Privacy policy

Data Protection Statement

1) Information on the Collection of Personal Data and Contact Information for the Data Controller

1.1 Thank you for visiting our website. Below, we provide information about how your personal data is processed when you use our site. Personal data is defined as any information that allows you to be personally identified.

1.2 The data controller for this website is KATE & SOPHIE. The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (as defined by the EU General Data Protection Regulation—GDPR).

1.3 This website uses SSL or TLS encryption to protect the transmission of personal data and other confidential information (such as orders or inquiries). You can recognize an encrypted connection by the browser’s address bar starting with “https://” and by the padlock icon.

2) Data Collection When Visiting Our Website

When you use our site solely for informational purposes (without registering or submitting information to us), we collect only the data that your browser transmits to our server (so-called “server log files”). This data is necessary to display the site and ensure its stability. The following data is collected:

  • Page visited

  • Date and time of access

  • Amount of data transferred (in bytes)

  • Page from which you accessed the site (referrer)

  • Browser used

  • Operating system used

  • IP address used (possibly anonymized)

The processing of this data is based on our legitimate interest in improving the stability and functionality of the site, in accordance with Article 6(1)(f) of the GDPR. No further transfer or use of the data takes place, unless there are concrete indications of unlawful use, in which case the logs may be reviewed at a later time.

3) Cookies

To make our website more user-friendly and enable certain features, we use cookies (small text files stored on your device). Some cookies are deleted at the end of the session (session cookies), while others remain stored to recognize your browser on future visits (persistent cookies). These cookies may collect personal data such as your browser, location, or IP address.

Persistent cookies are automatically deleted after a defined period, which varies depending on the cookie. Some cookies simplify the ordering process (for example, by saving products in your shopping cart). If cookies process personal data, the processing is based on Article 6(1)(b) of the GDPR (performance of a contract) or Article 6(1)(f) (legitimate interest in optimal website functionality and an effective user experience).

We may work with advertising partners who also store cookies on your device when you visit our website (third-party cookies). If this is the case, we will inform you in this policy about their use and scope.

You can configure your browser to be notified when cookies are set and decide on a case-by-case basis whether to accept them or not. The settings for this vary by browser; please consult your browser’s help menu. Here are some helpful links:

  • Internet Explorer

  • Firefox

  • Chrome

  • Safari

  • Opera

If you reject cookies, certain features of the site may not be available.

4) Contact

When you contact us (for example, via a form or email), we collect your personal data. The data collected is specified in the corresponding form. We use this data exclusively to respond to your inquiry and handle related technical matters. The legal basis for this processing is our legitimate interest in responding (Article 6(1)(f) of the GDPR). If your contact is for the purpose of entering into a contract, the legal basis will also be Article 6(1)(b). Once the matter has been resolved and there are no legal retention obligations, your data will be deleted.

5) Creation of Customer Accounts and Performance of Contracts

When you provide us with personal data to enter into a contract or create a customer account, we process it in accordance with Article 6(1)(b) of the GDPR. The required data is specified in the forms. You may request the deletion of your account at any time by writing to the controller at the address provided. Once the contract has been fulfilled or the account has been deleted, the data will be blocked for tax and business purposes and will be deleted once those retention periods have expired, unless you consent to further use or the law permits it.

6) Use of Data for Direct Marketing

6.1 Newsletter Subscription

If you subscribe to our newsletter, we will send you regular offers. We only need your email address; other information is optional and is used to personalize the message. We use the “double opt-in” method, which means you will receive a confirmation email, and we will only begin sending you the newsletter after you click the link.

By clicking the link, you consent to the processing of your data in accordance with Article 6(1)(a) of the GDPR. We record your IP address and the time of registration to prevent misuse. You can unsubscribe at any time by using the link in the newsletter or by writing to us at info@kateandsophie.com. As soon as you do so, we will remove your email address from our list, unless you consent to another use or the law permits it.

6.2 Sending Newsletters to Existing Customers

If you provided your email address when making a purchase, we may email you offers for similar products without requiring additional consent. This is based on our legitimate interest in personalized direct marketing, in accordance with Article 6(1)(f) of the GDPR. You may object at any time by contacting us.