• Your shopping cart is empty!

Privacy Policy

(Your Fashion Dress, as of January 2023).

In the following privacy policy, we inform you about how Your Fashion Dress Ltd. ("Your Fashion Dress" and/or "Controller") processes personal data in accordance with the General Data Protection Regulation ("GDPR") and the Federal Data Protection Act ("BDSG"). Our privacy policy applies to the following websites, applications, and other services (hereinafter collectively referred to as "Services"): https://www.yourfashiondress.com

Please read our privacy policy carefully. If you have any questions or comments about our privacy policy, feel free to contact us at dataprotection@yourfashiondress.com.

Contents

You can easily navigate to the section that interests you by clicking on the chapter headings below.

1. Name and Contact Information of the Controller

This privacy policy applies to data processing by

Your Fashion Dress Ltd.,
Email: support@yourfashiondress.com

legally represented by: Your Fashion Dress Ltd., represented by the board of directors

2. Contact Information of the Data Protection Officer

You can reach the Data Protection Officer of the Controller at

Your Fashion Dress Ltd.,
– Data Protection Office

Email: dataprotection@yourfashiondress.com

3. Purposes of Data Processing, Legal Bases, and Legitimate Interests Pursued by the Controller or a Third Party, as well as Categories of Recipients

3.1. Accessing Our Websites/Applications

3.1.1. Log Files

Every time you access our services, information from your device’s browser is sent to our service’s server and temporarily stored in log files. These log files contain the following data: date and time of access, the name of the accessed page, the IP address of the requesting device, device type, cfRayId, referrer URL (the URL you came from), the amount of data transferred, load time, product and version information of the browser used, and the name of your internet service provider.
We process the log files to ensure our services are provided reliably and securely.

If we process personal data (e.g., the IP address) in this context, the legal basis for this is Art. 6(1)(f) of the GDPR. Our legitimate interest arises from the

  • – Ensuring a smooth connection setup,
  • – Ensuring a comfortable use of our services,
  • – Evaluation of system security and stability.

It is not possible to directly infer your identity from this information, and we do not attempt to do so.
The information is stored and automatically deleted once the aforementioned purposes are achieved.
The retention periods are based on the necessity criterion.

If we use cookies or similar technologies in connection with the above-described processing of log files, it is absolutely necessary to provide the services you have requested. We are allowed to use these cookies based on Section 25(2)(2) of the German Telecommunications-Telemedia Data Protection Act (TTDSG) without your consent.

3.1.2. Cookies and Tracking

General Information

In our services, we and our partners use cookies or similar technologies (collectively referred to as "cookies").
Cookies are small text files that can be stored on your device (laptop, tablet, smartphone, etc.) when you visit and/or use our services. Cookies do not cause any damage to your device and do not contain viruses, Trojans, or other malware. The cookie stores information that is related to the specific device you are using.
This does not mean that we immediately obtain knowledge of your identity or can infer personal information.

Some of the cookies we use are deleted after the end of the browser session
(so-called session cookies). These cookies help us, for example, to enhance the security of our services by preventing bot attacks.

Other cookies remain on your device and allow us to recognize your device on your next visit (so-called persistent or cross-session cookies).
These cookies serve to provide you with personalized ads and content in our services.

Consent to the Use of Cookies

Most cookies we use are based on your consent. We ask for this consent through our Consent Management Platform ("CMP" and/or "Preference Center").
This consent is described as "storing and/or accessing information on your device." If you give your consent, it forms the legal basis for the use of cookies (§ 25(1) TTDSG in conjunction with Art. 6(1)(a) GDPR). We store your decision regarding whether or not you want to provide consent in order to implement it accordingly. An exception to this consent requirement applies only to cookies that are strictly necessary to provide a service you have explicitly requested.
We may use these cookies without your consent based on § 25(2)(2) TTDSG.

Consent to Data Processing Based on Cookies

In our CMP, we also ask for your consent to the data processing based on these cookies, if necessary.
This consent is requested not only for us but also for the processing of such data by our partners.

In our CMP, you will find detailed information on the purposes for which we and our partners wish to process your data based on your consent,
as well as a list of our partners with additional information on the data processing they intend to carry out based on your consent.

The decision you make in the CMP regarding the extent of your consent to cookie-based data processing
is stored under a so-called Consent ID (e.g., d13b5c50-6x7a-4d7b-9962-3846c8abba), which you can also find at the end of our privacy information,
to ensure its implementation. This pseudonymous Consent ID is generated individually for you as a website user to provide legal evidence
of your settings made in our CMP and the consents given/withdrawn therein, including the timestamp (date, time).
You can access the Consent ID at any time in our CMP under the "Settings" section.

Notice of Right to Withdraw Consent

You can withdraw your consent(s) in whole or in part at any time with effect for the future by changing your settings in our CMP here and clicking "Confirm Selection" or by clicking "Reject All." You can always find our CMP at the bottom of the page under the link "Preference Center (Consent Management)."
Your withdrawal does not affect the legality of the data processing carried out based on the consent(s) until the withdrawal.

3.2. Personalized User Experience

We and our partners want to provide you with a personalized user experience on our services.
Therefore, we ask for your consent in our CMP for the processing purposes described in sections 3.2.1 to 3.2.4 below.
The legal basis for the data processing described in these sections is Art. 6(1)(a) GDPR.

3.2.1. Identification on Third-Party Sites

For certain services, we need to be able to identify users on our own or third-party sites, e.g., to show you ads for our products and services on third-party sites. For this purpose, we or our partners assign a pseudonymous identifier (ID).
Additionally, we and our partners may identify you on third-party sites using your pseudonymized email address or phone number.

You can find out which information we or the respective partners wish to use based on your consent in the partner list.

The legal basis for data processing is Art. 6(1)(a) GDPR.

3.2.2. Personalized Ads and Content

To provide you with the full Your Fashion Dress experience, we and our partners use certain information with your consent (e.g., browser information, click path, date and time of visit, geographical location, IP address, usage data, visited websites) to present you with personalized ads and content on our services
and on third-party sites that may be based on your preferences.

You can find out which information we or the respective partners wish to use based on your consent in the partner list.

The legal basis for data processing is Art. 6(1)(a) GDPR.

3.2.3. Market Research

We and our partners use certain information with your consent about interactions with content and ads on our services and on third-party sites to better understand how they resonate with our users. For this purpose, we combine data sets (such as user profiles, statistics, market research, and analysis data) that provide insights into how you and other users interact with content and ads. Based on this information, we can identify common characteristics,
e.g., to determine which content is relevant to which target groups.

You can find out which information we or the respective partners wish to use based on your consent in the partner list.

The legal basis for data processing is Art. 6(1)(a) GDPR.

3.2.4. Product Development

We and our partners use information about your activities on our services and third-party sites (e.g., your interaction with ads or content) with your consent, as this helps us improve our products and services and develop new products and services based on user interactions, target audience types, etc. This purpose does not include the development or improvement of user profiles and identifiers.
You can find out which information we or the respective partners wish to use based on your consent in the partner list.

The legal basis for data processing is Art. 6(1)(a) GDPR.

3.2.5. Performance

We need certain information to provide our services securely and reliably. This includes monitoring and preventing unusual and potentially fraudulent activities (e.g., ad clicks by bots) and ensuring that systems and processes function correctly and securely. The information can also be used to troubleshoot issues you or we encounter in delivering content and ads or that you experience in your interaction with them.
Additionally, we need certain information to provide our services to you in the form you desire.

You can find out which information we or the respective partners use for these purposes in the partner list.

The legal basis for data processing is Art. 6(1)(f) GDPR. We have a legitimate interest in offering our services securely and reliably, as well as providing services explicitly requested by you.

3.3. Contact

You can contact us in several ways: via email, phone, or mail. If you contact us, we use the personal data you voluntarily provide solely for the purpose of contacting you and handling your request.

The legal basis for this data processing is Art. 6(1)(a), Art. 6(1)(b), Art. 6(1)(c) GDPR, and Art. 6(1)(f) GDPR. We have a legitimate interest in responding to general inquiries from our users that are not directly related to a contractual relationship.

3.4. Data Processing for Application Purposes

3.4.1. Registration/Application

If you register on our career website, we process the data required for registration and application. This includes:

  • – First name, last name
  • – Date of birth
  • – Email address
  • – Address
  • – Phone number
  • – Links to personal profiles on other social networks/platforms
  • – Information provided in the application, such as: school diploma, education details (e.g., studies, doctorate), work references, previous career information, details on other qualifications (languages, computer skills, volunteer work, portfolio, work samples)
  • – Application photo, if applicable
  • – Information about salary expectations
  • – Information about the earliest possible start date/notice period
  • – Other information contained in documents you provide as part of your application.

The legal basis for this data processing is Art. 6(1)(a) and (b) GDPR, meaning you voluntarily provide us with the data based on your consent and your application request to carry out pre-contractual measures. Another legal basis is Art. 6(1)(f) GDPR, where our legitimate interest lies in reviewing the information regarding the hiring decision. For Germany, § 26 BDSG additionally applies as a legal basis.

If, during the application process, you voluntarily provide special categories of personal data as defined in Art. 9(1) GDPR, their processing is additionally based on Art. 9(2)(b) GDPR (e.g., health data, such as disability status or ethnic origin).

Your Fashion Dress operates its career platform using software for managing and processing application data. The data is processed solely and exclusively on behalf of Your Fashion Dress.

3.4.2. Appointment Scheduling

During the application process, we use Google's calendar services ("Google Calendar") for appointment coordination. Google is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google Ireland"). To schedule an interview, we provide you with a link that takes you to our calendar overview. After choosing your appointment, confirming it, and entering the necessary contact details (name and email address), you will receive a confirmation email. We use this data for planning, conducting, and, if necessary, following up on the interview, as well as for the duration of the application process.

The legal basis for this data processing is Art. 6(1)(a) and (b) GDPR.

Google Ireland processes the data solely and exclusively on behalf of Your Fashion Dress.

3.4.3. Professional Social Platforms

We operate social media pages on professional social platforms LinkedIn, operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”), and XING, operated by New Work SE, and process the data of users active there to communicate with them, offer information about us, or highlight career opportunities.

If you contact us through our social media pages, we process the personal data from your user profile and any data you voluntarily provide to handle your request, particularly to respond to your inquiry. We can then respond to your inquiry via our respective social media pages.

The legal basis for this processing is often Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR based on legitimate interests in public relations and communication. We also have a legitimate interest in actively seeking suitable candidates for advertised vacancies.

We have no influence on the processing of your personal data by the providers of the professional social platforms. The platform operators control the data processing when using their respective services. This includes storing and using cookies on your device and analyzing your behavior on social networks.

For more information on data processing by LinkedIn, click here, and for XING, click here.

3.4.4. Further Data Processing

In the case of a positive decision, we incorporate your data into the regular personnel management process, where it will be maintained and stored according to legal requirements.

If you applied for a specific advertised position and were not successful, we will delete your data according to legal requirements (usually six months after sending the rejection).

For an unsolicited application, your data will be stored for a maximum of six months. If we do not make a positive decision within this period and you do not take any further actions, your data will be automatically deleted. If you receive a rejection from us before the end of these six months, we will delete your data according to legal requirements (usually six months after sending the rejection).

3.4.5. Job Offers via Email

Newsletter

As part of our services, we offer you the option to be informed about current job offers via email. To ensure that no errors occur when entering the email address, we use the double opt-in procedure (DOI procedure): After entering your email address in the registration field and giving your consent to receive current job information, we will send you a confirmation link to the provided email address. Only when you click this confirmation link will your email address be added to our distribution list for sending our newsletters. The legal basis for this processing is Art. 6(1)(a) GDPR.

For sending the newsletter, we use the software solution provided by Rocket Science Group, LLC d/b/a Mailchimp, 675 Ponce de Leon Ave NE Suite 5000, Atlanta, GA 30308, USA (“Mailchimp”). As a data processor, Mailchimp processes your data solely on our behalf and not for its own purposes.

Note on Right of Withdrawal
You can revoke your consent at any time with future effect by notifying us at recruiting@yourfashiondress.com or using the unsubscribe option at the end of each newsletter.

RSS Feed

We offer you the option to be informed about current job offers via RSS feed. An RSS feed is a modern form of the classic newsletter, which you can read either with your browser or with a special program (RSS reader). You can manage and deactivate your subscribed RSS feeds at any time in your browser/reader settings.

The legal basis for this data processing is Art. 6(1)(a) GDPR.

4. No Obligation to Provide Data

Generally, you are not obliged to provide us with your personal data. However, using certain areas of our services may require the provision of personal data, particularly when purchasing goods. If you do not wish to provide the necessary data, you will not be able to use the respective areas of the services.

5. Recipients of Personal Data

5.1. Disclosure of Data to Third Parties

We only disclose your data to third parties outside of Your Fashion Dress if it is legally permissible (e.g., because we or the third party have a legitimate interest in the disclosure, we are legally obliged to disclose it, or based on your consent).

In addition to the third parties named in our data protection information and in our CMP, we may disclose personal data to a third party particularly:

  • – if we are legally obliged to do so based on enforceable administrative or judicial orders (to authorities);
  • – in connection with legal disputes (to courts or our lawyers) or audits (to auditors);
  • – when working with tax consultants;
  • – in connection with potential criminal acts to the relevant investigative authorities;
  • – in the event of a business sale (to the buyer).

If we disclose your data to third parties based on your consent, this explanation can also be given when obtaining the consent.

5.2. Disclosure to Processors

In some areas, we use processors to handle your data. A processor is a natural or legal person who processes personal data on our behalf and according to our instructions, while we remain responsible for the data processing. Processors do not use the data for their own purposes but only process it exclusively for the controller.

To the extent that data processors are not already named in this data protection information, they include in particular the following categories of data processors:

  • – IT service providers (sending emails and newsletters)

6. Storage Period and Data Deletion

Your Fashion Dress only stores personal data for as long as necessary for the purposes stated in this data protection information, particularly to fulfill our contractual and legal obligations. If necessary, we will also store your personal data for additional purposes if and as long as further storage is legally permitted.

7. Recipients outside the EEA

We also transfer personal data to third parties or processors located in countries outside the European Economic Area (“EEA”). In this case, we ensure before the transfer that there is either an adequate level of data protection at the recipient or that you have given your explicit consent.

An adequate level of data protection exists, for example, when the European Commission has adopted a so-called adequacy decision for the respective country (Art. 45 GDPR). For the USA, the European Commission has adopted a decision that there is an adequate level of data protection if the data recipient participates in the EU-U.S. Data Privacy Framework (DPF) and holds a current certification for it. Therefore, if the recipients of your personal data are located in the USA and participate in the DPF, we rely on this adequacy decision (Art. 45 GDPR).

Alternatively, we establish an adequate level of data protection by agreeing with recipients on the so-called EU Standard Contractual Clauses of the European Commission (Art. 46 GDPR). In this case, we conduct Transfer Impact Assessments and agree with the recipient, or implement additional protective measures if necessary. Specifically, we agree with recipients who are (independent) controllers on Module 1 of the EU Standard Contractual Clauses and with recipients who act as our processors on Module 2 of the EU Standard Contractual Clauses.

These are third parties or processors in the following countries: USA (we rely on the DPF in this regard). You can obtain a copy of the specifically agreed arrangements to ensure an adequate level of data protection from us. Please contact us at datenschutzbeauftragter@yourfashiondress.com or using the contact information provided in Section 2..

8. Your Rights

8.1. Overview

In addition to the right to revoke your consent to us at any time, you have the following additional rights if the respective legal requirements are met:

  • – the right to information about your personal data stored by us (Art. 15 GDPR), in particular, you can request information about the purposes of processing, the categories of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the origin of your data, if it was not collected directly from you;
  • – the right to correct inaccurate or incomplete data (Art. 16 GDPR),
  • – the right to delete your data stored by us (Art. 17 GDPR), provided that the relevant conditions are met and in particular no legal or contractual retention periods or other legal obligations or rights to further storage on our part need to be observed,
  • – the right to restrict the processing of your data (Art. 18 GDPR), if the accuracy of the data is disputed by you (for a period that allows us to verify the accuracy of the personal data); the processing is unlawful, but you oppose its erasure; we no longer need the data, but you need it to assert, exercise, or defend legal claims or you have objected to processing pursuant to Art. 21 GDPR (as long as it is not yet clear whether our legitimate grounds override yours),
  • – the right to data portability under Art. 20 GDPR, i.e. the right, in the case of processing based on your consent (Art. 6(1)(a) GDPR) or for the performance of a contract (Art. 6(1)(b) GDPR), carried out using automated means, to receive the data concerning you stored by us in a commonly used, machine-readable format or to request the transmission to another controller (the latter to the extent technically feasible),

You can assert the aforementioned rights by contacting us at dataprotection@yourfashiondress.com.

In addition, you have the right to complain to a supervisory authority. For this purpose, you can contact in particular the supervisory authority of your usual place of residence or work or our company headquarters.

8.2. Right to Object

You have the right to object at any time to the processing of your personal data for advertising purposes ("Advertising Objection").

Furthermore, you have the right to object to the processing of data based on Art. 6(1)(f) GDPR for reasons arising from your particular situation. We will then cease processing your data unless we can - according to legal requirements - demonstrate compelling legitimate grounds for further processing that outweigh your rights, or the processing serves to assert, exercise or defend legal claims.

You can generally assert your right to object by contacting dataprotection@yourfashiondress.com.

8.3. Right to Withdraw Consent

If we process data based on consent given by you, you have the right to withdraw the consent given at any time. Your withdrawal does not affect the lawfulness of the data processing carried out based on the consent(s) until the withdrawal.

You can generally assert your right to object by contacting dataprotection@yourfashiondress.com.

You can revoke your consent to the use of cookies or the processing of your personal data based on it at any time, either in whole or in part, by changing your settings in our CMP here and clicking on "Confirm