In principle, we collect and use personal data only as this is necessary for the provision of a functioning website and fulfillment of our contractual services.
For the processing of personal data required to fulfill a purchase contract or for pre-contractual measures, Art. 6 para. 1 lit. b DSGVO (- known as GDPR in english) as legal basis.
If we are legally obliged to collect and store personal data, we do so on the basis of Art. 6 (1) lit. c GDPR.
We collect personal data based on our legitimate interests, this is done on the basis of Art. 6 para. 1 lit. f GDPR. We have carefully weighed our interests in such cases and designed our website and webshop to collect data as sparingly as possible.
We have continued to take technical and organizational measures to protect your data from unauthorized access. The transfer of data between our website and your device is exclusively SSL-encrypted.
2. Visits to our website
When you visit our website, we first collect the following data:
- To use the website, a session cookie is stored in your browser. This will be deleted after two days. If you do not want this, please configure your browser so that cookies are rejected by lincreations.com. However, in case of a purchase request our shopping cart will not be fully operational anymore.
- In order to protect our website from attacks and if necessary to track and block them, your IP address will be stored in the server log for 30 days. If an IP address detects illegitimate login attempts, calls to non-existent sites or other hacking attempts, it will be stored longer in order to prevent access to our website and to protect it from further attacks. The storage duration is determined based on the occasion and in relation to the severity of the incident.
The legal basis for the collection of this data is our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. Our interest is to ensure and improve the functionality of the website.
3. Contact form and emails
If you contact us via the form, your data (name and e-mail address) will not be stored on our server. We only receive your message as an e-mail.
If the content of your request via contact form or by direct e-mail refers to a purchase or pre-contractual inquiries for a purchase, we are obliged to keep it for 6 or 10 years. General inquiries will be deleted after 6 months.
Please note that the sending of unencrypted e-mails is not secure against eavesdropping. Alternatively, we offer you to contact us by phone.
4. Order and purchase contract
On our website we offer an online shop where our fashion can be ordered and purchased. When placing your order, you enter your data in a form that is sent to us and saved. A transfer of data to third parties does not take place. We collect the following personal data for the execution of your order:
Name, address, e-mail address, IP address
If you want an adaptation of the garments, you have the opportunity to tell us modification requests and information on dimensions via the order form or subsequently by e-mail. The information is voluntary.
In the course of the order no customer account is created. Your billing information will be stored for as long as we are required by law to retain it (under commercial law for 6 years and for tax purposes 10 years). We will delete the IP address for the respective purchase after six months.
The legal basis for the processing of personal data for the purpose of fulfilling a purchase agreement is Art. 6 (1) lit. b GDPR. This also applies to processing operations required to carry out pre-contractual actions.
The storage of the IP address is based on our legitimate interests in Art. 6 para. 1 lit. f GDPR for your and our protection against misuse and other unauthorized use (example: order without your consent).
As we are legally obliged to collect and store personal data, Art. 6 para. 1 lit. c GDPR is the legal basis.
We use Paypal as a payment service provider to pay for your order to provide you with an efficient and secure payment option. We do not receive any account or credit card information from Paypal, but only either a confirmation or a notice of failure to pay.
Paypal processes personal data necessary for the execution of the payment transaction. For the payment transaction, Paypal’s terms and conditions and privacy notices apply to their website / app, for example at https://www.paypal.com/en/webapps/mpp/ua/privacy-full.
The legal basis for the execution of the payment transaction for the purchase agreement is Art. 6 para. 1 lit. b GDPR.
Our cookie is designed to provide you with a working shopping cart that “remembers” which products you want to buy, even if you interrupt your visit to our website. The cookie will be automatically deleted after 1 day.
Legal basis is Art. 6 para. Lit. b GDPR, the provision of our contractual services.
We do not currently provide an e-mail newsletter.
8. Place of data processing
Our data processing takes place exclusively within the EU. Our website is hosted by ip-projects on a server within the EU. The order data agreement is available and can be viewed.
9. Passing on the data to third parties
A transfer of the data to third parties does not take place in principle, unless it is necessary for the prosecution of our claims or there is a legal obligation to do so. We never share data for promotional purposes.
As far as service providers are used for the operation of this website, it may happen that they receive personal data. We carefully select our service providers for privacy and security in order to ensure that the data is processed.
You have the right to request information about the personal data that we hold about you. Such data are only available to us and can be assigned to you if you contact us by e-mail / form or have made an order in our shop. If you have only visited our website, personal, assignable data is not available.
You can send your request for information by e-mail to the e-mail address where you purchased goods from us or contacted us. Each request is subject to a verification process.
If you submit your inquiries from an e-mail address other than the one we have stored with us, we must make inquiries to assure you that you are the person you impersonate.
11. Deletion of data
You have the right to correct, delete or restrict the processing of your personal data, to the extent permitted by law.
We delete personal data as soon as data storage is no longer required, e.g. to fulfill our contractual obligations (such as warranty and warranty claims) or to comply with legal requirements. We are obliged to keep data on purchase contracts for up to 10 years. A deletion will only be considered after expiry of this period.
We only collect further personal data if you communicate with us by e-mail or contact form. Deletion of this data is only possible if it is not necessary to fulfill our contractual obligations or legal requirements.
If you request a deletion of the data collected on the basis of a balance of interests according to Art. 21 GDPR, we will examine your “special situation” (Art. 21 (1) GDPR).
12. Right of appeal
You have the right to lodge a complaint with the competent supervisory authority against the processing of your personal data if you see your rights violated in accordance with the GDPR.
13. Responsible within the meaning of the GDPR