Skip to content

Privacy policy

This is a translation for your convenience. The German version is legally binding.

Last updated: October 2026

1. Controller

The controller responsible for processing your personal data in this online shop is:

Maximilian Luthe
trading as "Les Cannasseurs"
Augustenburger Straße 53
24537 Neumünster
Germany
Phone: +49 176 89912441
Email: info@lescannasseurs.de

2. In brief

We process your data only as far as necessary to run the shop and to handle your orders. We do not use analytics or tracking tools, we do not run personalised advertising, and we do not use cookies for advertising purposes.

3. Visiting the website and hosting

When you visit our website, our technical service providers automatically process data transmitted by your browser: IP address, date and time of access, the page requested, the page visited before (referrer), browser type and operating system. This data is technically necessary to deliver the website and to keep it secure and stable. We store it only for as long as this requires.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the website.

We use the following service providers, which process data on our behalf:

  • Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA: hosting of the website
  • Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA: operation of the shop system (customer account and order processing)

Both services are configured to run on servers within the European Union. As both providers are based in the USA, it cannot be ruled out that data is also transferred there. Both providers are certified under the EU-U.S. Data Privacy Framework; the transfer is therefore covered by an adequacy decision of the European Commission (Art. 45 GDPR).

4. Cookies and local storage

We store in your browser only what is technically necessary: a cookie that keeps you logged in after you sign in, and an entry in local storage for your shopping bag. As long as you have not placed an order, your shopping bag is not stored on our servers. The language of the website follows your browser settings.

The legal basis for storing and reading this information is Section 25(2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act); for the subsequent processing it is Art. 6(1)(b) GDPR. Consent is not required for this. You can delete or block cookies in your browser; in that case, however, signing in and ordering may not work.

5. Guest orders and customer account

You can order as a guest without a customer account; in that case we process only the data needed for the respective order (see section 6). If you choose to create a customer account, we process your email address and your password as well as the data you provide when ordering. We store your orders in your customer account so that you can view them there.

The legal basis is Art. 6(1)(b) GDPR. You can request the deletion of your customer account at any time by email to info@lescannasseurs.de. We keep data on completed orders even after that, as far as we are legally obliged to do so (see section 6).

6. Orders

When you place an order, we process your name, your delivery and billing address, your email address, the items ordered and information on payment and on the status of the order. We need this data to perform the purchase contract, to inform you about your order and to handle queries, withdrawals and complaints.

The legal basis is Art. 6(1)(b) GDPR. Under German commercial and tax law we must keep order and invoice data for up to ten years (Section 147 of the German Fiscal Code, Section 257 of the German Commercial Code); the legal basis for this is Art. 6(1)(c) GDPR.

7. Emails about your order

We send confirmations regarding your customer account, your order and a withdrawal by email. For sending them we use a technical service provider that processes your email address and the content of the message on our behalf. The provider is based in the USA; data is transferred to the USA in the process. It is certified under the EU-U.S. Data Privacy Framework, so the transfer is covered by an adequacy decision of the European Commission (Art. 45 GDPR). In addition, we have agreed the European Commission's standard contractual clauses with the provider.

The legal basis is Art. 6(1)(b) GDPR.

8. Payment

Payments are processed via Stripe. The provider is Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland.

You enter your payment details (for example card number or bank details) directly with Stripe; we do not receive them. We transmit to Stripe the information required for the payment, in particular the amount, an order reference and your email address. Depending on the payment method you choose, Stripe passes data on to the respective payment provider or your bank. Stripe also processes data under its own responsibility in order to prevent fraud and to comply with legal obligations, and may set its own technically necessary cookies during checkout for this purpose. In doing so, data may be transferred to Stripe, Inc. in the USA; Stripe, Inc. is certified under the EU-U.S. Data Privacy Framework.

The legal basis is Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR (fraud prevention). Further information: https://stripe.com/privacy

9. Production and shipping

Garments are made after you order by a production partner based in Germany and shipped to you directly from there. For this we transmit the data required for production and delivery (in particular name, delivery address and items ordered) to this production partner and to the carrier it commissions.

We ship items from our own stock ourselves. For this we transmit your name and delivery address to the carrier:

DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany

The legal basis is Art. 6(1)(b) GDPR.

10. Withdrawal

If you withdraw from your contract, we process the information from your withdrawal statement (name, order number, email address and, where applicable, your message) in order to handle the withdrawal and to confirm receipt to you.

The legal basis is Art. 6(1)(b) and (c) GDPR.

11. Contact

If you contact us by email or phone, we process your details in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where the enquiry concerns a contract, otherwise Art. 6(1)(f) GDPR. We delete enquiries once they have been dealt with and no retention obligations apply.

12. Recipients of your data

Your data is received only by the service providers described in this policy, and only to the extent necessary for the respective task. Beyond that, we pass on data only where we are legally obliged to do so. We do not sell data.

13. Your rights

You have the right

  • to obtain information about your data stored by us (Art. 15 GDPR),
  • to have inaccurate data corrected (Art. 16 GDPR),
  • to have your data erased, unless retention obligations prevent this (Art. 17 GDPR),
  • to have processing restricted (Art. 18 GDPR),
  • to receive your data in a commonly used, machine-readable format (Art. 20 GDPR).

An email to info@lescannasseurs.de is sufficient.

Right to object: Where we process your data on the basis of Art. 6(1)(f) GDPR, you may object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR).

Right to lodge a complaint: You may lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein, Holstenstraße 98, 24103 Kiel, Germany.

14. Obligation to provide data

The details in the ordering process are required to conclude a contract with us. Without them we cannot carry out your order. Creating a customer account is optional. No automated decision-making, including profiling, takes place.