Privacy policy

This is the English reading version of our German privacy policy. The German text is the legally binding one.

1. Controller

The controller for data processing on this website is:

Please send data protection enquiries to datenschutz@lang-und-laenger.de. We are not legally required to appoint a data protection officer; enquiries are handled by the management.

2. General information

We process personal data only where this is necessary to provide a working website and our content and services. Depending on the processing, the legal basis is Art. 6 (1) (a) GDPR (consent), (b) (contract or pre-contractual steps), (c) (legal obligation) or (f) (legitimate interests).

3. Hosting

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Technically necessary connection data is processed when the pages are called up. A data processing agreement under Art. 28 GDPR is in place with the provider; the transfer to the USA is based on the European Commission’s standard contractual clauses under Art. 46 (2) (c) GDPR. The legal basis for hosting is our legitimate interest in operating the website securely and reliably, Art. 6 (1) (f) GDPR.

4. Server log files

When this website is called up, information transmitted by your browser is collected automatically: the address requested, date and time, volume of data transferred, referrer, browser type and version, operating system and a shortened IP address. This data is required to deliver the pages and to defend against attacks, is not combined with other data sources and is deleted after 30 days at the latest. The legal basis is Art. 6 (1) (f) GDPR.

5. Cookies and local browser storage

We use no analytics, advertising or tracking cookies. To operate the shop we store the following in your browser’s local storage only; it is never transmitted to us and never leaves your device:

• the contents of your cart and your wishlist,
• the measurements you set (body height, inseam, sleeve length), so that the shop shows you the same garments on your next visit,
• your choice in the cookie notice.

This storage is strictly necessary for the shop function you have expressly requested (§ 25 (2) no. 2 TDDDG). You can delete it at any time by clearing site data in your browser.

6. Map (OpenStreetMap)

In the “Visit us” section you may load a map from the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. The map is loaded only after you have expressly agreed. Your IP address is transmitted to the OpenStreetMap Foundation in the process. The legal basis is your consent under Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. You may withdraw consent at any time with future effect via the “Cookie settings” link in the footer.

7. Orders and body measurements

To process an order we handle your name, delivery and billing address, email address, your telephone number if you give one, and the body measurements you provide (body height, inseam, sleeve length). The measurements are used solely to check the correct length before dispatch. They are ordinary personal data; we neither collect nor need health data within the meaning of Art. 9 GDPR. The legal basis is Art. 6 (1) (b) GDPR. Giving your measurements is voluntary; without them we can still fulfil the order but cannot double-check the length.

Invoice and order data is retained for six or ten years respectively under commercial and tax law retention duties (§ 257 HGB, § 147 AO); the legal basis for this is Art. 6 (1) (c) GDPR. Measurements you provide are deleted no later than twelve months after the order is completed, unless you expressly ask us to keep them for future orders.

This website is a demonstration site. The ordering process stops before payment; entries made in the checkout remain in your browser and are not transmitted to us.

8. Contacting us

If you contact us by email or telephone we process your details in order to deal with the enquiry. The legal basis is Art. 6 (1) (b) GDPR where the enquiry is directed at a contract, otherwise Art. 6 (1) (f) GDPR. We delete enquiries once they are settled and no retention duties stand in the way, after two years at the latest.

9. Recipients

We pass on personal data only where necessary to perform the contract or where a legal duty exists: to the logistics company handling dispatch, to our tax adviser and to the hosting provider. No transfer for advertising purposes takes place. Your data is not sold.

10. Your rights

Under the GDPR you have the following rights:

• access to the data processed about you (Art. 15 GDPR),
• rectification of inaccurate data (Art. 16 GDPR),
• erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• objection to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR),
• withdrawal of consent with future effect (Art. 7 (3) GDPR).

An informal message to datenschutz@lang-und-laenger.de is enough to exercise them. We reply within one month.

11. Right to lodge a complaint

You have the right to complain to a data protection supervisory authority. The authority responsible for us is the Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

12. Encryption

For security reasons this website uses TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar.