Privacy Policy – ELIR Clothing GmbH

1. Responsible Entity

ELIR Clothing GmbH
Am Stichkanal 2–4
14167 Berlin
Germany
Email: support@elirclothing.com

We are pleased about your interest in our online store. Protecting your privacy is extremely important to us. Below, we inform you in detail about the handling of your personal data.

2. Access Data and Hosting

You can visit our website without disclosing any personal information. With each visit to our website, the web server automatically saves a server log file, which includes the name of the requested file, your IP address, date and time of access, the data volume transferred, and the requesting provider (access data). This access data is exclusively analyzed to ensure the smooth operation of the website and to improve our services. This is necessary to safeguard our overriding legitimate interests in the correct presentation of our services in accordance with Art. 6(1)(f) GDPR.

All access data will be deleted no later than seven days after the end of your visit.

3. Hosting Services by a Third Party

As part of data processing on our behalf, third-party service providers provide hosting and website display services. Unless otherwise specified in this Privacy Policy, all access data and all data collected through forms on this website will be processed on their servers.

Our service providers are based and/or operate servers in the following countries, where an adequate level of data protection has been confirmed by the European Commission:
Canada, New Zealand, Japan, United Kingdom, and the United States.

For providers in the United States, data transfers are based on the adequacy decision of the European Commission if the provider is certified under the Data Privacy Framework. Until certification is completed, data transfers continue to be based on the Standard Contractual Clauses of the European Commission.

Some providers are based in countries without an adequacy decision (e.g., Australia, India, Singapore). In such cases, cooperation is based on the Standard Contractual Clauses issued by the European Commission.

4. Content Delivery Network (CDN)

To shorten loading times, we use a content delivery network ("CDN") for some offerings. Content such as large media files is delivered through regionally distributed servers of external CDN service providers. Accordingly, access data is processed on the servers of these providers.

Our CDN service providers operate under data processing agreements concluded with us. For countries without an adequacy decision, cooperation is also based on the Standard Contractual Clauses of the European Commission.

5. Data Processing for Contract Fulfillment and Customer Contact

5.1 Data Processing for Contract Fulfillment

We collect personal data when you voluntarily provide it to us during your order. Mandatory fields are marked accordingly, as we require this data to process your order and fulfill the contract according to Art. 6(1)(b) GDPR.
Which data is collected can be seen from the respective input forms.

Further information regarding the processing of your data, particularly the disclosure to our service providers for the purposes of order, payment, and shipping processing, can be found below.
After full contract execution, your data will be restricted for further processing and deleted after expiry of tax and commercial retention periods unless you have expressly consented to further use of your data according to Art. 6(1)(a) GDPR or we reserve the right to further data use as legally permitted.

5.2 Merchandise Management System

We use external merchandise management systems for order and contract processing.
Our service providers process data on our behalf within the scope of data processing agreements.

5.3 Customer Account

If you have given your consent in accordance with Art. 6(1)(a) GDPR by opening a customer account, we will use your data for the purpose of opening the account and for storing your data for future orders on our website.
The deletion of your customer account is possible at any time and can be done either by sending a message to the contact details described in this Privacy Policy or through a function designated for this purpose in the customer account.

After the deletion of your customer account, your data will be deleted unless you have expressly consented to further use of your data according to Art. 6(1)(a) GDPR or we reserve a legally permitted further use of data.

5.4 Contacting Us

When you contact us (e.g., via contact form or email), we collect personal data for the purpose of responding to your inquiry and processing your request according to Art. 6(1)(b) GDPR.
Mandatory fields are marked accordingly, as we need this data to process your inquiry.
The data collected can be seen from the respective input forms.
After complete processing of your inquiry, your data will be deleted unless you have expressly consented to further use of your data according to Art. 6(1)(a) GDPR.