Legal notice

We are committed to protecting your data with transparency and care.

EU Representative (Art. 27 GDPR): IITR Cert GmbH
Address: Eschenrieder Str. 62 c, 82194 Gröbenzell, Germany
Email: email@iitr.de
Phone: +49 89 189 1736-0

In accordance with Art. 27 GDPR, we have appointed an EU representative. The EU representative serves as the point of contact for supervisory authorities and data subjects in all matters relating to GDPR compliance.

The following privacy notice informs you, in accordance with Art. 12 et seq. GDPR, about how we handle your personal data when you use our website. In particular, it explains what data we collect and for what purpose we use it. It also informs you how and for what purpose this occurs.

This privacy notice expressly relates to the website-specific data processing operations that take place when you visit our website at le-legshop.com. Beyond the website-specific data processing operations, the provider attaches great importance to the protection of personal data.

GENERAL INFORMATION

PUPPE Urban Clothing FZCO, IFZA Business Park, 67071-001, Makani A1-3641379065, Dubai, UAE, represented by Ms. Raphaela Kruse (hereinafter the "Provider") as operator of the website le-legshop.com takes the protection of personal data very seriously. We treat personal data confidentially and in accordance with the EU General Data Protection Regulation (GDPR) as well as on the basis of this privacy notice.

When you use this website, various personal data is processed, depending on the type and extent of use. Personal data is information relating to an identified or identifiable natural person (hereinafter "data subject"); a natural person is considered identifiable if they can be identified, directly or indirectly (e.g. by being linked to an online identifier).

CONTROLLER

The "controller" is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g. names, email addresses, etc.). The controller within the meaning of the GDPR and other applicable EU data protection provisions is:

PUPPE Urban Clothing FZCO
IFZA Business Park 67071-001
Makani A1-3641379065
Dubai, UAE
Represented by Ms. Raphaela Kruse

Email: care@le-legshop.com

DATA PROTECTION OFFICER

We have appointed a company data protection officer. You can reach them at: care@le-legshop.com

We have also appointed an EU representative in accordance with Art. 27 GDPR.

EU Representative: IITR Cert GmbH
Address: Eschenrieder Str. 62 c, 82194 Gröbenzell, Germany
Contact: email@iitr.de · Phone: +49 89 189 1736-0

The EU representative serves as a point of contact for supervisory authorities and data subjects across the European Union in all matters relating to GDPR compliance.

PURPOSES AND LEGAL BASES OF DATA PROCESSING

Accessing and Visiting Our Website — Server Log Files

For the purpose of technically providing the website, it is necessary to process certain information that your browser automatically transmits to us so that our website can be displayed in your browser and you can use it. This information is collected every time our website is accessed and automatically stored in what are known as server log files. This includes:

- Browser type and browser version
- Operating system used
- Referring website
- Hostname of the accessing computer
- Date and time of access
- IP address of the requesting computer

Storage of the aforementioned access data is technically necessary to provide a functional website and to ensure system security. This also applies to the storage of your IP address, which necessarily occurs and, under certain conditions, could theoretically allow identification of you. Beyond the purposes stated above, we use server log files solely for the needs-based design and optimization of our website — purely statistically and without reference to individuals. This data is not merged with other data sources, nor is it evaluated for marketing purposes.

Access data collected in connection with the use of our website is stored only for as long as necessary to achieve the purposes stated above. Your IP address is stored on our web server for a maximum of 7 days for IT security reasons.

If you visit our website to learn about or use our products and services, the temporary storage and processing of access data is based on Art. 6(1)(b) GDPR (legal basis), which permits processing for the performance of a contract or to take steps prior to entering into a contract. In addition, Art. 6(1)(f) GDPR serves as the legal basis for the temporary storage of technical access data. Our legitimate interest lies in providing you with a technically functional and user-friendly website and ensuring the security of our systems.

Contact Form

If you send us inquiries via a contact form, your message and the contact details you provide will be stored and further processed by us for the purpose of handling and responding to your inquiry, as well as for any follow-up questions. We do not share this data with third parties unless this is necessary for handling and responding to your inquiry, or you have given your consent.

If you contact us in connection with an existing contractual relationship, or contact us beforehand to obtain information about our products, services, or other offerings, the data and information you provide are processed for the purpose of handling and responding to your inquiry pursuant to Art. 6(1)(b) GDPR (legal basis). In all other cases, processing takes place to safeguard our legitimate interests pursuant to Art. 6(1)(f) GDPR, in order to respond appropriately to customer and contact inquiries.

The data you enter in the contact form remains with us until the purpose for storing/processing the data no longer applies (e.g. once your inquiry has been fully handled). Mandatory statutory provisions — in particular statutory retention periods — remain unaffected.

Use of Cookies and Related Functions/Technologies

We use what are known as cookies on our website. Cookies do not cause any damage to your computer and do not contain viruses. They serve to make our offering more user-friendly, effective, and secure, and to enable certain functions. Cookies are small text files that are stored on your device and saved by your browser. A cookie contains a characteristic string of characters that enables unique identification of your browser when you revisit the website.

Most of the cookies we use are so-called "session cookies." They are automatically deleted at the end of your visit or browser session (so-called transient cookies). Other cookies remain on your device for a specified period or until you delete them (so-called persistent cookies). These cookies allow us to recognize your browser the next time you visit. Upon written request, we are happy to provide further information about the functional cookies we use. Please contact us using the contact details provided above.

You can set your browser so that you are informed when cookies are set and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate automatic deletion of cookies when closing the browser. Instructions for disabling cookies can usually be found via the "Help" function of your browser. If cookies are disabled, the functionality and/or full availability of this website may be limited.

Some of the cookies used on our website come from third parties who help us analyze how visitors interact with our website content and what interests them, measure the performance of our website, or deliver needs-based advertising and other content on our website or on other websites. We use both first-party cookies (visible only to the domain currently being visited) and third-party cookies (visible across domains and typically set by third-party providers).

Cookie-based data processing takes place either on the basis of your consent pursuant to Art. 6(1)(a) GDPR (legal basis) or on the basis of Art. 6(1)(f) GDPR (legal basis) to safeguard our legitimate interests. Our legitimate interests lie in particular in providing you with a technically optimized, user-friendly, and needs-based website, as well as ensuring the security of our systems. You may withdraw any consent you have given at any time, e.g. by deactivating the relevant cookie-based tools/plugins listed individually below. You may also object to processing based on legitimate interests. You can also configure the cookie-based tools via the relevant settings.

Specifically, the following cookie-based tools/plugins are used on this website on the basis of your consent (Art. 6(1)(a) GDPR):

This website uses the functions of Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. You can give us your consent when you access our website by clicking the corresponding button in the "cookie banner" ("Accept"), or you can decline the use of Google Analytics ("Decline"). We store your selection in a separate cookie (Art. 6(1)(f) GDPR) on the basis of our legitimate interest in respecting your decision and not displaying the cookie banner again.

In connection with the processing operations described below, data is regularly also transmitted to Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Google Ireland Limited and Google LLC are hereinafter jointly referred to as "Google." Google Analytics uses cookies (first-party cookies) that enable an analysis of your use of the website. However, this does not mean that we thereby gain direct knowledge of your identity. Google uses the information generated by the cookies on our behalf to evaluate your use of the website, compile reports on website activity, and provide us with further services related to website usage and internet usage. This allows us to improve the quality of our website and its content. Based on statistical analyses, we learn how the website is used and can continuously optimize our offering accordingly.

The information generated by the Google Analytics cookies about your use of this website (e.g. time, location, and frequency of your website visits, including your IP address) is transmitted to and stored on a Google server in the USA. Google participates in the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov/). We have set the retention period for the corresponding data at the user and event level to 14 months (the shortest possible setting).

IP Anonymization

We have activated the IP anonymization function on this website. Your IP address is therefore shortened by Google within the member states of the European Union or in other signatory states of the Agreement on the European Economic Area prior to transmission to the USA, thereby anonymizing it. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. According to Google, the IP address transmitted by your browser as part of Google Analytics is not merged with other Google data relating to you.

Browser Plugin

You can prevent the storage of Google Analytics cookies through an appropriate setting in your browser software (see above). You can also prevent Google from collecting the data generated by cookies and relating to your use of the website (including your IP address), as well as Google's processing of this data, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

Objecting to Data Collection

In addition to the options listed above, you can prevent Google Analytics from collecting your data on our website by clicking the corresponding link in our cookie banner. This will set what is known as an opt-out cookie in your browser, which prevents future collection of your data when visiting this website. This opt-out cookie applies only to this browser and only to our website, and is stored on your device. If you delete the cookies in this browser, you will need to set the opt-out cookie again.

Disabling Google Analytics

Further information on how Google Analytics handles user data can be found in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.

Creating a Customer Account and Processing Orders

When you create a customer account with us or place an order, we collect personal data (e.g. name, address, email address, payment information) that is necessary to fulfill the contract and provide the related functions. Processing is based on Art. 6(1)(b) GDPR.

Payment Processing

We use external payment service providers for payment processing. Your payment data is transmitted directly to the respective provider and processed by them. Processing is based on Art. 6(1)(b) GDPR.

PayPal

PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. Privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Klarna

Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. Privacy policy: https://www.klarna.com/de/datenschutz/.

Stripe

Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. Privacy policy: https://stripe.com/de/privacy.

Further Processing Purposes

Beyond the purposes stated above, we may process your data where this is necessary to safeguard our legitimate interests or to fulfill legal obligations.

Recipients of Data

We only share your personal data with third parties where this is necessary for the performance of the contract, where we are legally obligated to do so, or where you have given your consent. Recipients may in particular include payment service providers, shipping companies, and IT service providers.

Data Transfer to Third Countries

In connection with the use of the tools mentioned above (e.g. Google), it may occur that we transfer your IP address to third countries (see above). With regard to the USA, data transfer takes place on the basis of the EU-US Data Privacy Framework. Otherwise, we do not transfer your personal data to countries outside the EU/EEA or to international organizations unless expressly stated otherwise in this privacy notice.

Duration of Data Storage

We process and store your personal data initially for as long as the respective purpose requires such storage (see above regarding individual processing purposes). This also includes periods of contract initiation (pre-contractual relationship) and contract performance with you. On this basis, your personal data is regularly deleted once the storage purpose has been fulfilled and/or statutory retention obligations under applicable EU and national commercial and tax law have expired. The data is then deleted once these periods have expired, provided no further legitimate interests exist that justify continued storage (Art. 6(1)(c) and (f) GDPR).

Data Security

We protect personal data through appropriate technical and organizational measures to ensure an adequate level of protection and safeguard the rights of data subjects. Among other things, this website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as inquiries you send to us as the site operator. You can recognize an encrypted connection by the "https://" prefix and the lock icon in your browser's address bar. Despite encryption being enabled, please note that data transmission over the internet (e.g. when communicating by email) may have security vulnerabilities. Complete protection of data against access by third parties is therefore not possible.

Your Rights as a Data Subject

Under the statutory requirements, you are entitled at any time to exercise the following rights as a data subject:

Right of access: You may at any time request confirmation as to whether we process personal data concerning you; if so, you are entitled, pursuant to Art. 15 GDPR, to receive further information (including processing purposes, categories of personal data, recipients, planned storage duration, origin of the data, automated decision-making, and transfers to third countries) as well as a copy of your personal data.

Right to rectification: Pursuant to Art. 16 GDPR, you are entitled to request that we correct personal data stored about you if it is inaccurate or incomplete.

Right to erasure: Pursuant to Art. 17 GDPR, you are entitled to request the immediate erasure of personal data concerning you, provided the statutory requirements are met (e.g. if the data is no longer necessary for the purposes for which it was collected). This right does not apply, however, if processing is necessary for compliance with a legal obligation or for the establishment, exercise, or defense of legal claims.

Right to restriction of processing: Pursuant to Art. 18 GDPR, you are entitled, under certain conditions, to request the restriction of processing of your personal data.

Right to data portability: Pursuant to Art. 20 GDPR, you have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

Right to withdraw consent: You may withdraw any consent you have given for the processing of personal data at any time. This also applies to consents given before the GDPR came into force (before May 25, 2018). Please note that withdrawal only takes effect for the future; processing carried out prior to withdrawal remains unaffected.

Right to object: Pursuant to Art. 21 GDPR, you are entitled to object at any time to the processing of your personal data where such processing is based on Art. 6(1)(f) or Art. 6(1)(e) GDPR, provided there are grounds arising from your particular situation. In the event of an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights, and freedoms, or unless the processing serves to establish, exercise, or defend legal claims. The objection may be made informally and should preferably be directed to the contact details listed above.

Right to lodge a complaint with a supervisory authority: Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority in the EU member state of your habitual residence, place of work, or the place of the alleged infringement. An overview of all data protection supervisory authorities within the European Union, including their contact details, can be found at: https://edpb.europa.eu/about-edpb/about-edpb/members_en.

Other: If you have any further questions or concerns regarding data protection, you may contact our data protection officer. Inquiries and the exercise of your rights should preferably be addressed in writing to our address listed above or by email to email@iitr.de.

Obligation to Provide Data

You are generally not obligated to provide us with your personal data. However, if you do not do so, we may not be able to allow you full use of our website or respond to your inquiries. Personal data that we do not need for the purposes described above is marked as voluntary information.

Automated Decision-Making/Profiling

We do not use automated decision-making or profiling (automated analysis of your personal circumstances).

Updates and Changes to This Privacy Notice

This privacy notice is currently valid and dated 19.06.2026.

Due to the further development of our website and our offerings, or due to changed legal or regulatory requirements, it may become necessary to amend this privacy notice.