Privacy Policy

Les Soeurs Shop GmbH (“we”, “our”, or “us”) is committed to protecting and respecting your privacy in compliance with the General Data Protection Regulation (GDPR) and applicable German data protection laws, including the Federal Data Protection Act (BDSG). This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit www.lessoeursshop.com (the “Website”) and interact with our services.

1. Data Controller Identity

In accordance with Article 4(7) of the GDPR, the data controller responsible for the processing of your personal data is:

  • Company Name: Les Soeurs Shop GmbH
  • Brand Name: lessoeursshop
  • Registered Address: Grolmanstraße 16, 10623 Berlin-Bezirk Charlottenburg-Wilmersdorf, Germany
  • Email Contact: clothing@lessoeursshop.com
  • Telephone: +49 3054844508

2. Information We Collect

We may collect and process the following categories of personal data:

  • Identity and Contact Data: Your name, billing address, delivery address, email address, and telephone number provided during checkout or account interaction.
  • Transaction and Financial Data: Details regarding purchases made from us. Please note that payment card details are processed directly by our payment processor.
  • Technical and Usage Data: Information regarding your IP address, browser type, operating system, and navigation patterns collected via cookies and similar technologies.

3. Payment Processing via Stripe

To process your payments securely, we share your transaction data with our primary payment processing partner, Stripe.

  • Role of Stripe: Stripe acts as an independent data controller or processor regarding your financial details, handling your credit/debit card information in strict compliance with the Payment Card Industry Data Security Standard (PCI-DSS).
  • Data Transmission: When you complete a transaction on our Website, necessary payment details are transmitted directly to Stripe to authorize, process, and secure the payment. For further details on how Stripe handles your personal information and exercises your data rights, please consult the official Stripe Privacy Policy.

4. Data Retention Periods

We store personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or statutory reporting requirements under German and European law.

  • Tax and Commercial Records: In accordance with the German Commercial Code (HGB) and the German Fiscal Code (AO), booking records, invoices, and relevant commercial correspondence are retained for 10 years.
  • Contractual and Account Data: Data necessary for the execution and fulfillment of purchase contracts is generally retained for 6 years in compliance with statutory civil limitation periods (regular limitation period under the German Civil Code, BGB).
  • Customer Support and General Inquiries: Correspondence and inquiries handled via email or phone are retained for 3 years following the closure of the query, unless longer statutory retention mandates apply.

5. Your Data Protection Rights

Under Chapter III of the GDPR, you possess the following rights regarding your personal data:

  • Right of Access (Article 15 GDPR): Request confirmation as to whether your data is being processed and obtain a copy of your personal data.
  • Right to Rectification (Article 16 GDPR): Request the correction of inaccurate or incomplete personal data.
  • Right to Erasure (Article 17 GDPR): Request the deletion of your personal data under specific statutory conditions.
  • Right to Restriction of Processing (Article 18 GDPR): Request the temporary restriction of your data processing.
  • Right to Data Portability (Article 20 GDPR): Receive your personal data in a structured, commonly used format.
  • Right to Object (Article 21 GDPR): Object to the processing of your personal data based on legitimate interests.

To exercise any of these rights, please contact our data management team at clothing@lessoeursshop.com. You also have the right to lodge a complaint with a competent European supervisory authority, such as the Berliner Beauftragte für Datenschutz und Informationsfreiheit in Germany.