Privacy Policy
Information on the processing of personal data pursuant to Art. 13 GDPR.
1. Controller
Denis Eser, Dionysus Tailoring, Karlstr. 12/1, 71154 Nufringen, Germany
Email: dionysus.tailoring@gmx.de
2. Hosting
This website is hosted on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. When you visit the site, server log data (IP address, time of access, page requested, browser type) is processed to operate the site securely and is deleted after a short, fixed period. Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in secure and stable operation).
3. Building and ordering a shirt
When you configure a shirt, the options you choose and your body measurements are stored in your browser session and in the bag. When you order, we process your name, address, email address, the chosen options, your measurements and payment status to make and deliver your shirt and to issue the invoice. Legal basis: Art. 6 (1)(b) GDPR (performance of a contract). Measurements are personal data; they are used only to make your shirt and are kept with the order for as long as the order record must be kept (see 11).
4. Customer account (optional)
You can order as a guest. If you create an account, we store your login data and order history until you delete the account. Legal basis: Art. 6 (1)(b) GDPR.
5. Payment
Depending on the method you choose, your payment data is processed by the payment provider:
- PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
- Bank transfer: no third party involved; your bank details reach us only through your transfer.
Legal basis: Art. 6 (1)(b) GDPR. The providers’ own privacy policies apply to their processing.
6. Cookies and local storage
We use only technically necessary cookies and local storage: bag contents, your configurator progress, session and login. No analytics, no advertising cookies, no tracking pixels. The one exception is the Trustpilot rating box (TrustBox) in the footer and on product pages: it is loaded from Trustpilot’s servers only after you agree, and until then you see a plain link. Legal basis: § 25 (2) TDDDG and Art. 6 (1)(f) GDPR for the necessary ones; § 25 (1) TDDDG and Art. 6 (1)(a) GDPR (your consent) for the TrustBox.
7. Email
Order confirmations and replies are sent through our email sending service. Emails to dionysus.tailoring@gmx.de are received by GMX (1&1 Mail & Media GmbH, Germany). Legal basis: Art. 6 (1)(b) GDPR.
8. Review invitations (Trustpilot)
If you tick the optional review box at checkout, we send your first name, email address and order number to Trustpilot A/S, Pilestræde 58, 1112 Copenhagen K, Denmark, so that Trustpilot can send you one email about a week after delivery asking for a review. We decide on purpose and means and are the controller; Trustpilot acts as our processor under a data processing agreement. Trustpilot keeps invitation data for a limited time (three years according to Trustpilot). If you write a review, Trustpilot is itself responsible for the review and your Trustpilot account; its privacy policy applies. Legal basis: your consent, Art. 6 (1)(a) GDPR, and § 7 (2) UWG for the email. The box is not a condition of ordering. You can withdraw consent at any time by email to the address above or by replying “stop”; withdrawal does not affect earlier processing. Trustpilot may process data outside the EU.
9. Interest list (Dionysus letter)
If you sign up for the interest list, with the form on this website or the optional box at checkout, we send you news about the letter, suits and other pieces, as you chose. We store your email address, the topics you chose, and the time and IP address of your sign-up and of your confirmation. We use double opt-in: you receive one mail with a link and are on the list only after you click it. The stored times and IP addresses are our proof of consent. Legal basis: your consent, Art. 6 (1)(a) GDPR, and § 7 (2) UWG for the email. The list is stored on our own server (see 2); we use no external newsletter provider. The mails are sent through our mail provider GMX. The box at checkout is not a condition of ordering. You can withdraw your consent at any time with the link in every mail or by email to the address above; withdrawal does not affect earlier processing. After withdrawal we send you nothing more and delete the topics you chose. We keep your email address together with the proof of consent (times, IP addresses, text version), blocked for any other use, for up to three years so that we can show the consent if it is questioned (Art. 6 (1)(f) and Art. 17 (3)(e) GDPR), and delete it after that. If you ask us to erase it earlier, write to the address above.
10. Fonts, images, external links
Fonts and images are delivered from our own server. No connection to Google or other font servers is made. Links to Instagram are plain links; Instagram only receives data once you click them.
11. Retention
Order data, invoices and the related measurements are kept for the statutory retention periods under commercial and tax law (currently 8 to 10 years) and then deleted. Enquiries by email are deleted once they are answered and no order follows. We keep a record of your review consent (yes/no, time) with the order. For the interest list, see 9.
12. Your rights
You have the right at any time to request information about the personal data we hold about you, as well as its rectification, erasure or restriction of processing, a right to data portability and a right to object to processing based on Art. 6 (1)(f) GDPR. You also have the right to lodge a complaint with a data protection supervisory authority; for us that is the Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg. Contact us at the email address above.
This privacy policy is intended as a solid template but does not replace legal advice. A brief review by a lawyer or a generator (e.g. e-recht24.de) is recommended before go-live.