Privacy Policy

Privacy Policy

  1. Information on the Collection of Personal Data and Contact Details of the Data Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we will inform you about how we handle your personal data when using our website. Personal data are any data that can be used to personally identify you.

1.2 The data controller for processing personal data on this website, as defined by the General Data Protection Regulation (GDPR), is Apparel LDN. The data controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the data controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the “https://” in the URL and the lock symbol in your browser’s address bar.

  1. Data Collection when Visiting our Website

When using our website purely for informational purposes, meaning when you do not register or provide us with other information, we only collect data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

  • Our visited website
  • Date and time of access
  • Amount of data transmitted in bytes
  • Source/reference from which you came to the page
  • Used browser
  • Used operating system
  • Used IP address (possibly anonymised)

The processing is carried out in accordance with Article 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. There is no transfer or further use of the data. However, we reserve the right to review the server log files later if there are specific indications of unlawful use.

  1. Cookies

To make your visit to our website more attractive and to enable the use of certain features, we use cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the browser session ends, i.e., after you close your browser (so-called session cookies). Other cookies remain on your device and allow us or our partner companies (third-party cookies) to recognise your browser the next time you visit (persistent cookies). When cookies are set, they collect and process specific user information such as browser and location data as well as IP address values. Persistent cookies are automatically deleted after a predetermined duration, which may vary depending on the cookie.

Some cookies are used to simplify the ordering process by saving settings (e.g. remembering the contents of a virtual shopping cart for a later visit to the website). If personal data is also processed by individual cookies that we implement, the processing is carried out in accordance with Article 6(1)(b) GDPR either for the performance of the contract or according to Article 6(1)(f) GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website and in a customer-friendly and effective design of the website visit.

We may work with advertising partners who help us make our internet offering more interesting for you. For this purpose, cookies from partner companies may also be stored on your hard drive (third-party cookies) when you visit our website. If we work with such advertising partners, you will be individually and separately informed about the use of such cookies and the scope of the information collected within the following paragraphs.

Please note that you can set your browser to inform you when cookies are set and to decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or generally. Every browser differs in the way it manages cookie settings. This is explained in the help menu of each browser, which describes how you can change your cookie settings. You can find instructions for the respective browsers at the following links:

Please note that if you do not accept cookies, the functionality of our website may be limited.

4) Contacting Us

When you contact us (e.g. via contact form or email), personal data is collected. The data collected in the case of a contact form can be seen in the respective contact form. This data is stored and used exclusively for the purpose of responding to your inquiry or for contacting you, along with the related technical administration. The legal basis for processing the data is our legitimate interest in responding to your inquiry in accordance with Article 6(1)(f) GDPR. If your contact is aimed at the conclusion of a contract, the additional legal basis for processing is Article 6(1)(b) GDPR. Your data will be deleted after the processing of your inquiry is completed, when it can be inferred from the circumstances that the matter in question has been finally clarified and provided no legal retention obligations oppose this.

5) Data Processing when Opening a Customer Account and for Contract Processing

In accordance with Article 6(1)(b) GDPR, personal data is also collected and processed when you provide us with data for the execution of a contract or for opening a customer account. The data collected can be seen in the respective input forms. Deletion of your customer account is possible at any time and can be carried out by sending a message to the contact address of the data controller. We store and use the data you provide for contract processing. After the contract has been fully processed or after deletion of your customer account, your data will be blocked in consideration of tax and commercial law retention periods and will be deleted after these periods have expired, unless you have expressly consented to further use of your data or we have reserved further legally permissible data usage, of which we will inform you below.

6) Use of Your Data for Direct Marketing

6.1 Subscription to our Email Newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Providing additional data is voluntary and will be used to address you personally. We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you an email newsletter once you have explicitly confirmed that you consent to receive the newsletter. We will then send you a confirmation email, asking you to click a link to confirm that you wish to receive newsletters in the future.

By activating the confirmation link, you grant us your consent to use your personal data in accordance with Article 6(1)(a) GDPR. When subscribing to the newsletter, we store the IP address registered by your internet service provider (ISP), as well as the date and time of registration, in order to trace any possible misuse of your email address at a later time. The data we collect during your newsletter subscription will only be used for the purposes of advertising communication via the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message to the data controller named above. After unsubscribing, your email address will be immediately removed from our newsletter distribution list, unless you have expressly consented to further use of your data or we have reserved further data usage, which is legally permitted and about which we inform you in this statement.

6.2 Sending the Email Newsletter to Existing Customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to send you regular offers for similar goods or services, like those already purchased, from our range via email. No separate consent is required for this. The data processing is carried out solely based on our legitimate interest in personalised direct advertising in accordance with Article 6(1)(f) GDPR. If you initially opposed the use of your email address for this purpose, no emails will be sent by us. You have the right to object to the use of your email address for the above-mentioned advertising purpose at any time with effect for the future by sending a message to the data controller named at the beginning. Only transmission costs according to the basic tariffs will apply. After receiving your objection, the use of your email address for advertising purposes will be immediately stopped.

7) Data Processing for Order Fulfilment

7.1 The personal data we collect is shared with the transport company entrusted with delivery, insofar as this is necessary for the delivery of the goods. Your payment data is passed on to the bank commissioned with the payment processing, if necessary for payment processing. If payment service providers are used, we will inform you explicitly below. The legal basis for sharing the data is Article 6(1)(b) GDPR.

7.2 Use of Payment Service Providers (Payment Providers)

  • PayPal
    When paying via PayPal, credit card via PayPal, direct debit via PayPal, or—if offered—“Buy Now, Pay Later” or “Installment Payment” via PayPal, we forward your payment data to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") within the framework of payment processing. This transfer is carried out in accordance with Article 6(1)(b) GDPR and only to the extent necessary for payment processing.

PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or—if offered—“Buy Now, Pay Later” or “Installment Payment” via PayPal. For this purpose, your payment data may be shared in accordance with Article 6(1)(f) GDPR based on PayPal's legitimate interest in determining your creditworthiness with credit reference agencies. The result of the credit check regarding the statistical probability of payment default is used by PayPal to decide whether to offer the respective payment method. The credit check may contain probability values (so-called score values). If score values are included in the result of the credit check, they are based on a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, among other things, but is not limited to, address data. Further data protection information, including information on the credit reference agencies used, can be found in PayPal’s privacy policy: PayPal Privacy Policy.
You can object to the processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractually compliant payment processing.

  • SOFORT
    When choosing the payment method "SOFORT", the payment processing is carried out by the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter "SOFORT"), to whom we forward the information you provided during the order process along with the details of your order in accordance with Article 6(1)(b) GDPR. SOFORT GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). The transfer of your data is carried out exclusively for the purpose of payment processing with the payment service provider SOFORT and only to the extent necessary for this purpose. Further information on SOFORT's data protection policy can be found at the following link: SOFORT Privacy Policy.

This section of the privacy policy continues to describe how personal data is processed in various contexts, including communications, social media integration, online marketing, and web analytics. Here's a summary:

8) Contact for Review Reminder

The company may use your email address to send a one-time reminder to review your purchase if you consented during or after your order, as per Art. 6(1)(a) DSGVO. You can withdraw consent at any time by notifying the responsible party.

9) Use of Social Media Plugins

The website integrates social media plugins (like Facebook, Google+, and Instagram) using a Shariff solution to ensure user data protection. These plugins are not directly connected to the social media servers until you click the buttons. Once clicked, the platform’s privacy policies apply. These companies (Facebook, Google, Instagram) are certified under the US-EU Privacy Shield, ensuring compliance with EU data protection standards.

10) Online Marketing

  • DoubleClick by Google: This tool helps serve relevant ads and track ad performance using cookies. It can track conversions when users engage with ads and later visit the website. Google uses cookies to improve marketing campaigns, and users can opt-out by disabling cookies or adjusting ad settings.
  • Google AdWords Conversion Tracking: When a user clicks an AdWords ad, cookies are set to track conversions (e.g., purchases) on the website. Data is used to evaluate ad campaign effectiveness. You can opt-out of conversion tracking through your browser settings.

11) Web Analytics Services

  • Google Analytics: The site uses Google Analytics to collect data on user behaviour, which is anonymised (IP addresses are shortened). This helps analyse website activity and improve content. You can disable cookies or opt-out of tracking through a browser plugin.

 

12) RETARGETING / REMARKETING / RECOMMENDATION ADVERTISING
Facebook Custom Audience via the Pixel Method
This website uses the "Facebook Pixel" of Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"). With explicit consent, this method tracks user behaviour after they have seen or clicked on a Facebook ad. This procedure is used to evaluate the effectiveness of Facebook ads for statistical and market research purposes and can help optimise future advertising efforts.

The collected data is anonymous to us, meaning it does not allow us to infer the identity of users. However, the data is stored and processed by Facebook, allowing it to be linked to the respective user profile, and Facebook may use the data for its own advertising purposes in accordance with Facebook's data usage policy (https://www.facebook.com/about/privacy/).

You can allow Facebook and its partners to display ads on and off Facebook. For these purposes, a cookie may also be stored on your computer. This processing only occurs if explicit consent is granted in accordance with Art. 6, paragraph 1, lit. a of the GDPR.
Consent for the use of the Facebook Pixel may only be given by users over the age of 13. If you are younger, please ask your guardians for permission.
Facebook Inc., based in the USA, is certified under the US-EU Privacy Shield agreement, which ensures compliance with the data protection level required in the EU.

To disable the use of cookies on your computer, you can adjust your internet browser settings to prevent cookies from being stored on your computer or delete existing cookies. However, disabling all cookies may mean that some functions on our website cannot be executed. You can also disable cookies from third parties, such as Facebook, via the Digital Advertising Alliance website: https://www.aboutads.info/choices/

Google AdWords Remarketing
Our website uses the Google AdWords Remarketing functions, advertising this website in Google search results as well as on third-party websites. The provider is Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). For this purpose, Google places a cookie in your device’s browser, which automatically enables interest-based advertising based on the pages you have visited using a pseudonymous cookie ID.

The processing is based on our legitimate interest in optimally marketing our website in accordance with Art. 6, paragraph 1, lit. f of the GDPR.
Further data processing only occurs if you have given Google permission to link your internet and app browsing history with your Google account and use information from your Google account to personalise ads you view on the web. If you are logged in to Google while visiting our website, Google will use your data along with Google Analytics data to create and define audience lists for cross-device remarketing. For this purpose, Google temporarily links your personal data with Google Analytics data to form these audiences.

You can permanently disable the setting of cookies for ad preferences by downloading and installing the browser plug-in available at the following link: https://www.google.com/settings/ads/onweb/
Alternatively, you can manage cookie settings via the Digital Advertising Alliance website at www.aboutads.info. Finally, you can configure your browser to notify you about cookie settings and allow you to individually decide whether to accept them or exclude cookies for specific cases or in general. If you do not accept cookies, the functionality of our website may be limited.

Google LLC, based in the USA, is certified under the US-EU Privacy Shield agreement, which ensures compliance with the data protection level required in the EU.
For further information and the data protection provisions regarding advertising and Google, you can view them here:
https://www.google.com/policies/technologies/ads/

13) RIGHTS OF THE DATA SUBJECT
13.1 Applicable data protection law grants you comprehensive rights regarding the processing of your personal data, as outlined below:

  • Right to Access under Art. 15 of the GDPR: You have the right to request information about the personal data we process, including the processing purposes, categories of processed data, recipients, the planned storage duration or criteria for determining the storage duration, and the right to rectification, deletion, restriction of processing, objection to processing, or complaint with a supervisory authority. You also have the right to be informed of the source of your data if it was not collected by us, the existence of automated decision-making, including profiling, and any guarantees for the transfer of data to third countries under Art. 46 of the GDPR.
  • Right to Rectification under Art. 16 of the GDPR: You have the right to request the immediate rectification of incorrect data and/or the completion of incomplete data stored by us.
  • Right to Deletion under Art. 17 of the GDPR: You have the right to request the deletion of your personal data if the conditions of Art. 17, paragraph 1 of the GDPR are met. However, this right does not apply if processing is necessary for exercising the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defence of legal claims.
  • Right to Restrict Processing under Art. 18 of the GDPR: You have the right to request the restriction of processing of your personal data as long as the accuracy of the data is disputed, if you reject the deletion of your data due to unlawful processing and instead request a restriction of processing, or if you need your data for the establishment, exercise, or defence of legal claims, after we no longer need the data for the original purpose, or if you have objected to the processing based on your particular situation.
  • Right to Notification under Art. 19 of the GDPR: If you have requested rectification, deletion, or restriction of processing, we are obliged to inform all recipients to whom your personal data has been disclosed of these actions, unless this proves impossible or would require a disproportionate effort. You have the right to be informed of these recipients.
  • Right to Data Portability under Art. 20 of the GDPR: You have the right to obtain your personal data provided to us in a structured, commonly used, and machine-readable format, or request its transfer to another data controller, as far as technically feasible.
  • Right to Withdraw Consent under Art. 7, paragraph 3 of the GDPR: You have the right to withdraw your consent to the processing of your data at any time with future effect. Upon withdrawal, we will immediately delete the affected data unless further processing is based on another legal basis that does not require consent. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
  • Right to Lodge a Complaint under Art. 77 of the GDPR: If you believe the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your residence, workplace, or where the alleged violation occurred.

13.2 Right to Object
If we process your personal data based on a legitimate interest, you have the right to object to this processing at any time, for reasons related to your particular situation. If you exercise your right to object, we will stop processing your data. However, further processing is permitted if we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defence of legal claims.

If we process your personal data for direct marketing purposes, you have the right to object to the processing of your data for this purpose at any time. In this case, we will stop processing your data for direct marketing purposes.

14) STORAGE DURATION OF PERSONAL DATA
The duration of personal data storage is determined by the respective statutory retention periods (e.g., commercial and tax law retention periods). After the expiration of the retention period, the corresponding data will be routinely deleted unless it is still required for the fulfilment or initiation of a contract or if we have a legitimate interest in retaining it.