Privacy policy

Privacy Policy

Controller responsible for data processing:
Loyalty Clothing
Immengarten 12
30926 Seelze, Germany
Email: support@loyaltyclo.eu

We appreciate your interest in our online store. Protecting your privacy is very important to us. Below we inform you in detail about how we handle your personal data.

1. Access Data and Hosting

You can visit our websites without providing any personal information.
Whenever a website is accessed, the web server automatically stores what is known as a server log file, which contains, for example, the name of the requested file, your IP address, date and time of access, data volume transferred, and the requesting provider (access data).
This access data is evaluated solely for the purpose of ensuring the smooth operation of the site and improving our services.
This serves to protect our legitimate interests in the proper presentation of our offer in accordance with Art. 6 (1) sentence 1 lit. f GDPR.
All access data will be deleted no later than seven days after the end of your site visit.

2. Data Processing for Contract Fulfillment and Contact

2.1 Data Processing for Contract Fulfillment

For the purpose of contract fulfillment (including inquiries regarding and processing of existing warranty and performance claims, as well as any statutory update obligations) in accordance with Art. 6 (1) sentence 1 lit. b GDPR, we collect personal data if you voluntarily provide it to us as part of your order.
Mandatory fields are marked as such, as we require these data to process the contract and cannot ship your order without them.
Which data are collected can be seen from the respective input forms.

Further information about the processing of your data, in particular the transfer to our service providers for order, payment, and shipping processing, can be found in the following sections of this Privacy Policy.
After full performance of the contract, your data will be restricted for further processing and deleted after expiry of the statutory retention periods under tax and commercial law in accordance with Art. 6 (1) sentence 1 lit. c GDPR, unless you have expressly consented to further use of your data in accordance with Art. 6 (1) sentence 1 lit. a GDPR, or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this policy.

2.2 Customer Account

If you have given your consent in accordance with Art. 6 (1) sentence 1 lit. a GDPR by choosing to open a customer account, we will use your data for that purpose and to store them for future purchases on our website.
You can delete your customer account at any time by contacting us using the contact information provided in this Privacy Policy or via a function provided in the customer account.
Upon deletion of the account, your data will also be deleted unless you have expressly consented to further use in accordance with Art. 6 (1) sentence 1 lit. a GDPR, or we reserve legally permitted further use which we inform you about in this policy.

2.3 Contacting Us

In the context of customer communication, we collect personal data to process your inquiries in accordance with Art. 6 (1) sentence 1 lit. b GDPR, if you voluntarily provide these to us when contacting us (e.g. via contact form or email).
Mandatory fields are marked as such, since in these cases we need the data to handle your request.
Which data are collected can be seen from the input forms used.
After your inquiry has been fully processed, your data will be deleted unless you have expressly consented to further use in accordance with Art. 6 (1) sentence 1 lit. a GDPR, or we reserve legally permitted further use as described in this statement.

3. Data Processing for Shipping Purposes

For the fulfillment of the contract in accordance with Art. 6 (1) sentence 1 lit. b GDPR, we transfer your data to the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of the ordered goods.

Transfer of Data to Shipping Providers for Delivery Notifications

If you have given your explicit consent during or after your order, we will, based on that consent under Art. 6 (1) sentence 1 lit. a GDPR, forward your email address and telephone number to the selected shipping service provider so that they may contact you before delivery for the purpose of notification or coordination of delivery.
Consent can be revoked at any time by sending a message to the contact information specified in this Privacy Policy or directly to the shipping provider at the address below.

DHL Paket GmbH
Sträßchensweg 10
53113 Bonn, Germany

After withdrawal of your consent, we will delete the data provided for this purpose, unless you have expressly consented to further use of your data or we reserve legally permitted further use as specified in this statement.

4. Data Processing for Payment Handling

When processing payments in our online store, we work with the following partners: technical service providers, credit institutions, and payment service providers.

4.1 Data Processing for Transaction Handling

Depending on the selected payment method, we pass on the data required for payment processing to our technical service providers (who process data on our behalf), to the commissioned credit institutions, or to the selected payment service provider, insofar as this is necessary for the payment process.
This serves the fulfillment of the contract in accordance with Art. 6 (1) sentence 1 lit. b GDPR.

In some cases, payment service providers collect the data required for payment processing themselves, e.g., via their own website or an integrated payment interface during checkout.
The privacy policy of the respective payment service provider applies in such cases.

For questions regarding our payment partners and the basis of our cooperation with them, please contact us using the contact details provided in this Privacy Policy.

4.2 Data Processing for Fraud Prevention and Optimization of Payment Processes

We may also provide additional data to our service providers, which they use together with the data necessary for payment processing as our processors for the purpose of fraud prevention and optimization of our payment processes (e.g., invoicing, handling of disputed payments, accounting support).
This processing is carried out in accordance with Art. 6 (1) sentence 1 lit. f GDPR, based on our legitimate interest in protecting ourselves against fraud and ensuring efficient payment management.

5. Email Advertising

5.1 Email Newsletter with Registration

If you subscribe to our newsletter, we will use the data required for this or provided separately by you to send you our regular email newsletter based on your consent in accordance with Art. 6 (1) sentence 1 lit. a GDPR.
You can unsubscribe from the newsletter at any time by sending a message to the contact information provided below or via the link included in every newsletter.
After unsubscribing, we will delete your email address from the mailing list unless you have expressly consented to further use of your data or we reserve legally permitted further use as described in this policy.

5.2 Email Newsletter without Registration and Your Right to Object

If we receive your email address in connection with the sale of a product or service and you have not objected, we reserve the right to regularly send you offers for similar products from our range by email pursuant to § 7 (3) UWG (German Unfair Competition Act).
This serves our legitimate interest in promoting our products to existing customers.
You can object to this use of your email address at any time by sending a message to the contact address stated in this Privacy Policy or via the unsubscribe link in the email, without incurring any costs other than the transmission costs according to basic rates.
After unsubscribing, we will delete your email address from the mailing list unless you have expressly consented to further use or we reserve legally permitted use as explained in this policy.

Our service providers operate and/or use servers in Israel.
The European Commission has determined that Israel provides an adequate level of data protection.
Additionally, our service providers use servers in the United States, South Korea, Taiwan, and other non-EU/EEA countries for which no adequacy decision exists.
Our cooperation with these providers is based on the European Commission’s Standard Contractual Clauses.

5.3 Sending Review Requests by Email

If you have given us your express consent during or after your order in accordance with Art. 6 (1) sentence 1 lit. a GDPR, we will use your email address to request a review of your purchase through the review system we use.
You can withdraw this consent at any time by contacting us or via the unsubscribe link in the review request.

6. Social Media

Social Plugins from Instagram (by Meta)

Our website uses social buttons from social networks.
These are integrated only as HTML links, so that when you visit our site no direct connection is established to the servers of the respective provider.
If you click on one of the buttons, the social network’s website will open in a new browser window, where you can, for example, click the Like or Share button.

7. Contact Options and Your Rights

7.1 Your Rights

As a data subject, you have the following rights:

  • Art. 15 GDPR: Right to obtain information about your personal data processed by us;

  • Art. 16 GDPR: Right to rectification of inaccurate or incomplete personal data;

  • Art. 17 GDPR: Right to erasure of your data, unless further processing is required

    • for exercising the right of freedom of expression and information,

    • for compliance with a legal obligation,

    • for reasons of public interest, or

    • for the establishment, exercise, or defense of legal claims;

  • Art. 18 GDPR: Right to restriction of processing, where

    • you contest the accuracy of the data;

    • processing is unlawful but you oppose erasure;

    • we no longer need the data, but you require it for legal claims; or

    • you have objected to processing under Art. 21 GDPR;

  • Art. 20 GDPR: Right to receive your personal data in a structured, commonly used, and machine-readable format or to request its transfer to another controller;

  • Art. 77 GDPR: Right to lodge a complaint with a supervisory authority, typically that of your habitual residence, workplace, or our company headquarters.

Right to Object

Where we process personal data to protect our legitimate interests as explained above, you may object to such processing at any time with future effect.
If the processing is for direct marketing purposes, you may exercise this right at any time.
If processing is for other purposes, you may object only on grounds relating to your particular situation.

After you exercise your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if processing serves the establishment, exercise, or defense of legal claims.
If processing is for direct marketing, we will stop processing your personal data for that purpose immediately.

7.2 Contact Options

For any questions about the collection, processing, or use of your personal data, for information, correction, restriction, or deletion of data, as well as the withdrawal of any consent granted or objection to specific data use, please contact us directly using the contact information provided in our Legal Notice (Impressum).