Privacy Policy
As per GDPR
1. Privacy at a Glance
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. Detailed information on the subject of data protection can be found in the privacy policy listed below.
Data Collection on This Website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the "Information about the Responsible Party" section of this privacy policy.
How do we collect your data?
Your data is collected in part by you providing it to us. This could be data you enter in a contact form, for example.
Other data is automatically collected or collected with your consent when you visit the website by our IT systems. This is primarily technical data (e.g. internet browser, operating system, or time of page access). This data is collected automatically as soon as you enter this website.
What do we use your data for?
Part of the data is collected to ensure the error-free provision of the website. Other data may be used to analyze your user behavior. If contracts can be concluded or initiated via the website, the transmitted data will also be processed for contract offers, orders, or other inquiries.
What rights do you have regarding your data?
You have the right at any time to receive free information about the origin, recipient, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent for data processing, you can revoke this consent at any time for the future. You also have the right to request restriction of the processing of your personal data under certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
You can contact us at any time regarding this and other questions about data protection.
Analytics Tools and Third-Party Tools
When visiting this website, your browsing behavior may be statistically analyzed. This is done primarily with so-called analytics programs. Detailed information about these analytics programs can be found in the following privacy policy.
2. Hosting
We host the content of our website with the following provider:
External Hosting
This website is hosted externally. The personal data collected on this website is stored on the servers of the host(s). This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses, and other data generated via a website.
External hosting is carried out for the purpose of fulfilling contracts with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of secure, fast, and efficient provision of our online offering by a professional provider (Art. 6(1)(f) GDPR).
We use the following host(s):
dogado GmbH
Antonio-Segni-Straße 11
44263 Dortmund
Germany
Server location: Germany
Data Processing Agreement
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract required by data protection law that ensures that the personal data of our website visitors is processed only according to our instructions and in compliance with the GDPR.
3. General Information and Mandatory Disclosures
Data Protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.
When you use this website, various personal data is collected. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.
We point out that data transmission over the Internet (e.g. when communicating by email) may have security vulnerabilities. Complete protection of data from access by third parties is not possible.
Information About the Responsible Party
The responsible party for data processing on this website is:
Dominik Breitbach
Simon-Boiger-Str. 13
84424 Isen
Email: hello@maiasa.app
The responsible party is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.
Storage Duration
Unless a more specific storage period has been stated within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke consent for data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data; in the latter case, deletion will take place after these reasons no longer apply.
Recipients of Personal Data
In the course of our business activities, we work with various external parties. This sometimes requires the transfer of personal data to these external parties. We only pass on personal data to external parties if this is necessary for the fulfillment of a contract, if we are legally obligated to do so, or if we have a legitimate interest in the transfer.
Revocation of Your Consent to Data Processing
Many data processing operations are only possible with your express consent. You can revoke any consent already given at any time. The legality of data processing carried out prior to the revocation remains unaffected by the revocation.
Right to Object to Data Collection (Art. 21 GDPR)
If data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right at any time to object to the processing of your personal data for reasons arising from your particular situation; this also applies to profiling based on these provisions. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing; this also applies to profiling insofar as it is related to such direct marketing.
Right to Lodge a Complaint with the Supervisory Authority
In the event of violations of the GDPR, data subjects have a right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, their place of work, or the place of the alleged violation.
Right to Data Portability
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format.
Access, Correction and Deletion
You have the right at any time, within the framework of applicable law, to free information about your stored personal data, its origin and recipients, and the purpose of data processing and, if applicable, a right to correction or deletion of this data.
Right to Restriction of Processing
You have the right to request restriction of the processing of your personal data. You can contact us at any time for this purpose. The right to restriction of processing exists in the following cases:
- If you dispute the accuracy of your personal data stored by us, we generally need time to verify this. For the duration of the review, you have the right to request restriction of the processing of your personal data.
- If the processing of your personal data was/is carried out unlawfully, you may request restriction of data processing instead of deletion.
- If we no longer need your personal data but you need it for the exercise, defense, or assertion of legal claims, you have the right to request restriction of processing instead of deletion.
- If you have filed an objection under Art. 21(1) GDPR, a balance must be struck between your and our interests. As long as it has not yet been determined whose interests prevail, you have the right to request restriction of the processing of your personal data.
SSL/TLS Encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Encrypted Payment Transactions
If, after the conclusion of a paid contract, there is an obligation to transmit your payment data to us, this data is required for payment processing.
Payment transactions via common payment methods (Visa/MasterCard, direct debit) are carried out exclusively via an encrypted SSL or TLS connection.
With encrypted communication, your payment data that you transmit to us cannot be read by third parties.
4. Data Collection on This Website
Cookies
Our websites use so-called "cookies." Cookies are small data packages that do no damage to your device. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device.
Cookies that are necessary for the execution of electronic communication, for providing certain functions you have requested, or for optimizing the website are stored on the basis of Art. 6(1)(f) GDPR unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies for the technically error-free and optimized provision of its services.
You can set your browser to inform you about the setting of cookies and allow cookies only in individual cases. Disabling cookies may limit the functionality of this website.
Use of AI on the Website
We use AI-powered services and/or applications on our website and app to provide users with personalized outfit and style suggestions.
AI is used in particular for:
- Analysis of clothing items uploaded by the user (e.g. category, color, style),
- Generation and variation of individual outfit recommendations,
- Consideration of user preferences and current weather data when composing outfits,
- Technical image processing (e.g. background removal for clothing photos).
AI-generated results serve solely as inspiration and assistance. There is no automated decision-making with legal or similarly significant effect on users.
The use of these AI-powered functions is based on Art. 6(1)(f) GDPR. We have a legitimate interest in using modern technologies on our website to improve our services.
Contact by Email, Phone or Fax
If you contact us by email, phone, or fax, your inquiry including all resulting personal data will be stored and processed by us for the purpose of handling your request. We do not share this data without your consent.
The data sent to us via contact requests remains with us until you request deletion, revoke your consent for storage, or the purpose for data storage no longer applies. Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.
Use of Chatbots
We use chatbots to communicate with you. Chatbots are able to respond to your questions and other inputs without human assistance. In addition to your inputs, the chatbots analyze other data to provide appropriate responses.
The legal basis for the use of chatbots is Art. 6(1)(b) GDPR insofar as the chatbot is used for contract initiation or as part of contract fulfillment. In all other cases, use is based on our legitimate interest in the most efficient customer communication possible (Art. 6(1)(f) GDPR).
Use of AI Applications in Chatbot Communication
Our chatbots use Artificial Intelligence (AI) in customer communication. The AI analyzes the content of your message to autonomously generate a suitable response. In this context, the AI processes all content of your message, including names, email addresses, communication content, or technical information.
We integrate the following AI applications into our chatbots:
Google Gemini 3 Flash Preview
Our chatbots use Google Gemini 3 Flash Preview for our customer communication. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. When you contact us via chatbot, your inquiries including metadata may be transferred to and processed on the provider's servers to generate a suitable response.
Registration on This Website
You can register on this website to use additional features. We only use the data entered for the purpose of using the respective offer or service for which you have registered.
The processing of data entered during registration is carried out for the purpose of implementing the user relationship established by the registration and, if applicable, for initiating further contracts (Art. 6(1)(b) GDPR).
The data collected during registration is stored by us as long as you are registered on this website and is subsequently deleted. Statutory retention periods remain unaffected.
YouTube in Privacy-Enhanced Mode
This website embeds videos from YouTube. The operator is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use the privacy-enhanced mode (youtube-nocookie.com). At first you only see a preview image stored on our own server. The video is loaded from YouTube only when you click it. At that point, your IP address and the page you visited, among other data, are transmitted to YouTube.
The legal basis is your consent given by clicking the video (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Data may be transferred to the USA; Google LLC is certified under the EU-US Data Privacy Framework. More information: https://policies.google.com/privacy.
Instagram Posts
This website shows posts from our Instagram account. The provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. At first you only see a preview image stored on our own server. The post is loaded from Instagram only when you click it. At that point, your IP address and the page you visited, among other data, are transmitted to Meta, and Meta may set cookies.
The legal basis is your consent given by clicking the post (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Data may be transferred to the USA; Meta Platforms, Inc. is certified under the EU-US Data Privacy Framework. More information: https://privacycenter.instagram.com/policy.
AI Outfit Suggestions in the maiasa App (Google Gemini)
The outfit suggestions in the maiasa app are created by the AI language model Google Gemini. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To create a suggestion, the app transmits the data required for it to Google: information about the items in your digital closet, your style preferences and the weather data for your location. Google processes this data to generate the suggestion.
The legal basis is Art. 6(1)(b) GDPR, as the outfit suggestions are the core of the service you use. Data transfer to the USA is based on the Standard Contractual Clauses of the EU Commission; Google LLC is also certified under the EU-US Data Privacy Framework. More information: https://policies.google.com/privacy.
5. Social Media
Elements of the social network Facebook are integrated on this website. The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. According to Facebook, the data collected is also transferred to the USA and other third countries.
The use of this service is based on your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent is revocable at any time.
The company holds a certification under the "EU-US Data Privacy Framework" (DPF). More info: https://www.dataprivacyframework.gov/participant/4452.
Functions of the Instagram service are integrated on this website. These functions are offered by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
The use of this service is based on your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent is revocable at any time.
More information can be found in Instagram's privacy policy: https://privacycenter.instagram.com/policy/.
This website uses elements of the LinkedIn network. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
The use of this service is based on your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent is revocable at any time.
More information can be found in LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy.
On this website, we use elements of the social network Pinterest, operated by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.
The use of this service is based on your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent is revocable at any time.
More info in Pinterest's privacy notices: https://policy.pinterest.com/en/privacy-policy.
6. Newsletter
Newsletter Data
If you would like to receive the newsletter offered on the website, we require an email address from you as well as information that allows us to verify that you are the owner of the specified email address and that you agree to receive the newsletter. No further data is collected, or only on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties.
The processing of data entered in the newsletter registration form is carried out exclusively on the basis of your consent (Art. 6(1)(a) GDPR). You can revoke your consent at any time, for example via the "unsubscribe" link in the newsletter.
7. eCommerce and Payment Providers
Processing of Customer and Contract Data
We collect, process, and use personal customer and contract data for the establishment, content design, and amendment of our contractual relationships. The legal basis is Art. 6(1)(b) GDPR.
Data Transfer upon Contract Conclusion for Services and Digital Content
We only transmit personal data to third parties if this is necessary for contract processing, for example to the credit institution entrusted with payment processing.
The basis for data processing is Art. 6(1)(b) GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.
Payment Services
We integrate payment services from third-party companies on our website. When you make a purchase from us, your payment data is processed by the payment service provider for the purpose of payment processing.
We use the following payment services within this website:
Stripe
The provider for customers within the EU is Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.
Details can be found in Stripe's privacy policy: https://stripe.com/privacy.
Right of Withdrawal
Right of Withdrawal for Consumers
A consumer is any natural person who enters into a legal transaction for purposes that can predominantly be attributed neither to their commercial nor their independent professional activity.
You have the right to withdraw from this contract within 14 days without giving any reason. The withdrawal period is 14 days from the date of conclusion of the contract.
To exercise your right of withdrawal, you must inform us
maiasa
Simon-Boiger-Str. 13
84424 Isen
Germany
Email: hello@maiasa.app
by means of a clear statement (e.g. by email) of your decision to withdraw from this contract.
To meet the withdrawal deadline, it is sufficient for you to send the notification of the exercise of the right of withdrawal before the withdrawal period expires.
Consequences of Withdrawal
If you withdraw from this contract, we must refund all payments we have received from you without delay and at the latest within 14 days from the date on which we received notification of your withdrawal from this contract.
For this refund, we will use the same means of payment that you used for the original transaction, unless expressly agreed otherwise. In no case will you be charged fees for this refund.
Expiry of the Right of Withdrawal
The right of withdrawal expires for a contract for the provision of digital services if the provider has begun to perform the contract after the consumer has expressly agreed that the provider may begin performance before the expiry of the withdrawal period and the consumer has confirmed their knowledge that they lose their right of withdrawal by giving their consent to the commencement of performance.
This is particularly the case when the user is immediately granted access to paid app features after conclusion of the contract.
Model Withdrawal Form
(If you wish to withdraw from the contract, please fill out this form and send it back.)
To:
maiasa
Simon-Boiger-Str. 13
84424 Isen
Germany
Email: hello@maiasa.app
I/We hereby revoke the contract concluded by me/us for the provision of access to digital services (maiasa).
Ordered on (date): …
Name of consumer(s): …
Address of consumer(s): …
Date: …
Source: https://www.e-recht24.de