Privacy Policy

Privacy Policy

1. Introduction

Protecting your privacy is an integral part of our philosophy. This Privacy Policy explains how we collect, use, and safeguard your personal data when you visit our website or make a purchase in our online boutique. Personal data refers to any information that allows you to be identified directly or indirectly.

We process your data with the utmost care, discretion, and in strict accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR).

2. Data Controller

The entity responsible for data processing within the meaning of the GDPR is:

frecH UG (haftungsbeschränkt)
Alfred-Herrhausen-Allee 3–5
65760 Eschborn
Germany

Email: info@frech-style.com
Phone: [to be added]

3. Hosting and Infrastructure

Our website is hosted by getspace.uk, based in the United Kingdom.

The United Kingdom has been recognized by the European Commission as providing an adequate level of data protection pursuant to Article 45 GDPR. A data processing agreement in accordance with Article 28 GDPR has been concluded with the hosting provider.

To ensure stability, security, and an uninterrupted shopping experience, technical data such as IP addresses and access timestamps may be processed when you visit our website.

4. Data Collection During Website Use

Server Data

When accessing our website, certain technical information is automatically collected, including browser type, operating system, referrer URL, access time, and IP address. This data is used exclusively to ensure the smooth operation, security, and optimization of our digital presence.

The legal basis for this processing is Article 6(1)(f) GDPR.

Cookies and Similar Technologies

Our website uses cookies and similar technologies to provide essential functionality, enhance usability, and—where you consent—gain insights into how our site is used.

  • Essential cookies are processed based on our legitimate interest in operating the website (Article 6(1)(f) GDPR).

  • All other cookies are used only with your explicit consent (Article 6(1)(a) GDPR; Section 25 TTDSG).

You may adjust or withdraw your consent at any time via the cookie settings.

5. Online Boutique, Orders, and Customer Accounts

When you place an order or create a customer account, we process the personal data necessary to curate, confirm, and fulfill your purchase. This includes in particular:

  • Name and contact details

  • Billing and delivery addresses

  • Order and transaction details

  • Payment-related information

If you choose to create a customer account, your details are securely stored to provide a seamless and refined shopping experience in the future.

The legal basis for this processing is Article 6(1)(b) GDPR (performance of a contract).
Order-related data is retained in accordance with statutory retention obligations, particularly under tax and commercial law.

6. Payments

To offer a smooth and secure checkout experience, we work with established external payment service providers. Depending on the payment method you select, the relevant payment data is transmitted directly to the chosen provider.

Payment services may include, among others:

  • PayPal

  • Stripe

  • Klarna

  • Credit card providers (Visa, Mastercard)

  • Sofortüberweisung / Giropay

  • Apple Pay / Google Pay

Processing is based on Article 6(1)(b) GDPR. Each payment provider processes your data in accordance with its own privacy policy.

7. Shipping and Delivery

To deliver your order, we share your name and delivery address with selected logistics partners. Depending on availability and destination, these may include:

  • DHL

  • UPS

  • Hermes

  • DPD

  • Specialized or regional shipping partners

Data is transferred solely for the purpose of fulfilling your order and on the basis of Article 6(1)(b) GDPR.

8. Accounting and Legal Compliance

In order to meet accounting and tax obligations, we use Lexoffice, a service provided by Haufe-Lexware GmbH & Co. KG, Germany.

Invoice and payment data are processed in accordance with statutory requirements. The legal basis for this processing is Article 6(1)(c) GDPR. A data processing agreement has been concluded with the provider.

9. Communication

If you contact us by email, contact form, or telephone, we process your information exclusively to respond to your inquiry and provide the level of service you expect from a premium boutique.

Depending on the nature of your request, processing is based on Article 6(1)(b) or Article 6(1)(f) GDPR. Your data will be deleted once the matter has been conclusively handled, unless legal retention obligations apply.

10. Analytics

We use WP Statistics to understand how visitors interact with our website. IP addresses are anonymized to prevent personal identification.

This analysis helps us refine our digital experience and is carried out on the basis of Article 6(1)(f) GDPR. Where required, processing takes place only with your consent.

All analytical data remains stored on our own servers.

11. Selected Third-Party Services

YouTube

Our website may feature curated video content via YouTube (Google Ireland Limited) using enhanced privacy settings.
Data processing occurs on the basis of Article 6(1)(f) GDPR or, where applicable, your consent.

Google participates in the EU-US Data Privacy Framework.

Google Fonts

To ensure a consistent and elegant visual appearance, we use Google Fonts hosted locally on our servers. No data is transmitted to Google.

hCaptcha

To protect our forms from misuse and automated access, we use hCaptcha. Data processing is based on our legitimate interest in safeguarding our digital services or, where required, on your consent.

Google Drive

For secure file uploads, we use Google Drive. Processing is carried out in accordance with Article 6(1)(f) GDPR or, where applicable, Article 6(1)(a) GDPR.
Google participates in the EU-US Data Privacy Framework, and a data processing agreement is in place.

12. Your Rights

You have the right to access, correct, or delete your personal data, to restrict or object to certain processing activities, to withdraw consent at any time, and to lodge a complaint with a supervisory authority.

To exercise your rights, please contact us using the details above.

13. Data Security

We employ appropriate technical and organizational measures, including SSL/TLS encryption, to protect your personal data against unauthorized access and ensure confidentiality.

14. Automated Decision-Making

We do not engage in automated decision-making or profiling within the meaning of Article 22 GDPR.

Customer Account and Registration

When you create a customer account, we process the data you provide: nickname, first and last name, age, address, telephone number, e-mail address and a password of your choice (stored encrypted). This processing serves to provide the customer account and to process your orders (Art. 6(1)(b) GDPR). To confirm your e-mail address we send you a confirmation e-mail containing an activation link. Your data is stored for as long as your account exists or as required by statutory retention periods.

Wishlist and Anonymous Gift Service

Our gift service allows registered users to share a public wishlist and to send each other gifts anonymously. The sender never sees the recipient’s address; delivery is made to the address stored in the recipient’s account. The recipient only sees the sender’s nickname. For this purpose we process the data required to associate the order, the sender’s nickname and the delivery address (Art. 6(1)(b) GDPR).

Production and Shipping (Processor Shirtigo)

Some of our products are produced and shipped individually on a print-on-demand basis by Shirtigo Cockpit GmbH (Cologne, Germany). For this purpose we transmit the data required for production and delivery (in particular name and delivery address) to Shirtigo. Shirtigo acts as a processor on the basis of a data processing agreement pursuant to Art. 28 GDPR.

Payment Processing (Stripe)

Payments are processed via the payment service provider Stripe. The data required for payment is transmitted to Stripe and processed there in accordance with their privacy policy. The legal basis is Art. 6(1)(b) GDPR (performance of the contract).

Cookies and Consent

When you visit our website, we inform you about the use of cookies via a cookie notice (banner). Technically necessary cookies are used to provide the website (Art. 6(1)(f) GDPR). Non-essential cookies (e.g. for comfort or analytics functions) are only used with your consent (Art. 6(1)(a) GDPR); you can give or refuse this consent via the banner and withdraw it at any time with effect for the future by deleting the stored selection (cookie).