Privacy Policy
Last updated: July 2026
We take the protection of personal data seriously. This Privacy Policy explains which personal data we process when you visit our website, use our online shop, contact us or order a product from us.
1. Controller
The controller responsible for data processing on this website is:
Anet Manufaktur Proprietor: André Nettermann [insert address] [insert postcode and city] Germany
Email: support@reformesports.com Website: www.reformesports.com
The reformé brand is operated by Anet Manufaktur.
2. Data Protection Officer
No data protection officer has been appointed.
3. General Information on Data Processing
We process personal data only to the extent necessary to operate the website, handle enquiries, process orders, shipping and payments, provide customer service and product support, comply with legal obligations, or protect the security of our systems.
Personal data means any information relating to an identified or identifiable person. This includes, for example, a name, address, email address, telephone number, order details, payment information, IP address or the content of communications.
4. Legal Bases for Processing
In particular, we process personal data on the following legal bases:
Article 6(1)(b) GDPR where processing is necessary for the performance of a contract or in order to take steps prior to entering into a contract, for example in connection with orders, shipping, payment, returns or customer service.
Article 6(1)(c) GDPR where we are legally required to process data, for example due to retention obligations under tax or commercial law.
Article 6(1)(f) GDPR where we have a legitimate interest in processing, for example in the secure operation of our website, handling general enquiries, improving our products or protecting against misuse.
Article 6(1)(a) GDPR where you have given us your consent, for example to cookies that are not essential, email updates, or the public use of feedback, quotations, images or videos.
5. Visiting the Website and Technical Access Data
When you visit our website, technically necessary data is processed so that the website can be displayed and operate securely.
In particular, the following data may be processed:
IP address
date and time of access
pages accessed
browser type and browser version
operating system
referring URL
device information
technical log data
Processing takes place to provide the website, ensure technical stability, analyse errors, and detect misuse or security risks.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable operation of our website.
6. Hosting and Shop System: Squarespace
Our website and online shop are operated through Squarespace.
Squarespace processes data necessary to operate the website and shop. This may include technical access data, shop data, order details, contact information, shopping basket data and usage data.
Squarespace may also process personal data outside the European Union or the European Economic Area, particularly in the United States. According to Squarespace, it uses appropriate safeguards for such transfers, particularly Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework.
Processing takes place to provide our website, online shop, checkout and the associated technical functions.
The legal bases are Article 6(1)(b) GDPR where processing is necessary for an order and the performance of a contract, and Article 6(1)(f) GDPR for the technical operation of the website.
7. Cookies and Similar Technologies
Our website uses cookies and similar technologies. Cookies are small files stored on your device.
We distinguish between essential and nonessential cookies.
Essential cookies Essential cookies are required for the website and online shop to function. They include, for example, functions for the shopping basket, checkout, security, language settings or technical sessions. These cookies cannot reasonably be disabled without restricting the functionality of the website.
Nonessential cookies We use nonessential cookies, for example for analytics, marketing or external content, only after you have given your consent.
You can change your cookie preferences through the cookie banner or the cookie settings on our website.
The legal basis for essential cookies is Section 25(2) TDDDG and Article 6(1)(f) GDPR.
The legal basis for nonessential cookies is your consent pursuant to Section 25(1) TDDDG and Article 6(1)(a) GDPR.
8. Contacting Us
If you contact us by email, through a contact form or by other means, we process the data you provide.
This may include:
name
email address
telephone number, if provided
content of your message
order number, if provided
photographs, videos or files, if you attach them
We use this data to handle your enquiry, ask follow up questions, provide support, or clarify contractual and legal matters.
The legal basis is Article 6(1)(b) GDPR where your enquiry relates to an order, a contract or steps prior to entering into a contract.
In all other cases, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in handling your enquiry.
9. Orders Placed Through the Online Shop
When you place an order through our online shop, we process the data necessary for the order, payment, shipping, customer service and legally required records.
This may include:
name
billing address
delivery address
email address
telephone number, if provided or required for delivery
products ordered
size, variant or personalisation details
order number
payment status
delivery status
return and support information
Processing takes place to fulfil your order, deliver the goods, process payment, communicate with you, handle enquiries, returns and rights in respect of defects, and comply with obligations under tax and commercial law.
The legal bases are Article 6(1)(b) GDPR and Article 6(1)(c) GDPR.
10. Payment Processing
Payments are processed by external payment service providers. Depending on the payment method selected during checkout, personal data may be transmitted to the relevant payment service provider, card provider, wallet provider or payment network operator.
In particular, this may include:
name
billing address
email address
delivery address
order value
order number
payment status
transaction data
payment method
technical payment information
As a rule, we do not receive full credit card or bank account details.
The following payment methods or payment services may be available in our online shop:
credit and debit card payments, particularly Visa, Mastercard, American Express, Discover, Diners Club, JCB, UnionPay and Cartes Bancaires
Apple Pay
Google Pay
Link
Klarna
iDEAL
PayPal
Payments may be processed through Squarespace, Stripe, PayPal, Klarna or other integrated payment service providers. Depending on the payment method selected, these providers may also process personal data as independent controllers, particularly for payment processing, fraud prevention, risk assessment, identity verification, debt management and compliance with legal obligations.
If you select a payment method offered by an external provider, the privacy information and terms of use of the relevant payment provider also apply.
The legal basis for processing and transmitting payment data is Article 6(1)(b) GDPR where processing is necessary to fulfil the order and process payment. Where legal obligations apply, the legal basis is Article 6(1)(c) GDPR. Where payment service providers process data for fraud prevention, security or risk assessment, Article 6(1)(f) GDPR may also apply.
11. Shipping and Fulfilment
We use shipping providers and shipping software for shipping, shipping labels, tracking and, where applicable, returns.
In particular, we use:
Sendcloud
The following data may be processed and transmitted to shipping providers for fulfilment:
name
delivery address
email address
telephone number, if required for delivery
order number
parcel data
tracking number
return information
The data is used to create shipping labels, deliver parcels, provide tracking information and process returns.
Depending on the shipping method, data may be transmitted to carriers such as DHL, DPD, GLS, UPS or other shipping providers.
The legal basis is Article 6(1)(b) GDPR. Where we process shipping data for tracking, resolving errors or preventing fraud, Article 6(1)(f) GDPR also applies.
12. Returns, Defects and Product Support
If you report a return, defect, damage or problem with a product, we process the data required for this purpose.
This may include:
name
contact details
order number
product information
description of the problem
photographs or videos of the product, if you send them to us
information about the condition of the product
communication history
We use this data to review your enquiry, process returns, refunds, replacement deliveries and rights in respect of defects, and improve our products.
Please do not send us health data, injury data or other particularly sensitive information unless it is necessary to handle your enquiry.
The legal bases are Article 6(1)(b) GDPR, Article 6(1)(c) GDPR and Article 6(1)(f) GDPR.
13. Email Updates and Newsletter
If you sign up for email updates, launch information or a newsletter, we process your email address and, where applicable, your name.
We use this data only to send you the information you requested.
Registration takes place only with your consent. You may unsubscribe at any time, for example through the unsubscribe link in the relevant email or by sending a message to support@reformesports.com.
The legal basis is Article 6(1)(a) GDPR.
If we use an external service provider for email updates, that service provider will be added to this Privacy Policy.
14. Product Feedback, Tests and Voluntary Comments
If you voluntarily send us feedback, test reports, photographs, videos or accounts of your experience, we process this data for evaluation, quality assurance and product improvement.
Your name, images, videos, quotations or personal statements will be used publicly only with your separate consent.
The legal basis for internal evaluation is Article 6(1)(f) GDPR. Our legitimate interest lies in improving our products and customer service.
For public use, we obtain separate consent pursuant to Article 6(1)(a) GDPR.
15. Embedded Videos and External Content
Our website may contain embedded videos and other external content. In particular, we embed videos through YouTube to explain clearly how our products are fitted and used.
The provider of YouTube is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Other companies in the Google group may be involved in data processing.
When a YouTube video is loaded or played on our website, personal data may be transmitted to Google. This may include, in particular:
IP address
device and browser information
date and time of access
page accessed
information about video playback
cookies and similar identifiers, where set
We endeavour to embed YouTube videos in a manner that protects privacy as far as possible, particularly through YouTube enhanced privacy mode or a consent solution under which the video is loaded only after you give your consent.
If you play an embedded YouTube video, data may be transmitted to Google and may also be processed by Google as an independent controller. This may apply particularly if you are logged into a Google or YouTube account at the same time.
The legal basis for loading nonessential external content is your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG. Where an integration is technically necessary to play video content that you have expressly requested, Section 25(2) TDDDG may also apply.
Further information about data processing by Google is available in Google privacy information.
16. External Links
Our website may contain links to external platforms, for example Instagram, TikTok, YouTube, Kickstarter or other websites.
When you click an external link, you leave our website. The relevant provider is responsible for data processing on external websites.
17. Social Media
We may operate profiles on social networks, for example Instagram, TikTok or YouTube.
When you visit or interact with our social media profiles, both we and the relevant platform provider process personal data.
We process data from social networks only to communicate with users, respond to messages, publish content and evaluate reach on the relevant platforms.
The privacy information of the relevant provider also applies to processing by that platform.
18. Recipients of Personal Data
Personal data may be transmitted to the following categories of recipients where necessary:
hosting and shop providers
payment service providers
shipping providers
shipping software providers
information technology and support service providers
tax advisers and accounting service providers
public authorities, where required by law
legal advisers, where necessary
platform providers, when you use external services or click links
We do not sell personal data.
19. Transfers of Data to Third Countries
Some service providers we use may process personal data outside the European Union or the European Economic Area, particularly in the United States.
Where data is transferred to third countries, this takes place only where an appropriate legal basis exists, for example an adequacy decision, the EU-U.S. Data Privacy Framework, Standard Contractual Clauses or another basis permitted under the GDPR.
20. Retention Period
We retain personal data only for as long as necessary for the relevant purposes.
We retain order details, invoice data and documents relevant for tax purposes in accordance with statutory retention obligations.
We retain contact enquiries for as long as necessary to handle your enquiry. Longer retention may be necessary where an enquiry relates to an order, return, defect or legal claim.
We retain newsletter data until you withdraw your consent or unsubscribe.
We delete data processed solely on the basis of consent when you withdraw your consent, unless a statutory retention obligation prevents deletion.
21. Security
We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure.
These measures include encrypted transmission, access restrictions, secure accounts, careful selection of service providers and internal restriction of access to necessary data.
22. Automated Decision Making
We do not use automated decision making, including profiling, that produces legal effects concerning you or similarly significantly affects you.
23. Your Rights
Subject to the GDPR, you have the following rights:
right of access to the personal data we process
right to rectification of inaccurate data
right to erasure
right to restriction of processing
right to data portability
right to object to certain processing
right to withdraw consent with effect for the future
right to lodge a complaint with a data protection supervisory authority
To exercise your rights, you may contact us at support@reformesports.com.
24. Objection to Processing Based on Legitimate Interests
Where we process personal data on the basis of Article 6(1)(f) GDPR, you may object to the processing on grounds relating to your particular situation.
We will then cease processing the data concerned unless there are compelling legitimate grounds for the processing, or the processing is required for the establishment, exercise or defence of legal claims.
25. Withdrawal of Consent
Where you have given us consent, you may withdraw it at any time with effect for the future.
The lawfulness of processing carried out before consent was withdrawn remains unaffected.
26. Right to Lodge a Complaint with a Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority.
The authority generally responsible for us is:
Berlin Commissioner for Data Protection and Freedom of Information Alt-Moabit 59–61 10555 Berlin Germany
27. Amendments to This Privacy Policy
We may amend this Privacy Policy if our website, services, service providers, technical processes or legal requirements change.
The current version published on this website applies.