Privacy Policy

Unless otherwise stated below, providing your personal data is neither required by law or contract nor necessary for entering into a contract. You are not obliged to provide the data. Failure to provide it will have no consequences. This applies only where no other information is provided for the processing operations described below.

“Personal data” means any information relating to an identified or identifiable natural person.

Server log files

You can visit our websites without providing any personal information. Every time you access our website, usage data is transmitted to us or our web host/IT service provider by your internet browser and stored in log data (known as server log files).

This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the volume of data transferred and the requesting provider.

Processing is carried out on the basis of Art. 6(1)(f) GDPR, arising from our overriding legitimate interest in ensuring the uninterrupted operation of our website and improving our services.

Your data may be transferred to and processed in third countries outside the EU, particularly Canada and the USA. An adequacy decision by the EU Commission exists for Canada. An EU Commission adequacy decision also exists for the USA (Trans-Atlantic Data Privacy Framework – TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the EU Commission’s standard contractual clauses.

Contact

Controller

MäxFashion – Proprietor: Axel Schmitz
Hauptstr. 32
50259 Pulheim
Germany
Telephone: 02238 2205
Email: info@maexfashion.de

Contact initiated by email

If you contact us by email for business purposes, we collect your personal data (name, email address and message text) only to the extent provided by you.

The data is processed to handle and respond to your enquiry. If you contact us to take pre-contractual measures or in relation to an existing contract, processing is based on Art. 6(1)(b) GDPR.

In other cases, processing is based on Art. 6(1)(f) GDPR. You have the right to object to this processing at any time.

Your data will be deleted once processing has been completed, subject to statutory retention periods.

WhatsApp Business

If you contact us via WhatsApp for business purposes, we use WhatsApp Business, provided by WhatsApp Ireland Limited, Dublin, Ireland.

Your mobile telephone number, your name where applicable, and any other content you provide are processed.

Processing is based on Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.

Data may be transferred to Meta Platforms Inc. servers in the USA. An adequacy decision (TADPF) exists for the USA. Meta Platforms Inc. is certified under the TADPF.

Further information: https://www.whatsapp.com/legal/#privacy-policy

Customer account and orders

Customer account

When you open a customer account, we process your personal data on the basis of your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw this consent at any time.

Order processing

When you place an order, we process your personal data to perform the contract pursuant to Art. 6(1)(b) GDPR.

Data is disclosed to shipping providers, payment providers, IT service providers and fulfilment providers.

Cookies

Our website uses cookies. Cookies are small text files stored on your device.

Technically necessary cookies are used on the basis of Section 25(2) TDDDG and Art. 6(1)(f) GDPR.

Web analytics – Microsoft Clarity

We use Microsoft Clarity, a web analytics service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

Microsoft Clarity anonymously analyses mouse movements, clicks and scrolling behaviour. Personal data such as names, email addresses or form entries is not recorded.

Processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR.

Data may be transferred to the USA. Microsoft is certified under the Trans-Atlantic Data Privacy Framework.

Further information: https://privacy.microsoft.com/de-de/privacystatement

Services and apps used

Shopify – shop hosting and order processing
Shopify Stats – technical and statistical analysis
Translate & Adapt – language localisation
REVIEWS.io – customer reviews
Klarna On-Site Messaging – payment information
SendWILL Email Popups – newsletter and pop-up functionality
Post & DHL Shipping – shipping processing
Amazon Web Services (AWS) – hosting of media content

Storage period

Once the contract has been fully processed, personal data is stored in accordance with statutory retention periods and subsequently deleted.

Rights of data subjects

Under Art. 15–20 GDPR, you have the right of access, rectification, erasure, restriction of processing and data portability.

You also have the right to object pursuant to Art. 21 GDPR.

Right to lodge a complaint

You have the right to lodge a complaint with the competent data-protection supervisory authority:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
PO Box 20 04 44
40102 Düsseldorf
Email: poststelle@ldi.nrw.de

Cancellation function (cancellation button)

Our website provides an electronic cancellation function through which you can exercise your statutory right of cancellation.

We use the Shopify app “EU Cancellation Button” to provide this function.

The following personal data is processed when this function is used:
• Name
• Information identifying the order or contract
• Email address

This data is processed to handle your cancellation and send confirmation of receipt.

Processing is based on Art. 6(1)(c) GDPR (compliance with a legal obligation) and Art. 6(1)(b) GDPR (performance of a contract).

Data submitted through the cancellation function is processed in the system of the app used. Processing may also take place on the respective provider’s servers.

The data is automatically deleted after 12 months unless statutory retention obligations prevent this.

Last updated: 09.01.2026