Privacy Policy
Information on the processing of personal data pursuant to Art. 13 GDPR.
1. Controller
Denis Eser, Dionysus Tailoring, Karlstr. 12/1, 71154 Nufringen, Germany
Email: dionysus.tailoring@gmx.de
2. Hosting
This website is hosted on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. When you visit the site, server log data (IP address, time of access, page requested, browser type) is processed to operate the site securely and is deleted after a short, fixed period. Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in secure and stable operation).
3. Building and ordering a shirt
When you configure a shirt, the options you choose and your body measurements are stored in your browser session and in the bag. When you order, we process your name, address, email address, the chosen options, your measurements and payment status to make and deliver your shirt and to issue the invoice. Legal basis: Art. 6 (1)(b) GDPR (performance of a contract). Measurements are personal data; they are used only to make your shirt and are kept with the order for as long as the order record must be kept (see 10).
4. Customer account (optional)
You can order as a guest. If you create an account, we store your login data and order history until you delete the account. Legal basis: Art. 6 (1)(b) GDPR.
5. Payment
Depending on the method you choose, your payment data is processed by the payment provider:
- PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
- Bank transfer: no third party involved; your bank details reach us only through your transfer.
Legal basis: Art. 6 (1)(b) GDPR. The providers’ own privacy policies apply to their processing.
6. Cookies and local storage
We use only technically necessary cookies and local storage: bag contents, your configurator progress, session and login. No analytics, no advertising cookies, no tracking pixels. The one exception is the Trustpilot rating box (TrustBox) in the footer and on product pages: it is loaded from Trustpilot’s servers only after you agree, and until then you see a plain link. Legal basis: § 25 (2) TDDDG and Art. 6 (1)(f) GDPR for the necessary ones; § 25 (1) TDDDG and Art. 6 (1)(a) GDPR (your consent) for the TrustBox.
7. Email
Order confirmations and replies are sent through our email sending service. Emails to dionysus.tailoring@gmx.de are received by GMX (1&1 Mail & Media GmbH, Germany). Legal basis: Art. 6 (1)(b) GDPR.
8. Review invitations (Trustpilot)
If you tick the optional review box at checkout, we send your first name, email address and order number to Trustpilot A/S, Pilestræde 58, 1112 Copenhagen K, Denmark, so that Trustpilot can send you one email about a week after delivery asking for a review. We decide on purpose and means and are the controller; Trustpilot acts as our processor under a data processing agreement. Trustpilot keeps invitation data for a limited time (three years according to Trustpilot). If you write a review, Trustpilot is itself responsible for the review and your Trustpilot account; its privacy policy applies. Legal basis: your consent, Art. 6 (1)(a) GDPR, and § 7 (2) UWG for the email. The box is not a condition of ordering. You can withdraw consent at any time by email to the address above or by replying “stop”; withdrawal does not affect earlier processing. Trustpilot may process data outside the EU.
9. Fonts, images, external links
Fonts and images are delivered from our own server. No connection to Google or other font servers is made. Links to Instagram are plain links; Instagram only receives data once you click them.
10. Retention
Order data, invoices and the related measurements are kept for the statutory retention periods under commercial and tax law (currently 8 to 10 years) and then deleted. Enquiries by email are deleted once they are answered and no order follows. We keep a record of your review consent (yes/no, time) with the order.
11. Your rights
You have the right at any time to request information about the personal data we hold about you, as well as its rectification, erasure or restriction of processing, a right to data portability and a right to object to processing based on Art. 6 (1)(f) GDPR. You also have the right to lodge a complaint with a data protection supervisory authority; for us that is the Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg. Contact us at the email address above.
This privacy policy is intended as a solid template but does not replace legal advice. A brief review by a lawyer or a generator (e.g. e-recht24.de) is recommended before go-live.