Privacy policy

As of September 2026

1. data protection at a glance

General information

The following information provides an overview of what happens to your personal data when you visit our website or use our online store.

Personal data is any data that can be used to identify you personally.

Some of your data is collected when you provide it to us, for example, when you place an order, create a customer account, fill out a form, post a comment, or sign up for our newsletter.

Other data is processed automatically or with your consent when you visit the website by our IT systems or the services we use. This includes, in particular, technical data such as your IP address, browser, operating system, and the time you accessed the page.

We process personal data, in particular, to ensure the secure and technically flawless operation of our website, to process orders and payments, to communicate with you, and—with your consent—to conduct statistical analyses of our website’s usage and for marketing purposes.

2. Data Controller

The entity responsible for data processing on this website is:

Robert Hannaby, Victoriya Galanova GbR – Vicky’s Nylons
Am Schlosshang 3
87700 Memmingen
Germany

Phone: +49 8331 8335995
Email: info@vickys-nylons.de

The controller is the natural person, legal entity, or partnership that, alone or jointly with others, determines the purposes and means of processing personal data.

3. Hosting

We host our website with:

ALL-INKL.COM – Neue Medien Münnich
Hauptstraße 68
02742 Friedersdorf
Germany

When you visit our website, the hosting provider processes, in particular, technical connection data and server log files. This may include, in particular, your IP address, browser type and version, operating system, referrer URL, and the time of the server request.

Data processing is carried out to ensure the secure, stable, and technically error-free operation of our website, based on Article 6(1)(f) of the GDPR.

To the extent that ALL-INKL.COM processes personal data on our behalf, this is done on the basis of a data processing agreement in accordance with Article 28 of the GDPR.

4. General Information on Data Processing

Legal Basis

To the extent that you have consented to the processing, it is carried out on the basis of Article 6(1)(a) of the GDPR.

If processing is necessary for the performance of a contract or for the implementation of precontractual measures, it is carried out on the basis of Article 6(1)(b) of the GDPR.

To the extent that processing is necessary to comply with a legal obligation, it is carried out on the basis of Article 6(1)(c) of the GDPR.

In other cases, processing may be based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR.

Storage duration

We store personal data only for as long as is necessary for the respective purpose of processing or as required by statutory retention obligations.

If the purpose of processing no longer applies or if a statutory retention period expires, the relevant data will be deleted in accordance with statutory provisions.

SSL or TLS encryption

For security reasons, this website uses SSL or TLS encryption. This ensures that any data you send to us is transmitted in an encrypted form.

5. Cookies, Similar Technologies, and CCM19

Our website uses cookies and similar technologies. Some of these are technically necessary for the website—and in particular features such as the shopping cart, customer account, and checkout process—to function properly.

Technologies that are technically necessary are used to the extent permitted under § 25(2) of the TDDDG.

To the extent that storing information on your device or accessing information already stored requires your consent, this will only take place after you have given your consent in accordance with § 25(1) of the TDDDG. To the extent that personal data is processed in this context, such processing is based on Article 6(1)(a) of the GDPR.

We use CCM19 to manage consent for cookies and other technologies that require consent.

CCM19 allows you to accept or decline specific services when you visit our website, and to change your selections or withdraw your consent at a later time.

To document your selections, the following information may be processed: the time the page was accessed, a randomly generated identifier, and your consent status.

The purpose of this processing is to obtain, manage, and document your consent and, in particular, to fulfill our legal obligations.

You can change your settings at any time using the cookie settings provided on our website.

6. Online Store and WooCommerce

We use WooCommerce to provide the technical infrastructure and manage our online store.

When processing an order, we collect, in particular, your name and contact information, billing and shipping addresses, email address, phone number (if applicable), products ordered, order and payment information, as well as information regarding your customer account, returns, and communication related to the order (if applicable).

Data processing is carried out for the purpose of fulfilling the purchase agreement and taking precontractual measures in accordance with Article 6(1)(b) of the GDPR, as well as—to the extent that statutory retention requirements apply—in accordance with Article 6(1)(c) of the GDPR.

Customer Account

If you create a customer account, we will process the data you provide to set up and manage this account in accordance with Article 6(1)(b) of the GDPR.

You can contact us at any time if you wish to have your customer account deleted. This does not affect any legal retention requirements for orders that have already been completed.

7. Inventory Management and Shipping

To process and fulfill your order, the necessary data will be processed in our inventory management and shipping systems.

In particular, we use JTL-Wawi and the JTL Connector to process orders between our online store and our inventory management system.

To ship your order, we will provide the necessary information to the applicable shipping provider. This includes, in particular, your name and shipping address, as well as additional contact information, if required for the selected shipping service.

The legal basis for this processing is Article 6(1)(b) of the GDPR.

8. Payment Processing

To process your payment, the necessary data will be transmitted to the payment service provider you have selected.

The available payment options will be displayed during the ordering process.

The legal basis for processing the data required for payment processing is Article 6(1)(b) of the GDPR.

PayPal

If you select a payment method offered through PayPal, the data required for payment processing will be transmitted to PayPal.

The provider in the European Union is:

PayPal (Europe) S.à r.l. et Cie, S.C.A.
22-24 Boulevard Royal
L-2449 Luxembourg

PayPal processes personal data in accordance with its own privacy policy. In addition to payment processing, this processing may be used, in particular, for fraud prevention and risk assessment.

9. Contact Information and Forms

If you contact us by email, phone, or through a form provided on our website, we will process the data you submit in order to handle your inquiry.

We use Forminator for the forms on our website.

If your inquiry relates to a contract or an order, the processing is based on Article 6(1)(b) of the GDPR.

In other cases, it is based on our legitimate interest in properly processing your inquiry in accordance with Article 6(1)(f) of the GDPR or, if consent is obtained, on the basis of Article 6(1)(a) of the GDPR.

10. Comments and Blog Subscriptions

Visitors can leave comments on our blog.

In particular, the comment, the name provided, the email address, the time the comment was posted, and technical information such as the IP address may be processed.

The purpose of this data processing is, in particular, to publish and manage comments and to protect our website from misuse and spam.

To the extent that processing is necessary to provide and secure the comment function, it is carried out on the basis of our legitimate interest pursuant to Article 6(1)(f) of the GDPR. To the extent that consent is obtained, processing is carried out on the basis of Article 6(1)(a) of the GDPR.

You can also voluntarily subscribe to receive email notifications about subsequent comments or new blog posts. To do this, we process your email address based on your consent in accordance with Article 6(1)(a) of the GDPR.

Consent may be revoked at any time with future effect, or the respective subscription may be canceled.

We use Brevo to send and manage our newsletter.

When you subscribe to our newsletter, we process, in particular, your email address and, if applicable, any other information you voluntarily provide.

Data processing is based on your consent in accordance with Article 6(1)(a) of the GDPR.

To the extent that newsletters are analyzed statistically—for example, to determine whether a message was opened or a link contained therein was clicked—such processing is carried out only in accordance with the applicable data protection requirements.

You may revoke your consent at any time with future effect by clicking the unsubscribe link in the newsletter or by sending us a message.

After you unsubscribe, your email address may be added to a block list to the extent necessary to reliably prevent you from receiving further newsletters.

Brevo processes data on our behalf as a service provider.

12. Google Site Kit and Google Analytics

We use Google Site Kit to manage and connect various Google services. Specifically, Site Kit connects Google Search Console, Google Analytics, and PageSpeed Insights to our website.

Google Analytics

We use Google Analytics to analyze website usage statistics.

The provider for users in the European Economic Area is:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Google Analytics may process, in particular, information about page views, use of our website, browser and device information, and technical identifiers.

Google Analytics is used on our website solely on the basis of your consent in accordance with Article 6(1)(a) of the GDPR. To the extent that information is stored on or retrieved from your device in this context, this is done on the basis of your consent in accordance with Section 25(1) of the TDDDG.

You may revoke your consent at any time through our cookie settings, effective for the future.

The transfer of personal data to Google companies in the United States cannot be ruled out. To the extent that the transfer is made to a recipient certified under the EU-U.S. Data Privacy Framework, an adequacy decision by the European Commission is in place for this purpose. In addition, other appropriate safeguards may be implemented for transfers to third countries, as necessary.

We use Google Search Console and PageSpeed Insights primarily for the technical and administrative analysis and optimization of our website.

13. Pinterest for WooCommerce

The Pinterest for WooCommerce extension is installed on our website. It can be used, in particular, to synchronize product information from our online store with Pinterest and to link our Pinterest presence to our store.

The provider for users in the European Economic Area is Pinterest Europe Ltd., Dublin, Ireland.

Depending on how the extension is configured, Pinterest features such as the Pinterest Tag or conversion tracking features can be used.

To the extent that cookies or similar technologies are used on your device or information is read from your device, and such use or access requires your consent, these functions will not be activated until you have provided your consent through our consent management system.

The legal basis in this case is Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG.

Consent that has been given may be revoked at any time through our cookie settings, effective for the future.

14. Jetpack Security Features

We use Jetpack from Automattic specifically to protect our website from abusive or unauthorized login attempts.

In particular, the following data may be processed: the IP address, username, or email address associated with a login attempt; the time of access; and browser and technical connection information.

Data processing is based on our legitimate interest in ensuring the security of our website and protecting it from unauthorized access, in accordance with Article 6(1)(f) of the GDPR.

15. Your Privacy Rights

In accordance with the applicable legal requirements, you have the right, in particular, to:

Information regarding the personal data we process in accordance with Article 15 of the GDPR,
Correction of inaccurate data or completion of incomplete data in accordance with Article 16 of the GDPR,
Deletion of your personal data pursuant to Article 17 of the GDPR,
Restriction of processing pursuant to Article 18 of the GDPR,
Data portability pursuant to Article 20 of the GDPR,
Objection to certain processing activities pursuant to Article 21 of the GDPR,
Withdrawal of previously granted consent, effective for the future.

The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of that consent prior to its withdrawal.

Right to File a Complaint with a Regulatory Authority

You also have the right to file a complaint with a data protection supervisory authority regarding the processing of your personal data.

16. Objection to Direct Marketing

If personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing.

Once you have objected, your personal data will no longer be used for these purposes.