Privacy policy

We take the protection of your personal data seriously and comply with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). This policy sets out which data are processed when you visit this website, for what purpose and on what legal basis.

1. Controller

The controller within the meaning of Art. 4 (7) GDPR is:
Kleiderkiste Dresden UG (haftungsbeschränkt), Albert-Wolf-Platz 4, 01239 Dresden
Managing Director: Marlen Sczepanski
Email: hallo@kleiderkiste.bizbrew.app
Telephone: +49 351 2748130

No data protection officer has been appointed, as the statutory conditions of § 38 BDSG are not met. For any data protection questions please contact the address given above directly.

2. Hosting

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When the pages are accessed, Vercel processes the technically necessary connection data as a processor on our behalf. A data processing agreement under Art. 28 GDPR is in place with Vercel. For transfers to the USA we rely on the European Commission’s standard contractual clauses under Art. 46 (2) (c) GDPR. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in the secure and reliable operation of this website.

3. Server log files

When you access this website, information transmitted by your browser is recorded automatically. The following are collected:

• the page requested and the date and time of access
• browser type and version
• operating system used
• referrer URL
• volume of data transferred and HTTP status code
• shortened IP address

These data are not merged with other data sources and serve solely for technical operation, error analysis and the prevention of attacks. The legal basis is Art. 6 (1) (f) GDPR. Log data are deleted after 30 days at the latest.

4. Cookies and local storage

This website sets no tracking cookies. The only technically necessary storage is your browser’s local storage, which holds the contents of your basket (“your crate”), your language choice and your cookie decision. This information remains on your device and is not transmitted to us or to any third party. The legal basis for this strictly necessary storage is § 25 (2) no. 2 TDDG in conjunction with Art. 6 (1) (f) GDPR.

Optional statistics cookies are switched off by default and are only set after your express consent under § 25 (1) TDDG and Art. 6 (1) (a) GDPR. You may withdraw your consent at any time with effect for the future by clearing this website’s local storage in your browser.

5. Contact form

If you write to us using the form on the “Store & hours” page, we process your name, email address and message in order to answer your enquiry. The legal basis is Art. 6 (1) (b) GDPR where the enquiry relates to a contract, otherwise Art. 6 (1) (f) GDPR. We delete the information as soon as your enquiry has been dealt with conclusively and no statutory retention periods stand in the way.

6. Orders in the online shop

This website is a demonstration site. No payment data are requested, collected or stored, and no payment processing takes place. The ordering process stops at a review step; the details you enter there are processed solely for display on your screen and are not stored permanently. In a live shop, name, address and email address would be processed to perform the contract under Art. 6 (1) (b) GDPR, observing the commercial and tax retention periods of six and ten years respectively under § 257 HGB and § 147 AO.

7. Map (OpenStreetMap)

On the “Store & hours” page we embed a map from the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. The map is only loaded after you have expressly clicked on it. Before that, no connection to OpenStreetMap is established and no IP address is transmitted. If you click “Load the map”, your IP address is transmitted to OpenStreetMap. The legal basis is your consent under Art. 6 (1) (a) GDPR, which you may withdraw at any time for the future by reloading the page.

8. Fonts

The Rambla and Karla typefaces are not loaded from Google servers but are delivered from our own server together with the website. No connection to Google is established and no data are transmitted to Google.

9. Recipients and transfers to third countries

Your data are passed on only to the processors named in this policy and where we are legally obliged to do so. Data are never sold. Transfers to third countries take place solely within the scope of the hosting described in section 2.

10. Your rights

You have the right at any time to:

• obtain information about the data stored about you (Art. 15 GDPR)
• have inaccurate data rectified (Art. 16 GDPR)
• have your data erased (Art. 17 GDPR)
• restrict processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing (Art. 21 GDPR)
• withdraw a consent given, with effect for the future (Art. 7 (3) GDPR)

An informal message to the address given above is sufficient to exercise these rights.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is: Die Sächsische Datenschutz- und Transparenzbeauftragte, Devrientstraße 5, 01067 Dresden, Germany.

11. Data security

This website is delivered exclusively over an encrypted TLS connection (HTTPS). We otherwise take appropriate technical and organisational measures under Art. 32 GDPR to protect your data against loss, destruction and unauthorised access.

12. Changes to this policy

We update this privacy policy whenever changes to our website or to the legal situation make it necessary. The version published on this page applies in each case.