Privacy policy

Thank you for your interest in our online offer. In the following, we will inform you in detail about the processing of personal data when using this service. Personal data is all data that can be related to you personally, e.g. name, address, telephone number, e-mail address or user behaviour. 

1. Who is responsible for data processing? 

The service provider and controller for the processing of personal data is Influencer Fashion GmbH, c/o sprd.net AG, Auguststraße 11-13, 10117 Berlin, Germany (hereinafter referred to as “Influencer Fashion”). You can reach us at the following contact details:

Phone: +49 341 2504 99 47 
Fax: +49 (0) 341 59 400 5499 
E-mail: privacy@spreadshirt.net 

You can contact our external data protection officer at Fresh Compliance GmbH, Schönhauser Allee 43a, 10435 Berlin; by e-mail dsb@freshcompliance.de.

2. To what extent is personal data processed? 

2.1 Collection of personal data when visiting our online offer

a) Log files 

When using the Spreadshirt website for information purposes only, i.e. if you do not log in to use the website, register or otherwise transmit information, we collect the data that your browser transmits to our server. This includes in particular:

  • IP address, 
  • date and time of the request, 
  • time zone difference to Greenwich Mean Time (GMT), 
  • the name of the requested file, 
  • access status/HTTP status code, 
  • amount of data transferred, 
  • the page from which you are visiting us, 
  • your operating system and its interface, 
  • your browser type and the language and version of the browser software, 
  • a message about the successful retrieval.  

The data is technically necessary for us to display our website to you. It is also analyzed to make the website user-friendly and to ensure stability and security. We partly use the external web hosting service providers Akamai Technologies, Inc. and Amazon Web Services, Inc. for this purpose. In the event that data is also transferred to the USA, both service providers have submitted to the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework). The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f GDPR. 

b) Cookies und similar technologies 

We also use so-called cookies on our website. Cookies are small text files that are assigned to your browser and stored on your end device. They are used to send certain information to the place that sets the cookie, such as settings or data for exchange with the system. This helps us to make our online offering more user-friendly and effective overall. The legal basis is Art. 6 para. 1 sentence 1 lit. a and f GDPR. Cookies cannot execute programs or transmit viruses to your end device. 

Our website uses the following types of cookies: 

  • session or transient cookies, 
  • long-term or persistent cookies, 
  • third-party cookies. 

Session cookies store a so-called session ID, with which various requests from your browser can be assigned to a common session. This allows your device to be recognized when you return to our website. For example, certain entries you make (such as log-in information, language settings) are saved so that you do not have to keep repeating them. Session cookies are automatically deleted when you log out or close the browser. 

Long-term cookies remain on your end device for the time being so that we can recognize your browser on your next visit and, for example, assign which inputs and settings you prefer. Long-term cookies are automatically deleted after a specified period, which may vary depending on the cookie. 

When you visit our online services, third-party cookies from our partner companies are also stored on your end device. The cookies contain information about the use of our online services, e.g. which websites and products were visited. The data is collected in pseudonymized form by assigning an identification number, which is not merged with any other personal data you may have provided to us.

You can delete cookies in your browser settings at any time or prevent them from being stored, although the latter may mean that our website only works to a limited extent for you. Which technologies comparable to cookies are used by us and how you can object to the use of cookies and other technologies by the individual third-party providers is explained in the relevant sections of this privacy policy.

2.2 Orders at Influencer Fashion / user account 

a) If you would like to order something in our online store, it is necessary for the conclusion of the contract that you provide the personal data that we need to process the order. The mandatory information required for processing the contract is marked separately, other information is voluntary. You can either enter your data only once for the order or set up a password-protected user account with us using your e-mail address, in which your designs, votes and orders can be saved. You can deactivate or delete the data and the user account at any time via the account.

To prevent unauthorized access to your personal data by third parties, the order process is encrypted using TLS technology. 

We process the data you provide to process your order, including, for example, individual customer support. In the course of order processing, we pass on personal data to one of our internal production companies, to a shipping company commissioned by us and to our payment service providers.

The legal basis for the processing of personal data in the context of order processing is Art. 6 para. 1 sentence 1 lit. b and f GDPR. Due to commercial and tax law requirements, we are obliged to store your order, address and payment data for a period of ten years. 

b) During the order process, we also carry out a fraud prevention check in which your IP address is used for geolocalization and your details are compared with previous experience. This may mean that an order cannot be placed using the selected payment method. In this way, we want to prevent misuse of the payment method you have specified, especially by third parties, and protect ourselves from payment defaults. The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f GDPR. 

As this is an automated decision-making process, you have the right to contest the decision (in this case, the rejection of a specific payment method) and to have the decision reviewed by a person. To do so, please contact us using the contact details provided in point 1. Please note that the payment method may also have been rejected due to a typing error and you should therefore check your entry again during the order process if necessary.

2.3 Communication with Influencer Fashion 

If you contact us by contact form, letter, fax, email, social media or phone call, we will process the data you provide for the purpose of processing your enquiry and - only in the cases permitted by law when communicating with entrepreneurs - for advertising purposes. To coordinate and process emails, we use the software of Sematell GmbH, Neugrabenweg 1, 66123 Saarbrücken, Germany, which thereby gains access to the data. The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f GDPR. If the contact is aimed at the conclusion of a contract, the additional legal basis is Art. 6 para. 1 sentence 1 lit. b GDPR. 

2.4 Processing of data for web analysis 

Our website uses Google Analytics, a web analytics service provided by Google Ireland Ltd (‘Google’). Google uses cookies (see section 2.1 b), which enable us to analyse your use of our online offering. The information generated by the cookie about your use of the website is usually transmitted to a Google server in the USA and stored there. However, due to the activation of IP anonymisation on our website, your IP address will be shortened beforehand by Google within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on our behalf to analyse your use of the website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. 

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. 

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of our website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link:  https://tools.google.com/dlpage/gaoptout/. Please note that if you delete all cookies on your end device, this opt-out cookie will also be deleted; if you therefore wish to continue to object in this case, you must set the cookie again using the button above. The opt-out cookie is set per top-level domain, per browser and per end device and prevents the collection of data for this online offering only.

This website uses Google Analytics with the extension ‘_anonymizeIp()’. This means that IP addresses are further processed in abbreviated form, so that they cannot be linked to a specific person. If the data collected about you is personally identifiable, it is immediately excluded and the personal data is deleted immediately. 

We use Google Analytics to analyse and regularly improve the use of our website. We can use the statistics obtained to improve our offering and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google LLC has submitted to the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework). The legal basis for the use of Google Analytics is Art. 6 para. 1 sentence 1 lit. a and f GDPR.

Information from the third-party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: + 353 (1) 436 1001. See also the terms of use (https://www.google.com/analytics/terms/de.html) and the overview of data protection (https://support.google.com/analytics/answer/6004245?hl=de) for Google Analytics and Google's privacy policy: https://policies.google.com/privacy?hl=de&gl=de. 

2.5 Advertising activities with Influencer Fashion  

If you register separately for our newsletter via our website and give us your consent, we will use your email address to send you regular emails about product offers, discount promotions and competitions. 

When you register for our newsletter, we use the so-called double opt-in procedure. This means that after you have registered, we will send you an email to the email address you have provided asking you to confirm that you wish to receive the newsletter. If you do not confirm your registration, your information will be automatically deleted after one month. However, if you confirm your newsletter registration, we will store your e-mail address for the purpose of sending you the newsletter until you unsubscribe from the newsletter. 

You can revoke your consent to the sending of the newsletter at any time (without affecting the legality of the processing carried out until the revocation). You can declare your cancellation by clicking on the link provided in every newsletter e-mail, by e-mail to privacy@spreadshirt.net or by sending a message to the contact details mentioned in point 1. 

The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. a GDPR. 

2.6 Usage-based online advertising 

Our online offering uses various conversion tracking and retargeting technologies provided by other service providers. We use these technologies to make our online offering more interesting for you. The information also helps us to target users who have already shown an interest in our products with customised advertising on the websites of our partner companies. We assume that the display of personalised, interest-based advertising is generally more interesting for the Internet user than advertising that has no such personal reference. At the same time, we want to avoid inappropriate and intrusive advertising. 

You can find general information on advertising-related technologies from third-party providers and how you can deactivate them on the following websites, among others: 

a) Use of Google AdWords Conversion Tracking and Google AdWords Remarketing 

- Google AdWords Conversion Tracking 

We use the Google LLC (‘Google’) service, Google AdWords, to draw attention to our offers with the help of advertising material (so-called Google AdWords) on external websites. We can determine how successful the individual advertising measures are in relation to the advertising campaign data. In this way, we want to show you adverts that are of interest to you, make our website more attractive for you and achieve a fair calculation of advertising costs. 

These adverts are delivered by Google via so-called ‘ad servers’. For this purpose, we use ad server cookies, through which certain parameters for measuring success, such as the display of adverts or clicks by users, can be measured. If you access our website via a Google advert, Google AdWords will store a cookie on your end device. These cookies generally lose their validity after 30 days and are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values for this cookie. 

These cookies enable Google to recognise your internet browser. If a user visits certain pages of the website of an AdWords customer (in this case us) and the cookie stored on their computer has not yet expired, Google and the AdWords customer can recognise that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each AdWords customer. Cookies can therefore not be tracked via the websites of AdWords customers. We ourselves do not collect and process any personal data in the aforementioned advertising measures. Google only provides us with statistical analyses. These analyses enable us to recognise which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material; in particular, we cannot identify users on the basis of this information. 

Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge: By integrating AdWords Conversion, Google receives the information that you have accessed the relevant part of our website or clicked on an advert from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that Google will find out your IP address and store it. 

- Google AdWords Remarketing 

In addition to AdWords Conversion, we use the Google AdWords Remarketing application. This is a process with which we would like to address you again. This application allows our adverts to be displayed to you when you continue to use the internet after visiting our website. This is done by means of cookies stored in your browser, which are used by Google to record and evaluate your usage behaviour when you visit various websites. This allows Google to recognise your previous visit to our website. According to its own statements, Google does not merge the data collected in the context of remarketing with your personal data, which may be stored by Google. In particular, according to Google, pseudonymisation is used for remarketing. 

You can prevent participation in this tracking process in various ways: 

  • By setting your browser software accordingly; in particular, the suppression of third-party cookies means that you will not receive any adverts from third-party providers;
  • By permanently deactivating them in your Firefox, Internet Explorer or Google Chrome browsers at: http://www.google.com/settings/ads/plugin.  We would like to point out that in this case you may not be able to use all the functions of this website to their full extent. 
  • By clicking on the following button: Deactivate Google AdWords. An opt-out cookie will be set to prevent future collection when you visit our website. Please note that if you delete all cookies on your end device, this opt-out cookie will also be deleted; if you therefore wish to continue to object in this case, you must set the cookie again using the button above. The opt-out cookie is set per top-level domain, per browser and per end device and prevents the collection only for this online offer. 
  • By deactivating the interest-based ads of the providers that are part of the ‘YourAdChoices’ self-regulation campaign via the link http://optout.aboutads.info/?c=2#!/, whereby this setting is deleted when you delete your cookies.

The legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. a and f DS-GVO. 

Information from the third-party provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. You can find further information on data protection at Google at http://www.google.com/intl/de/policies/privacy and at https://services.google.com/sitestats/de.html. Alternatively, you can visit the website of the Network Advertising Initiative (NAI): http://www.networkadvertising.org. Google has submitted to the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework). 

b) Use of Meta Custom Audiences, Meta Website Custom Audiences and Meta Conversion Tracking 

- Meta Custom Audiences 

Our website also uses the remarketing function ‘Custom Audiences’ of Meta Platforms Inc (‘Meta’). This allows users of the website to be shown interest-based adverts (‘Meta Ads’) when they visit the social network Facebook or other websites that also use the process. In this way, we want to show you adverts that are of interest to you. 

Due to the marketing tools used, your browser automatically establishes a direct connection with the Facebook server. We have no influence on the scope and further use of the data collected by Meta through the use of this tool and therefore inform you according to our level of knowledge: Through the integration of Custom Audiences, Meta receives the information that you have accessed the corresponding website of our Internet presence or clicked on an advert from us. If you are registered with a Facebook service, Meta can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, it is possible for Meta to find out and store your IP address and other identifying features. 

- Website Custom Audiences 

We also use the ‘Custom Audiences via your website’ product from Meta on our website. For this purpose, we have integrated remarketing tags (so-called meta or counting pixels) on our online offering. The meta pixel is a small piece of JavaScript code that provides a range of functionalities for sending application-specific events and customised data to Meta. We use meta pixels to record how visitors use our website. The meta pixel collects and reports to Meta information about the user's browser session, a hashed version of the Facebook ID and the URL being viewed. Every Facebook user thus has a device-independent Facebook ID, which enables us to recognise users across multiple devices on the Facebook social network so that we can target our visitors again for advertising purposes in the context of Meta ads. After 180 days, the user information is deleted until the user visits our website again. No personal information about individual website visitors is disclosed to us and website customer target groups can only be targeted by us in adverts if the customer target group has reached a critical mass in terms of numbers. This makes it impossible for us to determine the individual identities of visitors. 

- Conversion Tracking 

We also use meta pixels on our website to measure the reach of adverts. This allows us to track the actions of users after they have seen or clicked on a Meta advert. The meta pixel collects and reports to Meta information about the user's browser session, a hashed version of the Facebook ID and the URL that is viewed. It works in the same way as Website Custom Audiences via meta pixels, as described above. Using the hashed Facebook ID, we can measure the reach and usefulness of an advert to find out whether you are actually interested in our adverts. This allows us to record the effectiveness of the meta adverts for statistical and market research purposes. For us, the data used has no personal reference. 

You can prevent the collection by Meta on this online offer by clicking here: Deactivate Meta Custom Audiences, Website Custom Audiences and Conversion Tracking. An opt-out cookie will be set to prevent future collection when you visit our website. The opt-out cookie is set per top-level domain, per browser and per end device and prevents collection only for this online offering. How you can prevent data collection on other websites is explained on the respective pages and for users logged in to Facebook here: https://www.facebook.com/settings/?tab=ads#_. 

The legal basis for the processing of data when using the above-mentioned functions is Art. 6 para. 1 sentence 1 lit. a GDPR. You can revoke your consent at any time as described above (without affecting the legality of the data processing up to the time of revocation). 

Information from the third-party provider: Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, D2 Dublin, Ireland, phone: +0016505434800, fax: + 0016505435325. Further information on data processing at Meta can be found in Facebook's data policy: https://www.facebook.com/about/privacy. 

3. What rights do I have? 

You have the following rights towards us with regard to your personal data: 

  • Right to information,
  • Right to receive a copy,
  • Right to rectification or erasure,
  • Right to completion,
  • Right to restriction of processing,
  • Right to object to processing,
  • Right to data portability. 

You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us. The data protection supervisory authority responsible for Spreadshirt is: Sächsische Datenschutz- und Transparenzbeauftragte, Devrientstraße 5, 01067 Dresden. 

If you have given your consent to the processing of your data (within the meaning of Art. 6 para. 1 sentence 1 lit. a or Art. 9 para. 2 lit. a GDPR), you can revoke this consent at any time with effect for the future. The legality of the processing carried out on the basis of the consent until the revocation is not affected. 

Insofar as we base the processing of your personal data on the balancing of interests (Art. 6 para. 1 sentence 1 lit. f GDPR), you can object to the processing. This is the case if, in particular, the processing is not necessary for the fulfilment of a contract with you, which we have explained in the description of the individual functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either discontinue or adapt the data processing or point out to you our compelling reasons worthy of protection on the basis of which we will continue the processing. 

However, you can of course object to the processing of your personal data for advertising or web analysis purposes at any time without giving reasons.

As described in the relevant sections, we sometimes use external service providers to process your data. These service providers have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.

The personal data processed by us is generally deleted or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which we as the controller are subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract. 

Further processing operations may be required for competitions and other promotions. In this case, you will be informed by us during the respective promotion. 

Thank you for reading this declaration to the end!