To ensure your safety when shopping at EVITA, we have taken every possible step to protect your data from third-party access. Because your data and your trust are our commitment to the utmost security.

The EVITA.MODA website and the online shop contained therein (collectively, the "Website") are operated by MARKEMENT GmbH, Max-Eyth-Str. 8, 71144 Steinenbronn, Germany (hereinafter "EVITA" or "We"). At EVITA, your satisfaction is our top priority, and protecting your privacy is an important part of our mission. We therefore collect, process, and use your personal data exclusively in accordance with the principles described below and in compliance with applicable data protection laws.

The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) of the website https://evita.moda and the online shop contained therein (hereinafter jointly referred to as the “Website”) is MARKEMENT GmbH, Max-Eyth-Straße 8, 71144 Steinenbronn, Germany, datenschutz@evita.moda (hereinafter referred to as “EVITA” or “we”).

You can reach our data protection officer at datenschutz@evita.moda or at our postal address with the addition “the data protection officer”.

If you are under 16 years of age, please obtain permission from a parent/guardian before providing EVITA with personal information.

Your personal data

Personal data is all information that relates to an identified or identifiable person. This includes, for example, your name, telephone number, and postal and email addresses.

Collection, processing and use of personal data

EVITA collects, processes or uses your personal data exclusively to the extent described below.

Under no circumstances will the collected data be sold or otherwise marketed. EVITA uses personal data that is necessary to process your order, better consider your requirements and interests, and provide you with better service. If you share personal data with us, you can rest assured that it will be used exclusively to optimize EVITA's personalized customer service. We greatly appreciate the trust you place in us.

When you visit EVITA, we initially only collect the following technical information:

  • Click sequences
  • HTTP protocol elements
  • Search terms

1. Your customer account

On the website, you have the option of setting up a personal customer account for the online shop (hereinafter referred to as the "customer account"). In your customer account, you can store your personal information and use it to conveniently shop in the online shop. To open your personal customer account, EVITA requires the following mandatory information: your first and last name, your email address, and a freely selectable password. To process your orders, you can also provide your postal address, date of birth, and telephone number. We use your telephone number to coordinate the time of delivery with you if necessary. We need your date of birth to verify that you are of legal age. After successful registration, you will automatically receive a confirmation email. The email address you provide also serves as your access code for the customer account. In the personal area of ​​your customer account, you can update your information at any time and add further voluntary data, e.g., set your preferred payment and shipping method and manage your newsletter settings. You can also create an address book with different addresses that you want to use for your orders, as well as track the status of your orders and your order history for completed orders.

2. Orders in the online shop

The following options are available for ordering in our online shop:

2.1 Orders with a customer account

If you have opened a customer account with us, you will be asked to log in to your customer account using your email address and password during the ordering process. If you have stored your delivery and billing addresses in your customer account, these addresses will be suggested for the current order. Otherwise, you will be asked to provide a billing address, which will then be saved in your customer account and used for future orders. During the ordering process, you always have the opportunity to change or add to the stored or new information.

2.2 Payment processing

We work with the following partners to process payments in our online shop: technical service providers, credit institutions, and payment service providers. Please note that the payment methods listed are not always offered or available in your country.

PayPal

When paying via PayPal, credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" or "payment in installments" via PayPal, we will transfer your payment data to PayPal (Europe) Sarl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. This transfer takes place in accordance with Art. 6 (1) (b) GDPR and only to the extent necessary for payment processing.

PayPal reserves the right to conduct a credit check for payment methods such as credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 (1) (f) GDPR based on PayPal's legitimate interest in determining your ability to pay. PayPal uses the result of the credit check regarding the statistical probability of default to decide whether to provide the respective payment method. The credit check may contain probability values ​​(so-called score values). To the extent that score values ​​are included in the result of the credit check, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, is used to calculate the score values. For further information on data protection, including information on the credit agencies used, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.

Shop Pay

We use Shop Pay, an online payment service from Shopify, on our website and shopping apps. Shopify's contracting party for Europe is Shopify International Limited, 2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland, with VAT number IE 3347697KH (see section 13 of the Shopify Terms and Conditions, https://www.shopify.de/legal/agb ). Shopify processes the payment information you provide during checkout (e.g., the number of your card used for payment or your bank account number) and other data you provide (e.g., your name, address, email address, and phone number). This may also be used to determine your eligibility for certain offers or payment methods. For more information on the collection and use of personal data, please see the entry “Privacy for Shopify App Users (For users of Shopify’s apps, customer-focused services, or free business tools)” at https://www.shopify.com/de/legal/privacy/app-users , Shopify’s Privacy Policy at https://www.shopify.com/de/legal/datenschutz , and Shopify’s Data Processing Addendum at https://www.shopify.com/de/legal/dpa

Shopify Payments

We use the payment service provider "Shopify Payments", 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered by the payment service provider Shopify Payments, in particular payment by credit or debit card, payment processing will be carried out by the technical service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we will pass on the information you provided during the ordering process, along with information about your order (name, address, account number, bank sort code, possibly credit card number, invoice amount, currency and transaction number) in accordance with Art. 6 (1) (b) GDPR. Your data will be passed on exclusively for the purpose of payment processing with Stripe Payments Europe Ltd. and only to the extent that it is necessary for this purpose. Further information on Shopify Payments' data protection can be found at the following internet address: https://www.shopify.com/legal/privacy . Data protection information about Stripe Payments Europe Ltd. can be found here: https://stripe.com/de/privacy .

Amazon Pay

We enable the payment transaction to be processed via the payment service provider Amazon Pay (Amazon Payments Europe sca, 38 avenue JF Kennedy, L-1855 Luxembourg). In this context, we pass the following data on to Amazon Payments: first name, last name, address, email address, and telephone number. Amazon Payments Europe reserves the right to conduct a credit check to ensure your willingness and ability to pay. For more information, please see the Amazon Pay privacy policy: https://pay.amazon.de/help/201212490?ld=NSGoogle and https://www.amazon.de/gp/help/customer/display.html?nodeId=201909010& ref_=footer_privacy&ld=NSGoogle&language=de_DE&currency=EUR .

Google Pay

We enable the payment transaction to be processed via the payment service provider Google Pay (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). For the purpose of processing the payment, the information you provide during the ordering process, along with information about your order, will be passed on to Google. Google reserves the right to collect, store, and evaluate certain process-specific information for each transaction made via Google Pay. Furthermore, Google reserves the right, in its privacy policy, to pass on collected data to third parties and subsidiaries. For further information, please refer to the Google Pay privacy policy as well as the relevant terms of use and guidelines, available at https://support.google.com/googlepay/answer/9039712?hl=de and https://business.safety.google/privacy/ .

Klarna

In cooperation with Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden, we offer several payment options (see our General Terms and Conditions, https://www.waterdrop.de/pages/agb ).

2.3 Processing your order

To process your order, we work with service providers who support us in the execution of concluded contracts, either in whole or in part. Certain personal data is transmitted to these service providers in accordance with the following information.

The personal data we collect will be passed on to the transport company commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. We will pass on your payment details to the commissioned credit institution as part of the payment processing, insofar as this is necessary for the payment processing. If payment service providers are used, we will explicitly inform you of this below. The legal basis for the transfer of data is Art. 6 (1) (b) GDPR.

3. Electronic advertising and mail advertising

3.1 Email newsletter

On the website you also have the option to subscribe to our electronic newsletter.

If you have consented to this, we will use your first and last name and your email address, which you have either stored in your customer account or provided when you separately ordered the newsletter, to send you current offers and news from EVITA by email. The newsletter will inform you about new products and current product trends as well as our exclusive discounts, sales promotions or competitions. After successfully registering for the newsletter, you will automatically receive an email asking you to confirm your email address. As soon as you have confirmed your email address by clicking on the link contained in the confirmation email, you will receive the newsletter regularly. You can revoke your consent to receive the newsletter at any time with effect for the future using the contact details stated in this privacy policy. You can also unsubscribe from the newsletter at any time by clicking on the link provided for this purpose in the newsletter.

3.2 Personalized advertising by email

We also use your email address, which we received in connection with the sale of products or services, for irregular email advertising for our own similar goods or services, such as those you have already purchased. You will receive these emails regardless of whether you have subscribed to the newsletter. These may include, for example, a limited number of product recommendations, surveys, shopping cart reminders, and requests for product reviews. The prerequisite is that you have a customer account with us and have already purchased from us at least once. The legal basis for this is Section 7 (3) of the German Unfair Competition Act (UWG).

You can also revoke your consent to receive this personalized email tailored to your purchases at any time with future effect using the contact details provided in this privacy policy. You can also do this at any time by clicking on the link provided for this purpose in the email sent to you.

3.3 Data processing of our electronic advertising

The newsletter will be sent on our behalf by a service provider to whom we will pass on your email address for this purpose.
One of our service providers is located in the USA and is certified under the EU-US Privacy Shield. A current certificate can be viewed there. Based on this agreement between the USA and the European Commission, the latter has determined that companies certified under the Privacy Shield provide an adequate level of data protection.

3.4 Postal advertising and your right of objection

Furthermore, we reserve the right to use your first and last name as well as your postal address for our own advertising purposes, e.g., to send you interesting offers and information about our products by post. This serves to protect our legitimate interests, which prevail within the context of a balancing of interests, in addressing our customers with advertising in accordance with Art. 6 (1) (f) GDPR.

The advertising mailings are carried out on our behalf by a service provider to whom we pass on your data for this purpose.
You can object to the storage and use of your data for these purposes at any time by sending a message to the contact option described below.

4. Data security

We protect your personal data using the latest technology:
To transmit your data, we use a secure server with SSL (Secure Socket Layer) technology with up to 256 bits, with a minimum of 128 bits encryption. This ensures that your data is transmitted to us securely and is unreadable by unauthorized persons.

The SSL-encrypted information about your order, name, address, and any credit card or bank details, etc., cannot be read by third parties. We also prevent unauthorized third parties from accessing your personal data by storing it on a computer that isn't connected to the internet. It's important for you to protect yourself against unauthorized access to your password and your computer, especially if you share your computer with others.  

4.1 Hosting

Hosting by Shopify

We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), for the purpose of hosting and displaying the online shop on our behalf. All data collected on our website is processed on Shopify's servers. As part of the aforementioned services provided by Shopify, data may also be transmitted to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., or Shopify (USA) Inc. for further processing on our behalf. In the event that data is transmitted to Shopify Inc. in Canada, an appropriate level of data protection is guaranteed by an adequacy decision of the European Commission. Further information on Shopify's data protection can be found on the following website: https://www.shopify.de/legal/datenschutz

Further processing on Shopify servers other than those mentioned above will only take place within the framework communicated below.

5. Costs for misuse of bank data

If your bank details have been misused by unauthorized persons, most banks will cover all costs. If your data has been misused, please notify your bank immediately and contact us at datenschutz@evita.moda .

6. Cookies

When you visit the website, EVITA uses so-called "cookies." Cookies are small text files that are stored in your browser's cache to recognize your browser. We use cookies to make your visit to our website even more attractive.

We use so-called session cookies and so-called persistent cookies on our website. Session cookies automatically expire when you leave the website. Persistent cookies remain on your device for a longer period of time and allow us, for example, to save the contents of your shopping cart and to use the tools described below for web analysis and personalized targeting.

Of course, you can also visit our website without cookies. You can restrict or deactivate the use of cookies at any time in your browser settings. However, this may lead to certain limitations in the functionality and user-friendliness of our offering.

7. Web analytics and other third-party media companies

7.1. Google Analytics

This website uses Google Analytics, a web analysis service provided by Google Inc. ("Google"), USA. Google Analytics uses cookies, which enable an analysis of your use of the website. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. IP anonymization has been activated on this website so that Google will shorten the IP address of users within member states of the European Union or in other contracting states to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent cookies from being saved by setting your browser software accordingly. However, please note that in this case, you may not be able to use all the features of this website to their full extent. Users can also prevent Google from collecting the data generated by the cookie and relating to their use of the website (including their IP address) and from processing this data by downloading and installing the browser plug-in available at the following link. The current link (as of January 2019) is:

http://tools.google.com/dlpage/gaoptout?hl=de

This website uses Google Analytics Demographics Reporting, which uses data from Google's interest-based advertising and third-party visitor data (e.g., age, gender, and interests). This data cannot be traced back to a specific individual and can be deactivated at any time via the ad settings.

Google LLC, based in the USA, is certified for the US-European data protection agreement “Privacy Shield”, which guarantees compliance with the data protection level applicable in the EU.

For more information about Google, please see Google’s privacy policy: https://www.google.com/policies/privacy/

7.2 Social Media Plug-ins

Use of social plugins from Facebook, Google, Twitter, Instagram, Pinterest using the “2-click solution”.

Our website uses so-called social plugins ("plugins") from social networks. To increase the protection of your data when you visit our website, the plugins are integrated into the site using a so-called "2-click solution." This integration ensures that when you access a page on our website containing such plugins, no connection is established with the servers of the respective social network. Only when you activate the plugins does your browser establish a direct connection to the servers of the respective social network.

The content of the respective plug-in is then transmitted directly to your browser by the associated provider and integrated into the page. By integrating the plug-in, the providers receive the information that your browser has accessed the corresponding page of our website, even if you do not have a profile with the respective provider or are not currently logged in. This information (including your IP address) is transmitted from your browser directly to a server of the respective provider (possibly in the USA) and stored there. If you interact with the plug-ins, for example by clicking the "Like" or "Share" button, the corresponding information is also transmitted directly to a server of the provider and stored there. The information is also published on the social network and displayed to your contacts there. This serves to safeguard our legitimate interests in the optimal marketing of our offer in accordance with Art. 6 (1) (f) GDPR, which override our legitimate interests in the optimal marketing of our offer within the framework of a balancing of interests.

The purpose and scope of data collection and the further processing and use of the data by the providers as well as a contact option and your related rights and setting options for protecting your privacy can be found in the privacy policy of the providers:

http://www.facebook.com/policy.php
https://twitter.com/privacy
http://www.google.com/intl/de/+/policy/+1button.html
https://help.instagram.com/155833707900388
https://about.pinterest.com/de/privacy-policy

Our online presence on Facebook, Twitter, Instagram, Pinterest

Our presence on social networks and platforms serves to improve and actively communicate with our customers and prospects. We provide information about our products and current special offers there.

When you visit our online presence on social media, your data may be automatically collected and stored for market research and advertising purposes. So-called user profiles are created from this data using pseudonyms. These profiles can be used, for example, to place advertisements within and outside the platforms that presumably correspond to your interests. Cookies are generally used on your device for this purpose. Visitor behavior and users' interests are stored in these cookies. According to Art. 6 (1) (f) GDPR, this serves to safeguard our legitimate interests, which predominate within the framework of a balancing of interests, in an optimized presentation of our offer and effective communication with customers and interested parties. If you are asked by the respective social media platform operators for consent (approval) to data processing, e.g. using a checkbox, the legal basis for data processing is Art. 6 (1) (a) GDPR.

To the extent that the aforementioned social media platforms are headquartered in the USA, the following applies: The European Commission has issued an adequacy decision for the USA. This decision is based on the EU-US Privacy Shield. A current certificate for the respective company can be viewed at https://www.privacyshield.gov/list .

For detailed information on the processing and use of data by the providers on their websites, as well as a contact option and your related rights and settings options for protecting your privacy, in particular opt-out options, please refer to the providers' privacy policies linked below. If you still need assistance in this regard, please contact us.

Facebook : https://www.facebook.com/about/privacy/
Twitter : https://twitter.com/de/privacy
Instagram: http://instagram.com/ about /legal/privacy/
Pinterest: https://about.pinterest.com/de/privacy-policy

Opt-out option:
Facebook: https://www.facebook.com/settings?tab=ads
Twitter:
https://twitter.com/personalization
Instagram: http://instagram.com/about/legal/privacy/
Pinterest:
https://www.pinterest.de/?next=/settings/

7.3 Google

Google Remarketing

We use Google AdWords Remarketing to advertise this website in Google search results and on third-party websites. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). For this purpose, Google places a cookie in the browser of your device, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you visit. This cookie ID is used to uniquely identify a web browser on a specific computer and not to identify a person. You can deactivate the use of cookies by Google by following the link below and downloading and installing the plug-in provided there: www.google.com/settings/ads/plugin. Further information about Google Remarketing and Google's privacy policy can be found at: https://www.google.com/privacy/ads/ .

Google Conversions

Furthermore, we use so-called conversion tracking when using the Google AdWords service. When you click on an ad placed by Google, a conversion tracking cookie is stored on your computer/device. These cookies expire after 30 days, contain no personal data, and are therefore not used for personal identification. The information collected using the conversion cookie is used to compile conversion statistics for AdWords customers who have opted for conversion tracking.

You can prevent cookies from being saved by setting your browser software accordingly; however, we would like to point out that if you do this, you may not be able to use all of the functions of our website to their full extent. In addition, you can deactivate interest-based ads on Google as well as interest-based Google ads on the web (within the Google Display Network) in your browser by activating the "Off" button at https://www.google.de/settings/ads or by deactivating them at https://www.aboutads.info/choices/ . Further information about your setting options in this regard and data protection at Google can be found at https://www.google.de/intl/de/policies/privacy/?fg=1 .

Google Tag Manager

We use Google Tag Manager. This Google service allows website tags to be managed via a single interface. The service simply implements tags. This means that no cookies are used and no personal data is collected. Google Tag Manager triggers other tags, which in turn may collect data. However, Google Tag Manager does not access this data. If deactivation has been performed at the domain or cookie level, it remains in effect for all tracking tags implemented with Google Tag Manager.

7.4 Microsoft Ads / Bing

We use Bing Ads Universal Event Tracking, a conversion tracking service provided by Microsoft (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA). This service enables us to track activities on our site if you have reached our website via a Bing ad. This happens when a cookie (small text file) is placed on your device when you click on a Microsoft Bing Ads ad. This tells Microsoft and us in particular the total number of users who clicked on an ad and reached a previously defined landing page. Microsoft stores this data for 180 days. No personal information about the user's identity is disclosed. If you do not wish to participate in the Universal Event Tracking process, you can prevent the collection and processing of data related to your use of the website generated by the cookie, for example by rejecting cookies in your browser settings. You also have the option to opt out of receiving interest-based advertising from Microsoft using the following link: https://go.microsoft.com/fwlink/?LinkID=286759

Alternatively, you can opt out of receiving interest-based advertising from Microsoft and other participating companies altogether on the following page: www.youronlinechoices.com/de/ . Further information about Microsoft's terms of use and privacy policy for this service can be found here: https://privacy.microsoft.com/de-DE/privacystatement/ .

8. Legal basis for processing

Legitimate interest

This is regulated in Article 6 (1) (f) GDPR. It states that we may process your data if this is "necessary to protect the legitimate interests of [us] or a third party, unless the interests or fundamental rights and freedoms of [you] which require protection of personal data override these interests."

9. Consent

This is regulated in Article 6 (1) (a) GDPR. We require your consent to process your personal data for certain activities.

According to Article 4 No. 11 GDPR, consent (via opt-in) is “any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.”

That means:

  • Your consent is voluntary.
  • You know what you have given your consent to. Therefore, we assume that you have informed yourself sufficiently.
  • You actively consent.

Providing your personal data is necessary to conclude a contract. If you choose not to provide us with your personal data, we will not be able to process your order.

10. Your rights

According to the provisions of the GDPR, you can assert the following rights against us:

  • Right to information
  • Right to rectification
  • Right to restriction of processing
  • Right to erasure / right to be forgotten
  • Right to data portability

11. Right of objection

If the processing of your personal data is based on your consent, you have the right to revoke your consent at any time with future effect. The legality of the processing carried out on the basis of your consent until the revocation remains unaffected.

To exercise any of your rights listed above, you can contact us at any time:

Email: datenschutz@evita.moda

Postal address:
MARKEMENT GmbH
Data Protection Department EVITA
Max-Eyth-Straße 8
71144 Steinenbronn
Germany

You also have the right to contact the data protection supervisory authority. The responsible supervisory authority:

The State Commissioner for Data Protection and Freedom of Information
PO Box 10 29 32
70025 Stuttgart
Germany

12. Storage period

We only store your personal data for as long as it is necessary for the purposes stated above or as required by law.

Your data will be stored immediately after registration until you no longer wish this and have informed us of this.

If you subscribe to our newsletter, your data will only be saved after registration and confirmation of the double opt-in email. If you no longer wish to receive this newsletter, please let us know.

As long as you do not confirm the double opt-in email, your data will not be saved but only retained. If no confirmation is received after 30 days, occur, we will delete your data again.

13. Security measures

To the extent that we forward data to our service providers as part of the services described here, they are bound by contractual provisions with us regarding data protection in addition to the mandatory legal provisions.

We use security measures that we continuously optimize in line with technical and legal developments to best protect your data against accidental or intentional manipulation, loss, destruction, or access by unauthorized third parties.

Revocation of consent and right of objection

You can revoke your consent at any time with future effect free of charge by contacting datenschutz@evita.moda or by sending a written notice to MARKEMENT GmbH, Data Protection Department EVITA, Max-Eyth-Straße 8, 71144 Steinenbronn, Germany.

Information and correction

You also have the right to receive information about the data stored about you free of charge and, if necessary, to request that it be deleted, corrected or blocked.

We are happy to answer any further questions you may have about data protection and the processing of your data using the following contact details:

Email: datenschutz@evita.moda

Postal address:
MARKEMENT GmbH
Data Protection Department EVITA
Max-Eyth-Straße 8
71144 Steinenbronn
Germany

By using our websites you agree to this privacy policy.
Data protection declaration according to § 13 TMG and Art. 13 GDPR.

Privacy Policy and Information on Data Protection from March 2025