Privacy Policy

The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

The protection of your personal data is important to us. We process personal data exclusively within the framework of the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and the Telecommunications Digital Services Data Protection Act (TDDDG).

This website provides, in particular, the opportunity to participate in a survey or market research. The information submitted in this process is used for market analysis and for validating a potential product or product idea.

In addition, we use Google Analytics for the statistical analysis of the use of our website. Google Analytics is activated only if you have previously given your consent via our cookie/consent banner.

As part of the form, the following information in particular may be processed:

• Response ID
• Time of submission
• Height in centimeters
• Waist circumference in centimeters
• Inseam length in centimeters
• Information about the biggest problems or challenges
• Information about clothing currently preferred
• Information about preferred fit
• Information about desired or preferred product features
• Information about the price range
• Email address, if voluntarily provided
• Decision regarding registration for marketing emails
• UTM Source
• UTM Medium
• UTM Campaign
• UTM Term
• UTM Content
• Other preferences selected by you as part of the survey, in particular preferences relating to trousers

Which specific selection options and response values are processed within the survey depends on the form fields offered in each case.

We ask that you do not enter any information in free-text fields that is not required for the survey, in particular no special categories of personal data within the meaning of Article 9 GDPR.

The information collected is processed in particular for the following purposes:

1. Conducting and evaluating the survey;
2. Conducting market analysis;
3. Determining the needs, preferences, and requirements of potential customers;
4. Validating whether a potential product or product idea attracts sufficient interest;
5. Improving and developing potential products;
6. Where applicable, contacting you by email, provided that you have provided your email address and consented to such contact or to receiving marketing emails;
7. Statistical analysis and improvement of our website, provided that you have given your consent to this via our consent banner.

The body measurements and other preferences provided in the form are generally used for the aforementioned market analysis and product development purposes and are not used to make individual decisions about individual persons.

Participation in the survey is generally possible without providing an email address.

If you do not provide an email address, your email address will not be collected and, in particular, will not be transmitted to MailerLite for the purpose of email marketing.

Please note, however, that participation without an email address does not automatically mean that no personal data whatsoever will be processed. Depending on the technical configuration of the website, technical access data, timestamps, or other information that may potentially permit identification of a person may, for example, be processed.

The responses submitted via the form will be processed for the market analysis purposes described in this Privacy Policy regardless of whether an email address is provided.

You may voluntarily participate in the survey by providing your email address.

Providing an email address is not required to participate in the survey.

If you provide only your email address without consenting to its use for marketing emails, the email address will not be used for marketing purposes. However, it may be stored together with your other form information insofar as this is necessary for conducting and evaluating the survey.

The legal basis for processing the email address in connection with conducting the survey is Article 6(1)(b) GDPR insofar as the processing is necessary to carry out the participation requested by you, or Article 6(1)(f) GDPR insofar as the processing is based on our legitimate interest in conducting and evaluating the market analysis.

If you expressly consent to receiving marketing emails in the form, we use the email address you provide to send the corresponding marketing emails.

The emails are sent via the following service provider:

MailerLite acts as a processor on our behalf.

The processing includes, in particular, storing your email address, managing the recipient list, and sending marketing emails.

The legal basis for processing for the purpose of sending marketing emails is your consent pursuant to Article 6(1)(a) GDPR.

Consent is voluntary and is not a prerequisite for participating in the survey.

You may withdraw your consent at any time with effect for the future. In particular, you can use the unsubscribe option included in every marketing email. Alternatively, you can contact us at datenschutz@extnd.de .

The lawfulness of processing carried out prior to withdrawal remains unaffected by the withdrawal.

MailerLite provides a Data Processing Addendum (DPA) for the processing of personal data. According to MailerLite's current information, sub-processors may be used as part of the provision of services. For transfers to third countries, the DPA provides for appropriate safeguards, in particular the European Commission's Standard Contractual Clauses. The current information regarding sub-processors and data transfers can be found in MailerLite's data protection and contractual documentation.

To store and manage the data collected through the form, we useGoogle Sheets within a Google Workspace account.

The submitted form data may, in particular, be stored and processed in a spreadsheet.

The provider of the Google Workspace services used for this purpose is:

Google generally processes data within Google Workspace in accordance with the contractual and data protection terms applicable to Google Workspace. Corresponding data processing terms are available for Google Workspace, under which Google generally acts as a processor when processing customer data.

The processing serves in particular to store, organize, and evaluate the data collected as part of the survey.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest consists in the efficient, structured, and secure storage and evaluation of the data collected as part of the market analysis.

Where legally required, processing is carried out on the basis of an appropriate data processing agreement with Google.

This website uses Google Analytics 4 (GA4).

Google Analytics is used to statistically evaluate the use of our website and, for example, to understand which areas of the website are used and how visitors interact with the website.

Google Analytics is not activated when the website is initially accessed. Activation takes place only after you have expressly consented, via our cookie/consent banner, to the use of analytics cookies or comparable technologies.

The legal basis for the processing of personal data by Google Analytics is your consent pursuant to Article 6(1)(a) GDPR and, insofar as the storing of or access to information on your device is concerned, Section 25(1) TDDDG.

You may change or withdraw your consent at any time with effect for the future via the settings of our consent banner or the options provided there.

Google states that, for Google Analytics 4, users' IP addresses in the EU, EEA, Switzerland, and the United Kingdom are not logged or stored. Google Analytics may also process information about the device or browser used, website interactions, and a pseudonymous identifier.

We do not transmit email addresses or other directly identifying information from the survey form to Google Analytics.

Google Analytics should be configured so that no personal data, in particular no email addresses or other directly identifying information, is transmitted to Google Analytics.

The provider of Google Analytics is:

Depending on the configuration and use of Google's services, processing by other companies within the Google group, in particular Google LLC in the USA, may take place. The data protection safeguards provided by Google in each case apply to corresponding data transfers.

Further information on data processing by Google can be found in Google's privacy information.

Our website uses cookies and comparable technologies.

Technically necessary technologies may be used insofar as this is necessary for operating the website.

Technologies that are not technically necessary, in particular Google Analytics, are activated only after you have given your consent.

You can change or withdraw your consent at any time via our consent banner.

Depending on the processing activity, we base the processing of personal data in particular on the following legal bases:

• Article 6(1)(a) GDPR: Consent, in particular for marketing emails and Google Analytics;
• Article 6(1)(b) GDPR: Processing insofar as it is necessary to carry out participation requested by you or a service associated with such participation;
• Article 6(1)(f) GDPR: Legitimate interests, in particular in conducting market analyses, product development, managing the data collected, and operating the website securely and efficiently;
• Section 25(1) TDDDG: Consent for storing information on the end device or accessing information already stored, insofar as consent is required for this.

We generally store personal data only for as long as is necessary for the respective purposes.

The data collected as part of the market analysis is generally stored for as long as it is necessary for conducting, evaluating, and documenting the market analysis and for the development and validation of potential products.

A specific deletion period may depend, in particular, on whether the data is still required for the ongoing market analysis.

Email addresses of persons who receive marketing emails are generally processed for as long as the corresponding consent exists or the email address is required for sending the emails. Following an unsubscribe request, the address is generally removed from the active marketing distribution list. Limited storage of information concerning the withdrawal or unsubscribe request may be necessary in order to demonstrate the withdrawal and to prevent sending emails again contrary to the stated unsubscribe request.

Statutory retention obligations remain unaffected.

As part of operating the website and carrying out the processing activities described, personal data may in particular be transmitted to the following recipients or service providers:

• David Lika as the controller;
• Google Ireland Limited / Google Workspace for storing and managing the form and survey data;
• MailerLite for sending and managing marketing emails, provided that you have given your consent to this;
• Google Analytics / Google for measuring reach, provided that you have given your consent to this.

We do not transmit personal data to other recipients unless this is legally permissible or necessary.

When using individual services, personal data may be processed outside the European Economic Area (EEA).

Where such a transfer takes place, it is carried out only in compliance with the requirements of Articles 44 et seq. GDPR.

This may include, in particular, adequacy decisions of the European Commission, the European Commission's Standard Contractual Clauses, or other appropriate safeguards permitted under the GDPR.

For the service providers we use, the details of international data transfers and the safeguards employed may change due to changes to the respective services and contractual terms.

We take appropriate technical and organizational measures to protect personal data against loss, destruction, manipulation, unauthorized access, and other unauthorized processing.

Access to the stored survey data is restricted to the persons and systems required for this purpose.

Subject to the statutory requirements, you have, in particular, the following rights:

To exercise your rights, it is sufficient to send a message to:

Pursuant to Article 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.

The data protection supervisory authority responsible for your habitual residence, your place of work, or the alleged infringement may have jurisdiction over a complaint.

For North Rhine-Westphalia, the following authority is particularly responsible:

No automated decision-making, including profiling within the meaning of Article 22 GDPR, takes place in the context of the processing described on this website.

We reserve the right to amend this Privacy Policy if this becomes necessary due to legal, technical, or organizational changes.

The current version published on this website shall apply in each case.