Privacy Policy

Last updated: 3 April 2026

1) Data controller

The controller responsible for processing personal data on this website is:

Rebecca Zehden Mode & Handel e.K.
Alte Schönhauser Straße 41
10119 Berlin, Germany
Phone: +49 30 34620780
Email: info@rebecca-berlin.de

2) General information about data processing

We process personal data when you visit our website, place an order in our online shop, communicate with us or use our services. Personal data means any information relating to an identified or identifiable person.

3) Hosting / Shop platform (Shopify) and server log files

Our online shop is powered by Shopify. Shopify provides the technical infrastructure used to deliver the website.

When you visit our website, technical data is processed, such as your IP address, device and browser information, timestamps and referrer URL, to provide the website, maintain its stability and security, and resolve errors.

Legal basis: Article 6(1)(f) GDPR (our legitimate interest in operating a secure and functional website).

4) Orders, contract performance and customer service

When you place an order in our shop, we process the data necessary to fulfil the contract, including:

• Name, delivery address and billing address
• Email address and, where applicable, phone number
• Order and transaction data, including items, sizes/variants, returns/exchanges and payment status

Purposes: Contract performance, shipping, returns, withdrawals, customer support, fraud prevention and compliance with legal obligations.

Legal bases:

• Article 6(1)(b) GDPR (contract performance / steps prior to entering into a contract)
• Article 6(1)(c) GDPR (legal obligations)
• Article 6(1)(f) GDPR (security / fraud prevention)

5) Payment processing (Shopify Payments & PayPal)

We process payments using the payment methods offered at checkout, in particular Shopify Payments and PayPal. The data required to process the payment is transmitted to the respective payment provider. This may include the amount, order number, name/address and payment status, as well as additional technical payment data depending on the payment method. We generally receive payment confirmations and status information.

Legal basis: Article 6(1)(b) GDPR (performance of the purchase contract).

6) Shipping / Delivery (DHL)

For shipping, we share the data required for delivery with DHL: your name and address and, where necessary for delivery notifications, your email address or phone number.

Legal basis: Article 6(1)(b) GDPR (contract performance).

7) Contact by email

When you contact us by email, we process the data you provide, such as your name, email address and message, to handle your enquiry.

Legal basis: Article 6(1)(b) GDPR (contract performance / steps prior to entering into a contract) or Article 6(1)(f) GDPR (our legitimate interest in efficient communication).

8) Online cancellation form

When you use our online cancellation form, we process the data you provide, such as your name, email address, order number and details of the items covered by your withdrawal, to process your withdrawal, send the legally required acknowledgement of receipt and fulfil our statutory record-keeping obligations.

Legal bases:

• Article 6(1)(b) GDPR (steps prior to entering into a contract or handling the contractual relationship)
• Article 6(1)(c) GDPR (compliance with legal obligations)

9) Cookies, consent banner and consent management (Shopify Customer Privacy)

We use cookies and similar technologies that are necessary to operate our shop, such as cart and checkout functions, language settings and security features.

Strictly necessary cookies are used on the following legal bases:

• Article 6(1)(f) GDPR (our legitimate interest in technically reliable operation and security)
• Section 25(2) TDDDG (technically necessary storage / access)

We use analytics and marketing technologies, such as tracking or retargeting, only if you have expressly consented through our Shopify consent banner (Shopify Customer Privacy) and if such tools are actually enabled.

Your settings: You can withdraw or adjust your consent at any time via “Cookie settings” in the footer or through the consent banner.

10) Instagram / Social media

We link to our Instagram profile. Clicking the link takes you away from our website. The respective provider’s privacy policy applies from that point onwards.

Our Shopify shop is connected to Instagram (Meta), including to provide our product catalogue. This may involve transfers of data to Meta where necessary to provide these features. Tracking, such as pixel or conversion tracking, only takes place, if used, after you have given your consent through the consent banner.

11) Newsletter (Klaviyo)

When you subscribe to our newsletter, we process the data you provide, particularly your email address and, where applicable, your name, to regularly send you information about Rebecca Berlin, our collections, new arrivals, events and offers.

We use Klaviyo, a service provided by Klaviyo Inc., 125 Summer Street, Floor 6, Boston, MA 02110, USA, to send and manage our email communications.

When we use Klaviyo, the following data in particular may be processed:

• Email address
• Name, if provided
• Time of subscription
• Technical information, such as IP address and browser information
• Information about how you interact with our emails, such as opens and clicks

We may also use Klaviyo to provide automated email communications, such as welcome messages, abandoned cart reminders, information about viewed products or similar customer-related service and marketing communications, provided the relevant legal requirements are met.

Processing is based on your consent under Article 6(1)(a) GDPR or, where permitted by law, on our legitimate interests under Article 6(1)(f) GDPR.

You can withdraw your consent at any time with effect for the future by using the unsubscribe link in an email or by contacting us.

Klaviyo may process data on servers outside the European Union, particularly in the USA. Transfers are based on appropriate safeguards under Article 46 GDPR, in particular the Standard Contractual Clauses approved by the European Commission.

For more information, please see Klaviyo’s Privacy Policy:
https://www.klaviyo.com/privacy

12) International data transfers

When we use Shopify and certain service providers, data may be processed outside the European Economic Area (EEA). In these cases, we use appropriate transfer mechanisms, such as Standard Contractual Clauses, unless an adequacy decision applies.

13) Retention periods

We retain personal data only for as long as necessary for the respective purposes:

• Order and invoice data: in accordance with statutory retention requirements
• Communication data: for as long as necessary to handle the enquiry
• Newsletter data, if active: until you withdraw your consent

14) Your rights

Under the GDPR, you have the following rights in particular, subject to the conditions set out in that Regulation:

• Access (Article 15 GDPR)
• Rectification (Article 16 GDPR)
• Erasure (Article 17 GDPR)
• Restriction of processing (Article 18 GDPR)
• Data portability (Article 20 GDPR)
• Objection (Article 21 GDPR)
• Withdrawal of consent (Article 7(3) GDPR)

To exercise your rights, simply send a message to: info@rebecca-berlin.de

15) Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR). The competent authorities include:

Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61, 10555 Berlin
Email: mailbox@datenschutz-berlin.de

16) Changes to this Privacy Policy

We may update this Privacy Policy if legal requirements or our processing activities change. You can find the current version on this page.