secure e-mail transport" (
BSI TR-03108) of the Federal Office for Information Security. This server is operated entirely with green electricity too.
Privacy policy § 1 General information This privacy policy only applies to our websites. If you are redirected to our pages via links, please inform yourself there about the respective handling of your data. Your personal data (e.g. name, address, e-mail address, telephone number, bank details, credit card number) will only be processed on our website in accordance with the provisions of German data protection law and the data protection law of the European Union (EU).
In addition to the processing purposes, recipients, legal bases and storage periods, the following provisions also inform you about your rights and name the person responsible for your data processing.
§ 2 Data processing for contract fulfillment (1) Purpose of processing
The personal data you provide to us during the ordering process is required for the conclusion of a contract with us. You are not obliged to provide your personal data. However, we cannot send you the goods without your address. For some payment methods, we require the necessary payment data in order to pass it on to a payment service provider commissioned by us. The processing of your data entered in the ordering process is therefore carried out for the purpose of fulfilling the contract.
If you send us an inquiry by email, via a contact form, etc. before concluding a contract, we process the data received in this way to carry out pre-contractual measures and answer your questions about our products, for example.
(2) Legal basis
The legal basis for this processing is Art. 6 para. 1 b) GDPR.
(3) Categories of recipients
Payment service providers, shipping service providers, hosting providers, merchandise management system if applicable, suppliers if applicable (dropshipping).
(4) Storage period
We store the data required for contract processing until the expiry of the statutory warranty and, if applicable, contractual guarantee periods.
We store the data required under commercial and tax law for the periods specified by law, regularly ten years (cf. § 257 HGB, § 147 AO).
The data processed to carry out pre-contractual measures will be deleted as soon as the measures have been carried out and it is clear that no contract has been concluded.
§ 3 Comments (1) Purpose of processing
It is possible to write a comment. Your data (e.g. name/pseudonym, e-mail address, website) will then only be processed for the purpose of publishing your comment.
(2) Legal basis
The legal basis for this processing is Art. 6 para. 1 f) GDPR.
(3) Legitimate interest
Our legitimate interest is the public exchange of user opinions on certain topics and products. Publication serves, among other things, transparency and opinion-forming. Your interest in data protection is safeguarded, as you can publish your comment under a pseudonym.
(4) Storage period
There is no specific storage period. You can request the deletion of your comment at any time.
(5) Right to object
You have the right to object, on grounds relating to your particular situation, at any time to data processing which is based on Article 6(1)(f) GDPR and is not used for direct marketing purposes.
In the case of direct advertising, however, you can object to the processing at any time without giving reasons.
§ 4 Shop evaluation (1) Purpose of processing
If you decide to rate our service, we process your e-mail address and your order number and date in order to send you a request for rating confirmation and a final rating request as well as to assign your rating and prevent rating abuse.
(2) Legal basis
This processing is based on our legitimate interests in improving our services and preventing review abuse in accordance with Art. 6 (1) f) GDPR.
(3) Recipient
SHOPVOTE - Blickreif GmbH, Alter Messeplatz 2, 80339 Munich, Germany
(4) Duration of storage
Your data will be stored for as long as the ShopVote rating is displayed on our website.
§ 5 Further information Insofar as this is legally permissible and required for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR, your personal data will be passed on to third parties. This includes in particular the transfer to shipping companies for the purpose of delivering the goods you have ordered and the transfer of payment data to payment service providers or credit institutions in order to carry out a payment transaction. The data passed on may only be used by the third party for the stated purposes.
§ 6 PayPal transactions Please note that all PayPal transactions are subject to the PayPal privacy policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full
§ 7 Information about cookies (1) Purpose of processing
Technically necessary cookies are used on this website. These are small text files that are stored in or by your internet browser on your computer system. These cookies make it possible, for example, to place several products in a shopping cart.
(2) Legal basis
The legal basis for this processing is Art. 6 (1) f) GDPR.
(3) Legitimate interest
Our legitimate interest is the functionality of our website. The user data collected by technically necessary cookies is not used to create user profiles. This safeguards your interest in data protection.
(4) Storage duration
Technically necessary cookies are usually deleted when the browser is closed. Permanently stored cookies have a different lifespan ranging from a few minutes to several years.
(5) Right to object
If you do not wish these cookies to be stored, please deactivate the acceptance of these cookies in your Internet browser. However, this may limit the functionality of our website. You can also delete permanently stored cookies at any time via your browser.
§ 8 Newsletter (1) Purpose of processing
When you register for the newsletter, your e-mail address will be used for advertising purposes, i.e. in the newsletter we will inform you in particular about products from our range. For statistical purposes, we can evaluate which links in the newsletter are clicked. We cannot identify which specific person has clicked on the link. You have expressly given the following consent: I would like to be informed about news and offers by e-mail.
(2) Legal basis
The legal basis for this processing is Art. 6 para. 1 a) GDPR.
(3) Categories of recipients
Newsletter mailing provider, if applicable
(4) Storage period
Your email address will only be stored for the newsletter mailing for the duration of the requested registration.
(5) Ríght of Revocation
You can revoke your consent at any time with effect for the future. If you no longer wish to receive the newsletter, you can unsubscribe as follows: Via an unsubscribe link in the newsletter or on this page: https://www.underwear-shopping.de/newsletter.php by selecting the following text: I no longer wish to receive newsletters.
§ 9 Your rights as a data subject If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis us as the controller
1. right to information
You can request information about your personal data processed by us in accordance with Art. 15 GDPR.
2. right to rectification
If the information concerning you is not (or no longer) correct, you can request a correction in accordance with Art. 16 GDPR. If your data is incomplete, you can request that it be completed.
3. right to erasure
You can request the erasure of your personal data under the conditions of Art. 17 GDPR.
4. right to restriction of processing
Within the framework of the provisions of Art. 18 GDPR, you have the right to request that the processing of data concerning you be restricted.
5. right to data portability
In accordance with Art. 20 GDPR, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format or to request transmission to another controller.
6. right to revoke the declaration of consent under data protection law
In accordance with Art. 7 (3) GDPR, you have the right to withdraw your declaration of consent under data protection law at any time. This does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.
7 Right to lodge a complaint with a supervisory authority
If you believe that the processing of personal data concerning you is in breach of the GDPR, you have the right to lodge a complaint with a supervisory authority (in particular in the Member State of your habitual residence, place of work or place of the alleged infringement) in accordance with Art. 77 GDPR.
Please also note your right to object in accordance with Art. 21 GDPR: a) General: justified objection required
If the processing of personal data concerning you is carried out
- to protect our overriding legitimate interest (legal basis according to Art. 6 para. 1 f) GDPR) or
- in the public interest (legal basis according to Art. 6 para. 1 e) GDPR),
you have the right to object to the processing at any time for reasons arising from your particular situation; this also applies to profiling based on the provisions of the GDPR.
In the event of an objection, we will no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
b) Special case of direct marketing: a simple objection is sufficient
If the personal data concerning you is processed for direct marketing purposes, you have the right to object to this processing at any time and without stating reasons; this also applies to profiling insofar as it is associated with such direct marketing.
If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
Responsible for data processing:
Guido Bernhardt
Hufelandstr. 24, 09366 Stollberg
Telephone: 0800/7467736
[email protected]
