PRIVACY POLICY

Last updated: September 2026

1. Privacy at a glance

Protecting your personal data is important to us. We process your data exclusively on the basis of the statutory provisions, in particular the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

This privacy policy explains which personal data we collect when you visit maryfashion.de, use our online shop or contact us, what we use it for and what rights you have. Personal data is any data that can be used to identify you personally.

2. Controller

The controller responsible for data processing on this website is:

[Company name / owner]
[Street and number]
[Postcode and city]
[Country]

Email: hello@maryfashion.de
Phone: [Phone number]

The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.

3. Hosting and server log files

This website and our online shop are provided via the website platform Duda (Duda Inc., 577 College Ave, Palo Alto, CA 94306, USA). When you access the website, the provider automatically collects information in so-called server log files that your browser transmits: browser type and version, operating system, referrer URL, host name of the accessing computer, time of the server request and IP address.

Processing is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the technically error-free, secure and stable presentation of our website. Where data is transferred to the USA, this is done on the basis of appropriate safeguards, in particular the EU Standard Contractual Clauses. We have concluded a data processing agreement with the provider.

4. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or enquiries, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the browser address bar starting with “https://” and by the lock symbol in your browser bar.

5. Cookies and local storage

Our website only uses technically necessary cookies and similar technologies. They are required for the shopping cart, the checkout, signing in to your customer account and the language setting to work.

In addition, we store your wishlist, the size selected on product pages and your language choice in your browser’s local storage. This data stays on your device and is not transmitted to us. You can delete it at any time in your browser settings.

The legal basis is Section 25(2) no. 2 TDDDG in conjunction with Art. 6(1)(b) and (f) GDPR. We do not use analytics or marketing cookies.

6. Contacting us

If you contact us by email or phone, we store your enquiry, including all personal data resulting from it (name, contact details, content of the enquiry), for the purpose of handling your request.

Processing is based on Art. 6(1)(b) GDPR if your enquiry relates to the performance of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling the enquiries sent to us (Art. 6(1)(f) GDPR). The data is deleted once your enquiry has been fully processed, unless statutory retention obligations apply.

7. Orders in the online shop

To process your order, we process the data you provide during checkout, in particular your name, delivery and billing address, email address, phone number, ordered items and payment information.

Processing is carried out to perform the purchase contract in accordance with Art. 6(1)(b) GDPR. For delivery, we pass your name and delivery address to the shipping company we have commissioned. We pass payment data to the payment service provider you have selected.

Due to commercial and tax law requirements, we store order and invoice data for up to ten years (Art. 6(1)(c) GDPR in conjunction with Section 147 of the German Fiscal Code and Section 257 of the German Commercial Code).

8. Payment service providers

Payment is handled by external payment service providers that you choose during checkout. We transmit the data required for processing the payment to them, for example name, invoice amount and order number. The payment service providers process your data under their own responsibility in accordance with their own privacy policies.

The legal basis is Art. 6(1)(b) GDPR (performance of the contract) and our legitimate interest in secure and efficient payment methods (Art. 6(1)(f) GDPR).

9. Customer account

You can create a customer account in our shop. We store your email address, your name, your password in encrypted form and your order history. We use this information to give you access to your account and to make future orders easier. The legal basis is Art. 6(1)(b) GDPR.

If you sign in with your Google account, you are redirected to Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Google then transmits your name and email address to us. The legal basis is your consent in accordance with Art. 6(1)(a) GDPR, which you give by using this sign-in option.

You can have your customer account deleted at any time by sending us an email. Statutory retention periods remain unaffected.

10. Newsletter

If you subscribe to our newsletter, we use your email address to send you regular information about new collections, offers and promotions. The legal basis is your consent in accordance with Art. 6(1)(a) GDPR.

You can withdraw your consent at any time with effect for the future, for example via the unsubscribe link in the newsletter or by emailing us. After you unsubscribe, your email address is removed from the mailing list.

11. Google Fonts

To display fonts consistently, this website uses Google Fonts provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you open a page, your browser loads the required fonts from Google servers. This informs Google that this website was accessed via your IP address. A transfer to the USA cannot be ruled out.

This is based on Art. 6(1)(f) GDPR. We have a legitimate interest in a consistent typeface on our website. For more information, see Google’s privacy policy: policies.google.com/privacy.

12. Links to social networks

Our website contains links to our profiles on social networks. These are simple links, not embedded plugins. Data is only transferred to the respective provider when you click a link and open its page. The respective provider is responsible for the processing on those pages.

13. Storage period

We only store personal data for as long as is necessary for the respective purposes or as required by statutory retention periods. Once the purpose no longer applies and there are no retention obligations, the data is deleted.

14. Your rights

Within the scope of the applicable legal provisions, you have the right at any time to free information about your stored personal data (Art. 15 GDPR), to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR).

You can withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR). The lawfulness of processing carried out before the withdrawal remains unaffected.

Right to object: Where processing is based on Art. 6(1)(f) GDPR, you have the right to object to the processing at any time on grounds relating to your particular situation (Art. 21 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement (Art. 77 GDPR).

For all questions about data protection and to exercise your rights, contact us at hello@maryfashion.de.

15. Changes to this privacy policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to reflect changes to our services. The new privacy policy will then apply to your next visit.