Privacy policy

Privacy Policy

As of: October 2026

The protection of your personal data is important to us. This privacy policy informs you about which data we process when you visit and use our website ogfashioncheck.com, for what purposes and on what legal basis this takes place, and what rights you have.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

OGFashioncheck GbR
represented by its partners Jamael Halimi and Darius Pfarr
Wolfstalstraße 12
31832 Springe
Germany
Email: info@ogfashioncheck.com
Telephone: +49 1578 6790658

You will find further details in our legal notice. If you have questions about data protection, you can reach us at the email address given above.

2. Hosting and shop system (Shopify)

Our online shop is operated using the Shopify shop system. The provider for customers in the EU is Shopify International Limited, Dublin, Ireland; other group companies, including Shopify Inc. (Canada) and Shopify (USA) Inc., may be involved as sub-processors. Shopify processes your data on our behalf (as a processor under Art. 28 GDPR), in particular to provide the website, manage orders and enable payment processing. A data processing agreement is in place with Shopify.

This may involve a transfer of personal data to the USA and other third countries. The transfer is based on the European Commission’s adequacy decision on the EU-US Data Privacy Framework where the recipient is certified under it, and otherwise on the European Commission’s standard contractual clauses (Art. 46 GDPR).

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure, efficient and economical operation of our online shop); where the processing serves the performance of a contract, also Art. 6(1)(b) GDPR.

3. Server log files

When you visit our website, the hosting provider processes technically necessary data that your browser transmits automatically, for example IP address, date and time of the request, page accessed, browser type and version, operating system and referrer URL. The processing serves to deliver the website, to troubleshoot errors, and to ensure the security and stability of the service (defence against misuse and attacks). The legal basis is Art. 6(1)(f) GDPR. The log files are deleted after a short time, unless they are needed for longer to investigate a security incident.

4. Cookies, similar technologies and consent

Our website uses cookies and similar technologies (for example local storage in the browser). We distinguish between:

  • Necessary technologies: These are required for the shop to work, for example for the shopping cart, checkout, login, security, language and country selection, and storing your cookie choice. They are set without consent. The legal basis is Section 25(2) No. 2 TDDDG (Germany's Telecommunications Digital Services Data Protection Act (TDDDG)) and Art. 6(1)(f) GDPR.
  • Statistics and marketing: We only use technologies that evaluate visits or support advertising and sales channels (see section 12) if you have given your consent beforehand. The legal basis is Section 25(1) TDDDG and Art. 6(1)(a) GDPR.

When you first visit, our consent banner asks for your choice. It uses Shopify’s Customer Privacy API. Without your consent, statistics and marketing remain switched off. You can change or withdraw your choice at any time by reopening the cookie settings via the banner or the link to the cookie settings on the website. The withdrawal applies for the future; the lawfulness of the processing carried out until then remains unaffected. You can also delete or block cookies in your browser; in that case, some functions of the shop may not be usable.

5. Orders and contract performance

When you order from us, we process the data required for this: name, address, email address, telephone number (if provided), items ordered, payment and shipping information. The processing serves the performance of the purchase contract, payment processing, shipping, customer communication regarding the order, and the handling of statutory warranty rights and rights of withdrawal. The legal basis is Art. 6(1)(b) GDPR; for statutory retention and accounting obligations, Art. 6(1)(c) GDPR.

6. Payment

We process payments via Shopify Payments; payment by card as well as Apple Pay and Google Pay are offered, among others. Further payment service providers may also be offered and are shown at checkout (for example PayPal or Klarna). You enter your payment data directly at checkout or with the respective payment service provider; we do not receive full card data. The respective payment service provider processes your data under its own responsibility or as our processor; its privacy notices, which you can view when paying, apply in addition. The legal basis is Art. 6(1)(b) GDPR; for fraud prevention, also Art. 6(1)(f) GDPR.

7. Shipping service providers

For delivery, we pass on your name, delivery address and, where necessary for delivery, your email address or telephone number to the transport company commissioned with shipping (currently DHL). The legal basis is Art. 6(1)(b) GDPR.

8. Customer account

You can create a customer account. We then store your contact details, addresses, order history and, where applicable, your wishlist, so that you can view orders and complete future purchases more quickly. The legal basis is Art. 6(1)(b) GDPR. You can have your account deleted at any time by writing to us; statutory retention obligations remain unaffected.

9. Newsletter, price alert and similar-item alert

If you sign up for our newsletter, the price alert or the similar-item alert, we process your email address and, where applicable, your details on brand, size or saved items in order to send you the messages you have requested. Sign-up takes place using the double opt-in procedure: you receive a confirmation email and are only added to the mailing list once you have confirmed the link. We store the sign-up and the confirmation as proof. Messages are sent via Shopify (Shopify Email or customer marketing). The legal basis is your consent, Art. 6(1)(a) GDPR. You can withdraw it at any time with effect for the future, for example via the unsubscribe link in every email or by message to us.

10. Contact and chat

If you contact us by email, via the contact form or via the chat (Shopify Inbox), we process your details (for example name, email address, content of the message) in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR if the enquiry is related to a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in handling enquiries). We delete the data once the enquiry has been dealt with and no retention obligations stand in the way.

11. Reviews

We use Judge.me for customer reviews, and we also refer to reviews on Trustpilot. If you submit a review, the respective provider processes the information required for this (for example name, email address, review text, time). The providers may also process data in third countries; their privacy notices apply. The legal basis is your consent or the submission of the review at your own initiative (Art. 6(1)(a) and (b) GDPR); where non-necessary cookies or similar technologies are used, this only happens with your consent.

12. Sales channels and advertising (only with consent)

We also offer our items through other channels and use advertising and measurement technologies. These include Google & YouTube (Google Merchant Center), Meta (Facebook and Instagram) and Pinterest. Where cookies, pixels or comparable technologies are used for this purpose, or where data on visits and purchases is transmitted to these providers, this happens only with your consent via our consent banner. The providers may process data in third countries, in particular the USA, and may in part be jointly responsible with us. The legal basis is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. Without consent, these technologies remain switched off. You can withdraw your consent at any time via the cookie settings.

13. Instagram posts on the website

On our website, we show posts from our Instagram profile. We load the posts via a service of our own (Cloudflare Worker) and only after you have given your consent. In doing so, your IP address is transmitted to this service and thus to its operator Cloudflare (USA), and, for retrieving the images, to Meta or its delivery network. The legal basis is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. Without consent, no Instagram content is loaded. You can withdraw your consent at any time via the cookie settings.

14. Fonts

We deliver the fonts used on our website ourselves from our shop. No connection is made to the servers of font providers such as Google Fonts.

15. Storage period

We only store personal data for as long as is necessary for the respective purpose. We retain data relating to contract performance in accordance with commercial and tax law requirements (Section 257 HGB, Section 147 AO; periods of six to ten years). Data based on your consent is stored until you withdraw it. We delete contact enquiries once they have been dealt with. After that, the data is deleted or anonymised.

16. Your rights

Under the GDPR, you have the following rights:

  • Access to the data stored about you (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing (Art. 21 GDPR)
  • Withdrawal of consent given, with effect for the future (Art. 7(3) GDPR)

Right to object under Art. 21 GDPR: Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object to the processing at any time on grounds relating to your particular situation. Where the processing is carried out for direct marketing purposes, you have the right to object at any time without giving reasons. We will then no longer process the data for these purposes, unless we demonstrate compelling legitimate grounds or the processing serves the establishment, exercise or defence of legal claims.

To exercise your rights, a message to info@ogfashioncheck.com is sufficient.

17. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection of Lower Saxony, Prinzenstraße 5, 30159 Hannover. You can also contact the supervisory authority at your place of residence.

18. Security and changes

We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. Transmission on our website is encrypted. We will amend this privacy policy if our offering or the legal situation changes; the version published on this page at the relevant time applies.