SHOP NOW

Privacy Policy

Effective Date: October 3, 2026

1. Controller Introduction

In compliance with Article 13 (1)(a) of the General Data Protection Regulation (GDPR, known locally as DSGVO – Datenschutz-Grundverordnung), we clearly present the full information of the data controller of your personal data in a prominent form as required by applicable regulations:

  • ‌Controller‌: LANIUS GmbH
  • ‌Registered Address‌: Rolandstraße 63, 50677 Köln, Germany
  • ‌Contact Email‌: mist@laniusshop.com
  • ‌Contact Phone‌: +49 221 42332826
    All references to “we”, “us”, and “our” in this Privacy Policy refer to LANIUS GmbH. We operate our minimalist clothing e-commerce platform at www.laniusshop.com, where we design, curate and sell quiet basics that fit your real everyday life, cutting out all unnecessary details, loud branding and fleeting trends, focusing only on pieces that fit well, feel soft and hold their shape through repeated wears and washes, and ensure every piece mixes easily with what you already own at home to make building an outfit take no extra effort. This Privacy Policy governs how we collect, use, store, process, disclose and protect your personal data when you access, browse, interact and place orders on our website.

2. Scope of Application

This Privacy Policy applies to all personal data processing activities conducted by us via our website, including interactions from both registered users and non-registered visitors. It covers all scenarios where we collect personal information through legal, fair and transparent means when you browse our product catalogues, create an account, place an order, sign up for our newsletter, participate in our customer surveys, contact our support team, or use any other features and services provided on www.laniusshop.com. This policy does not apply to the personal data processing practices of third-party service providers, partner platforms or external linked websites that are not under our direct control. For the data processing rules of those third parties, please refer to their respective official privacy policies.

3. Categories of Personal Data We Collect, Purposes, Methods and Legal Bases

We strictly follow the principles of data minimisation, purpose limitation and proportionality set out in the DSGVO when processing your personal data. All data collection activities are restricted to the scope necessary to deliver our services and fulfill our contractual obligations to you, with clear legal bases for every processing activity:

3.1 Information You Actively Provide to Us

We collect the following categories of personal data directly from you when you submit information voluntarily on our website:

  1. ‌Account Registration Data‌: When you create a user account on our shop, we collect your mobile phone number as the primary identifier for account verification, along with optional profile information you choose to provide including your preferred nickname, profile picture and basic personal preferences for our minimalist clothing collections. The processing of this data is based on the performance of our user agreement with you, and this data helps you access your order history, save your favourite items to wishlist and enjoy a personalised shopping experience across multiple visits.
  2. ‌Order and Transaction Data‌: When you place a purchase order on our platform, we collect your full name, contact phone number, delivery address, payment details, specific selected products, purchase quantity and order notes you submit. This processing is necessary for the performance of the sales contract between you and us to complete the delivery of your ordered clothing items, process payment settlement and fulfill all contractual warranty obligations. For cross-border order shipments that require customs declaration, we will additionally collect your identity document information as required by applicable law, exclusively for the purpose of customs clearance and order fulfillment.
  3. ‌Customer Support Communication Data‌: When you send us inquiries, feedback, after-sales requests or return applications via our contact email, website contact form or phone, we collect the content of your communication, the items you purchased, the order number, the contact information you provide to us and any images or videos you attach to support your request. This processing is based on our legitimate interest to provide you with responsive, high-quality customer service and resolve your issues efficiently.
  4. ‌Newsletter and Marketing Preference Data‌: If you voluntarily opt in to receive our new product launch notifications, exclusive restock alerts and seasonal styling tips for our quiet basic collections, we collect your email address and your stated preferences for product categories you are most interested in. This processing is based on your explicit, freely given consent, which you can withdraw at any time by clicking the unsubscribe link included at the bottom of every marketing email we send.
  5. ‌Survey and Event Participation Data‌: When you choose to participate in our customer satisfaction surveys, exclusive member events or limited pre-order activities, we may collect information including your name, contact details, feedback on our products, your sizing preferences, any accessibility requirements you have and your attendance intention for offline events. This processing is based on our legitimate interest to optimise our product design, adjust our inventory planning and improve our overall shopping experience to better match the needs of customers who love our quiet, uncluttered wardrobe philosophy.

3.2 Information We Collect Automatically When You Visit Our Website

When you browse www.laniusshop.com, we automatically collect the following categories of data via secure encrypted server logs and authorised cookie technologies, in line with DSGVO requirements:

  1. ‌Device Information‌: We collect information about the hardware device you use to access our website, including your device model, operating system version, unique device identifier, browser type and language setting. This data processing is based on our legitimate interest to ensure our website displays correctly across different devices and maintain the stability of our technical infrastructure.
  2. ‌Log Data‌: We automatically record your IP address, timestamp of your visit, pages you viewed on our site, links you clicked, search keywords you entered on our shop, time spent on each product page, access error logs and other operation activity data. This processing is based on our legitimate interest to analyse website traffic, troubleshoot technical faults, prevent unauthorised hacking attempts and protect the security of our e-commerce platform and all user accounts.
  3. ‌Location Information‌: With your explicit consent, we may collect your rough geographic location information to show you the most relevant shipping options, localised sizing guidance and region-specific delivery time estimates. For the automatic location-filling feature at checkout, we will collect precise location information only if you explicitly grant the corresponding permission on your browser, and this data will only be used to pre-populate your delivery address to reduce your manual input effort.
  4. ‌Cookie and Similar Tracking Data‌: We use strictly necessary functional cookies to keep your shopping cart active during your browsing session, remember your logged-in status and save your preferred display settings. We will only use non-necessary analytical and marketing cookies after we obtain your explicit, opt-in consent when you first access our website. You can adjust your cookie preferences at any time via the cookie management setting page on our website.

4. How We Use Your Personal Data

All your personal data is exclusively used for the following specified, clearly stated purposes, and we will never process your data for any incompatible secondary purpose without notifying you in advance and obtaining additional required consent where applicable:

  • To operate, maintain and optimise the core functions of our e-commerce website, making sure you can browse our curated minimalist clothing collections, add items to your shopping cart, complete checkout smoothly and access your personal account page without technical obstacles.
  • To fully fulfill our sales contract obligations, including processing your payment, arranging the production or dispatch of your ordered quiet basic clothing pieces, updating you with real-time order status and logistics tracking information, arranging product delivery to the address you provided, and handling all after-sales services including returns, exchanges and warranty claims in compliance with German consumer protection regulations.
  • To provide you with a mild, non-intrusive personalised shopping experience: for example, we may recommend similar quiet basics that match the items you have viewed or purchased before, suggest styling combinations that make full use of the pieces you already have in your wardrobe, and filter out product categories that do not align with your stated preferences.
  • To send you necessary service notifications, including order confirmation emails, delivery delay alerts, security reminders for your user account and system maintenance announcements that affect the normal operation of our shop. These service messages will not carry any irrelevant marketing content, and you cannot opt out of these notifications as they are essential to fulfill our contractual obligations to you.
  • To comply with all applicable German and European legal requirements, including fulfilling our tax reporting obligations, responding to legally valid official judicial or administrative requests from competent German authorities, and completing the required data records for e-commerce regulatory compliance.
  • To conduct data analysis for product and service optimisation: we analyse aggregated, anonymised shopping behaviour data to understand which of our quiet basic styles are most popular, adjust our inventory levels to reduce unnecessary overproduction, improve our size reference guides to reduce the rate of ill-fitting returns, and optimise our website loading speed and user interface to make your shopping journey more smooth and uncluttered, consistent with the minimalist philosophy of our brand.
  • To enforce our website terms and conditions, prevent fraud, unauthorised transaction activities, account theft and other security risks, and protect the legitimate rights and interests of our users, our business and our commercial partners.

5. Information Sharing and Disclosure

We will never sell, rent or trade your personal data to unrelated third parties for marketing purposes without your explicit separate consent. We only share your limited necessary personal data with the following categories of trusted third parties, strictly restricted to the minimum scope required to achieve the specified purposes:

  1. ‌Authorised Service Providers‌: We may share necessary information with strictly vetted third-party partners who provide services on our behalf, including payment processing providers, logistics and courier companies we cooperate with to deliver your orders, cloud hosting service providers that host our website infrastructure, IT technical support teams that help us maintain our system security, and accounting service providers that help us fulfill our legal financial and tax obligations. All of these third parties are bound by strict data processing agreements that require them to comply fully with DSGVO data protection rules, impose strict confidentiality obligations, and prohibit them from processing your personal data for any purposes outside the explicit scope we authorise.
  2. ‌Legal Required Disclosures‌: We may disclose your personal data if we are required to do so by applicable law, binding official judicial order or mandatory request from a competent German regulatory authority. In the event that all or part of the business of LANIUS GmbH is transferred in a merger, acquisition or asset sale, the new controller of the business will be required to abide by the terms of this Privacy Policy, and will notify you in advance if any material change to your data rights occurs.

6. Data Storage and Security Protection Measures

We attach great importance to the security of your personal data, and have implemented multi-layered technical and organisational protection measures in full compliance with European data protection regulations to prevent unauthorised access, accidental loss, destruction or leakage of your personal information:

  • All personal data transmitted between your browser and our website is protected by end-to-end TLS 1.3 encrypted transmission, which prevents third parties from intercepting your information during the transmission process.
  • All personal data we store on our encrypted servers is encrypted at rest using industry-standard AES-256 encryption technology. We implement strict role-based access control policies, meaning only a very limited number of specifically authorised employees who need to process your data to fulfill their work duties can access your personal information, and all access activities are logged and audited regularly.
  • We conduct regular data security audits, system vulnerability scanning and abnormal activity detection. We also implement complete periodic data backup and disaster recovery mechanisms to ensure that your data can be recovered quickly in case of any unexpected system failure. We also carry out regular data protection training for all our staff to make sure every member of our team understands their legal obligations to protect user personal data.
  • We will not retain your personal data for longer than necessary for the stated purposes for which it was collected. After the completion of your order and the expiration of all applicable statutory warranty periods and commercial legal retention periods required by German commercial and tax law, we will securely erase or anonymise your personal data in compliance with applicable regulations. When you choose to delete your user account, we will delete all your personal data stored in our active systems within 15 working days, except for the data we are legally obliged to retain for extended periods to fulfill statutory archiving obligations.

7. Your Rights Under DSGVO

As a data subject under the General Data Protection Regulation, you enjoy the following full set of legally enforceable rights in relation to your personal data processing activities, which we fully respect and guarantee to fulfill free of charge within one month after receiving your verification request:

  • ‌Right of Access‌: You have the right to request a copy of all personal data we hold about you, as well as clear information about the specific purposes of processing, categories of data involved, categories of recipients we have shared your data with, the expected retention period and the source of any data we did not collect directly from you.
  • ‌Right to Rectification‌: You have the right to request us to correct any inaccurate or incomplete personal data we hold about you, for example if you update your delivery address, change your contact phone number or find that your profile information is incorrect. You can also directly modify most of your account information in the settings page of your user account on our website.
  • ‌Right to Erasure (“Right to be Forgotten”)‌: You have the right to request us to delete your personal data under specific circumstances, for example when the personal data is no longer necessary for the original purposes we collected it for, when you withdraw your consent to the processing and there is no other legal basis for us to continue processing your data, or when you object to the processing of your data for legitimate interest related purposes and there are no overriding legitimate grounds for us to continue the processing. This right does not apply when we are required by law to retain certain data to fulfill our statutory legal obligations.
  • ‌Right to Restriction of Processing‌: You have the right to require us to restrict the processing of your personal data in situations where you contest the accuracy of the data, where the processing is unlawful but you do not want us to delete the data, where we no longer need the data for our original processing purposes but you require the data for the establishment, exercise or defence of legal claims, or when you have objected to our processing based on legitimate interest during the period when we are verifying whether our legitimate grounds override your rights.
  • ‌Right to Data Portability‌: You have the right to receive all the personal data you have provided to us, in a structured, commonly used and machine-readable format, or to request us to transmit this data directly to another data controller where technically feasible.
  • ‌Right to Object‌: You have the right to object at any time to our processing of your personal data that is based on our legitimate interest grounds, including the profiling activities we conduct for direct marketing purposes. If you object to direct marketing processing, we will immediately stop processing your personal data for such marketing purposes.
  • ‌Right to Withdraw Consent‌: You have the right to withdraw any consent you previously gave us for specific data processing activities at any time, without affecting the lawfulness of the processing we carried out based on your consent before you withdrew it. For example, you can unsubscribe from our marketing newsletter at any time, or adjust your browser permission settings to revoke the location access permission you previously granted to our website.
  • ‌Right to Lodge a Complaint‌: If you believe that our processing of your personal data violates applicable DSGVO provisions, you have the right to submit a complaint to the competent data protection supervisory authority in the German state of North Rhine-Westphalia, or the data protection authority located in your usual place of residence or work.

8. Children’s Privacy

Our e-commerce platform www.laniusshop.com is a general audience clothing shopping website, and we do not intentionally collect any personal data from children under the age of 16. If you are under the age of 16, please do not submit any of your personal information to our website, and please ask your parent or legal guardian to complete any shopping activities on our platform on your behalf. If we become aware that we have accidentally collected personal data from a child under 16 without the prior explicit consent of their legal guardian, we will take immediate steps to delete that information completely from all our servers.

9. Cross-Border Data Transfers

In principle, all of your personal data we collect and process is stored on servers located within the territory of the European Economic Area (EEA). If in very limited circumstances we need to transfer your personal data to a third country outside the EEA, we will ensure that the destination country provides an adequate level of data protection recognised by the European Commission, or we will implement appropriate safeguards such as signing standard data protection clauses approved by the European Commission with the recipient, to fully protect your data rights as required by DSGVO.

10. Amendments to This Privacy Policy

We may update and adjust this Privacy Policy from time to time to reflect changes in our business operations, new legal regulatory requirements or updates to our data processing practices. When we make any material changes to this policy, we will prominently post the updated version on the top of our Privacy Policy page on www.laniusshop.com, clearly mark the new effective date, and notify you via prominent in-site notification or email if the changes involve significant modifications that may affect your rights. We encourage you to review this Privacy Policy periodically whenever you visit our website to stay informed about how we protect your personal data.

11. Contact Information

If you have any questions, comments, concerns or requests related to this Privacy Policy, or if you wish to exercise any of your data subject rights we outlined above, you can contact our data protection responsible team at any time via the following methods:

  • Email: mist@laniusshop.com
  • Postal Address: LANIUS GmbH, Rolandstraße 63, 50677 Köln, Germany
  • Phone: +49 221 42332826
    We will respond to your inquiry as soon as possible, and resolve any issues related to your personal data processing within the legally required time limit.