Data protection

This is a translation of our German privacy policy. In case of doubt, the German version applies.

Below we would like to inform you about our privacy policy. Here you will find information about the collection and use of personal data when using our online store. We take the protection of your personal data very seriously. We treat your personal data confidentially and observe the data protection law applicable in Germany. You can access this declaration at any time on our website.

We expressly point out that data transmission on the Internet (e.g. when communicating by e-mail) is subject to security gaps and cannot be completely protected against access by third parties.

  1. Information on the collection of personal data and provider identification

    1. In the following, we provide information about the collection of personal data when using this website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior.
    2. Essential Clothing GmbH, Velaskostraße 6 , D-85622 Feldkirchen, Germany, phone: +49 89 550 558 – 0, e-mail: Essential Clothing GmbH, Velaskostraße 6 , D-85622 Feldkirchen, Germany, phone: +49 89 550 558 – 0:  [email protected], see our legal notice.

  2. Existence of a right of access, rectification or erasure or restriction of processing or a right to object to processing, right to data portability

    1. You have the right to request information from us at any time about the data we have stored about you, as well as its origin, recipients or categories of recipients to whom this data is passed on and the purpose of storage.
    2. You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you or the restriction of processing. Taking into account the purposes of the processing, you also have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
    3. You have the right to demand that we erase personal data concerning you without undue delay. Among other things, we are obliged to delete them if they are no longer necessary for the purposes for which they were collected or otherwise processed or if you have withdrawn your consent.
    4. You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller without hindrance from us, provided the processing is based on your consent or the processing is carried out by automated means.
    5. If you have given your consent to the use of data, you can revoke this at any time.
    6. Please send all requests for information, requests for information or objections to data processing by e-mail to [email protected] or to the address given in section 1.2.

  3. Data security

    We maintain up-to-date technical measures to ensure data security, in particular to protect your personal data from risks during data transmission and from third parties gaining knowledge of it. These are adapted in line with the current state of the art.

  4. Collection of personal data for informational use

    1. If you use the website for information purposes only, i.e. if you do not contact us or otherwise provide us with information beyond the mere use of the website, we do not collect any personal data, with the exception of the data that your browser transmits to enable you to visit the website. These are
      • IP address
      • Date and time of the request
      • Time zone difference to Greenwich Mean Time (GMT)
      • Content of the request (specific page)
      • Access status/HTTP status code
      • Amount of data transferred in each case
      • Website from which the request comes
      • Browser
      • Operating system and its interface
      • Language and version of the browser software.
    2. In addition, cookies and similar technologies are used. Which ones are used depends on your choice in our cookie banner. Necessary cookies (cart, checkout, language, security, storing your cookie choice) are always set. Statistics and marketing services are only loaded after you have given your consent. Details are given in the sections on cookies, analytics and marketing below.

  5. Collection of personal data when contacting us, for advertising purposes and for order processing

    1. The collection and processing of personal data (including, for example, your name, your address and your e-mail address) takes place if you expressly provide us with this data in order to contact us. This personal data is used exclusively for the purpose of processing your inquiries (contact).
    2. We collect personal data if you voluntarily provide it to us when opening a customer account or when placing an order, e.g. by filling out a corresponding form. We store and use the data you enter in the form, such as name, address, e-mail address, purchase history and payment data, without your separate consent only for the purpose of providing our services and fulfilling and processing any contract concluded with you.
    3. Any use for advertising purposes is subject to your prior consent.

  6. Recipients/categories of recipients of the personal data, third country data transfers, legitimate interests pursued by us in this regard

    1. We use your personal data to optimize the processing of your order, to deliver the goods, to provide services and to process payment. For this purpose, we pass on your data to contracted service providers and, if necessary, to affiliated companies. For the purpose of payment processing, the necessary data is stored both on our server and on the servers of the companies commissioned by us to process payments.
    2. Your payment data will be transmitted to the relevant payment service provider depending on the payment method you have selected. The payment service provider is responsible for your payment data.
    3. If we make advance payments, e.g. in the case of a purchase on account, we may obtain credit information based on mathematical and statistical procedures from BS PAYONE GmbH, Lyoner Straße 9, D-60528 Frankfurt/Main, Germany, in order to safeguard our legitimate interests. For this purpose, we transmit the personal data required for a credit check to BS PAYONE GmbH and use the information received on the statistical probability of a payment default for a balanced decision on the establishment, execution or termination of the contractual relationship. All information on data processing by BS PAYONE GMBH can be found here:  https://www.bspayone.com/downloads/BSPAYONE_Information-zur-Datenverarbeitung-gem-Art14-DSGVO.pdf
    4. The credit report may contain probability values (score values) that are calculated on the basis of scientifically recognized mathematical-statistical procedures and whose calculation includes address data. Your interests worthy of protection are taken into account in accordance with the statutory provisions.
    5. The credit check is carried out by the following companies: BS GmbH, Lyoner Straße 9, D-60528 Frankfurt/Main, Germany, Germany, Fon: +49 431 25968-200, Fax: +49 431 25968-1200, [email protected], www.bspayone.com
    6. A similarity calculation in percentage values can be used to determine whether the person and address are known to the credit agency. This check serves to protect against the misuse of third-party data by unauthorized persons (“data theft”), e.g. the use of third-party bank data when placing orders by telephone or online. Address verification is carried out by:  Deutsche Post AG Central Additional and Special Services Letter D- 53250 Bonn www.deutschepost.de
    7. You can obtain information from the above-mentioned providers and credit agencies at any time about your data stored there.
    8. Unless otherwise stated in this declaration, we do not intend to transfer your data to third countries.

  7. Encrypted payment transactions

    Payment transactions via the usual means of payment (Visa/Mastercard, Paypal, SEPA, giropay, Sofort Überweisung, direct debit) are made via an encrypted SSL connection. You can recognize such a connection by the fact that the address line of the browser changes from http:// to https:// and by the lock symbol in your browser line. With encrypted communication, the payment data you transmit to us cannot be read by third parties.

  8. Legal basis for the processing

    1. We process your personal data on the basis of the following legal bases:
      1. the processing is necessary for the performance of a contract to which you are party.
      2. You have given your consent to the processing of your personal data.

  9. Duration for which the personal data is stored

    If your data is no longer required, e.g. for billing purposes, it will be deleted or blocked and deleted after expiry of the retention obligations under tax and commercial law.

  10. Existence of a right of appeal to a supervisory authority

    Without prejudice to any other legal remedies, you have the right to lodge a complaint with the competent data protection authority in your country if you consider that we have infringed applicable data protection law in the processing of your personal data. This means the country where you usually reside, where you work or where the alleged infringement occurred.

  11. Cookies and consent banner

    We ask for your consent to cookies and similar technologies with our own cookie banner. The banner runs entirely on our server; no external consent provider is involved. Services that require consent are only loaded after you have consented.

    Your choice is stored in the cookies “ec_consent” and “wp_consent_*” in your browser for 12 months. To be able to prove your consent, we log a randomly generated consent ID, the time, your choice, the banner version, the language and the page on which you made your choice. We do not store your IP address for this. Log entries are deleted after three years. Legal basis: Art. 6(1)(c) and Art. 7(1) GDPR; storing your choice is strictly necessary within the meaning of Section 25(2) no. 2 TDDDG.

    You can change your choice or withdraw your consent with effect for the future at any time via “Cookie settings” at the bottom of every page, where you can also see your consent ID.

  12. Matomo (web analytics)

    We use the open-source web analytics software Matomo, which is operated for us on our own servers (data processing agreement under Art. 28 GDPR). Analytics data is not passed on to third parties. Requests are routed through our own domain.

    Without consent: only our server counts your page views. No analytics script runs in your browser, no cookies are set and nothing is stored on or read from your device. Each page contains an invisible counting image from our own domain. When it loads, our server only uses the information your browser sends anyway: the page address, the browser identifier (user agent), the language setting and your IP address. The IP address is shortened before it is forwarded to Matomo (IPv4 to the first two bytes, IPv6 to the first 48 bits). You cannot be identified or recognised across visits. Orders are transmitted without any link to your visit (items and order value only). Legal basis: our legitimate interest in privacy-friendly statistics to improve our website (Art. 6(1)(f) GDPR). You can object at any time: if your browser sends a “Do Not Track” or “Global Privacy Control” signal, we do not count your visits, or contact us using the details in our imprint.

    With consent to the “Statistics” category, our website loads the Matomo script, which also sets cookies (_pk_id: 13 months, _pk_ses: 30 minutes, _pk_ref: 6 months) to recognise returning visits and to attribute orders to the visit and the channel through which you came to us. Even then, Matomo only stores your IP address in shortened form. Legal basis: your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time.

  13. Google Analytics

    With your consent to the “Statistics” category we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies (_ga, _ga_*, 2 years) to analyse how our website is used. Data may be transferred to Google LLC in the USA; Google is certified under the EU-U.S. Data Privacy Framework. Legal basis: your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time. Further information: https://policies.google.com/privacy.

  14. Google Tag Manager, Google Ads and Pinterest Tag

    With your consent to the “Marketing” category we load the Google Tag Manager (Google Ireland Limited), which embeds Google Ads conversion tracking and the Pinterest Tag (Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland). These services measure the success of our ads and may use cookies (e.g. _gcl_au, _pin_unauth). If you arrive via a Google ad with this consent, we store the ad click ID in the cookie “ec_gcl” (90 days) and with your order, and may transmit the click ID, time and order value (minus refunds) to Google. We do not transmit your name, address or e-mail address. Data may be transferred to the USA; Google and Pinterest are certified under the EU-U.S. Data Privacy Framework.

    We use Google Consent Mode to pass your cookie choice on to Google services. Legal basis: your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time.

  15. Newsletter and Klaviyo

    You can subscribe to our newsletter. We use the double opt-in procedure: you first receive an e-mail asking you to confirm your subscription. We need your e-mail address; any other information is voluntary. You can unsubscribe at any time via the link at the end of each newsletter.

    We use Klaviyo, Inc., 125 Summer Street, Floor 6, Boston, MA 02110, USA, to send the newsletter and e-mails about your cart. Klaviyo evaluates whether newsletters are opened and which links are clicked. Legal basis: your consent (Art. 6(1)(a) GDPR). With your consent to the “Marketing” category, our website also loads a Klaviyo script that sets the cookie “__kla_id” (2 years) to link viewed products to your newsletter profile.

    Data transfers to the USA are based on the EU Standard Contractual Clauses; Klaviyo is also certified under the EU-U.S. Data Privacy Framework. We have concluded a data processing agreement with Klaviyo. Further information: https://www.klaviyo.com/legal/privacy/privacy-notice.

  16. Order attribution

    With your consent to the “Marketing” category, our shop (WooCommerce) stores in cookies (“sbjs_*”, session) through which channel you came to us and records this with your order. The data remains on our server.

  17. Hosting and content delivery

    Our website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, and delivered via Cloudflare, Inc. (EU-U.S. Data Privacy Framework), which also protects the website against attacks and spam (contact form). Images are delivered via the ShortPixel CDN; in the cart and checkout, the shipping option selector (Sendcloud) is loaded via the jsDelivr CDN. These providers process your IP address and technical browser data; ShortPixel and jsDelivr do not set cookies. Legal basis: our legitimate interest in a fast, secure and reliable website (Art. 6(1)(f) GDPR).