Privacy Policy | How We Protect Your Data | dressyourmind eyewear
Last updated: 15 October 2026
DressYourMind Eyewear is an independent eyewear brand based in Berlin, Germany. This Privacy Policy explains how we collect, use, store and protect personal data when you visit our website, place an order, create a customer account or contact us.
We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the German Federal Data Protection Act (BDSG), the German Telecommunications Digital Services Data Protection Act (TDDDG) and other applicable data protection legislation.
1. Data Controller and Contact Details
The controller responsible for processing personal data on this website is:
Vincenzo Cannone — DressYourMind Eyewear
Cornelius-Fredericks-Str. 54
13351 Berlin, Germany
Email: contact@dressyourmind.com
Website: https://www.dressyourmind.com/
For any questions or requests concerning the processing of your personal data, please contact us using the email address above.
2. Personal Data We Collect
Depending on how you use our website, we may collect the following categories of personal data:
Information you provide directly
-
Name and contact details, including your email address and telephone number where provided.
-
Billing and delivery addresses.
-
Order details, purchased products, order history and information necessary to process returns or refunds.
-
Information you provide when contacting us, completing a form or requesting customer support.
-
Customer account information, if you create an account.
-
Newsletter subscription preferences and marketing consent records, where applicable.
Payment information
Payments are processed through the payment method and provider selected at checkout. Depending on the payment method, the relevant provider may process payment-related information. We receive the information necessary to confirm and manage the transaction. We do not intentionally collect or store complete payment card security details when these are processed directly by a payment provider.
Technical and usage information
When you visit our website, technical information may be processed, including your IP address, browser and device information, access timestamps, requested pages, session identifiers and security-related logs. Additional usage or analytics information may be collected depending on the cookies, analytics tools and integrations enabled on the website and your consent preferences.
Please do not send sensitive personal information unless it is necessary for your request.
3. Purposes and Legal Bases for Processing
We process personal data only where an applicable legal basis permits us to do so.
PurposeLegal basis
Processing orders, payments, deliveries, returns and refundsArticle 6(1)(b) GDPR — performance of a contract or pre-contractual measures
Creating and administering customer accountsArticle 6(1)(b) GDPR
Responding to enquiries and providing customer supportArticle 6(1)(b) or Article 6(1)(f) GDPR, depending on the enquiry
Meeting accounting, tax and other statutory obligationsArticle 6(1)(c) GDPR — legal obligation
Protecting the website, preventing fraud and maintaining IT securityArticle 6(1)(f) GDPR — legitimate interests, where applicable
Sending promotional newsletters and other consent-based marketingArticle 6(1)(a) GDPR — consent, where required
Using non-essential cookies and similar technologies: Consent under applicable data protection and telecommunications privacy rules
Measuring website performance or analysing usage Consent where required; otherwise, another valid legal basis only where legally permitted
Where processing is based on legitimate interests, those interests may include website security, fraud prevention and the effective administration of our business. We consider the rights and freedoms of affected individuals when relying on this legal basis.
You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
4. Orders, Payments and Delivery
When you place an order, we process the information necessary to accept, fulfil and document your purchase. This may include your contact details, billing and delivery addresses, order information, payment status and communications concerning the transaction.
Depending on the services used for your order, relevant information may be shared with:
-
Wix, which provides our website and online shop platform.
-
The payment provider you select at checkout, which processes the payment under its own applicable terms and privacy information.
-
Delivery and logistics providers, including DHL or DPD where used for your shipment.
-
Professional advisers, tax authorities or public authorities, where disclosure is legally required or necessary to establish, exercise or defend legal claims.
These recipients receive only the information reasonably necessary for their respective tasks, subject to applicable law.
Payment providers may process personal data independently as controllers for certain payment-related activities. Their own privacy notices apply to that processing.
5. Customer Accounts, Contact Forms and Newsletters
If you create a customer account, we process the information necessary to administer the account and provide the associated services.
If you contact us by email or through a website form, we use the information you provide to respond to your enquiry and retain relevant correspondence for as long as reasonably necessary to handle the matter and meet applicable legal requirements.
If you subscribe to a newsletter or other marketing communication, we use your contact details for that purpose where a valid legal basis exists. Where consent is required, you may withdraw it at any time using the unsubscribe link provided in the communication or by contacting us.
We do not send consent-based promotional communications merely because you have created an account.
Where applicable, we retain evidence of marketing consent and withdrawal to demonstrate compliance with legal obligations.
6. Cookies, Consent and Website Analytics
Our website is operated using Wix and may use cookies or similar technologies for essential website functions, security, customer accounts, shopping-cart functionality and other purposes.
Depending on the features and integrations enabled, the website may also use analytics, performance or marketing technologies.
Essential technologies may be used where necessary to provide a service you have expressly requested or to ensure the technical operation and security of the website, as permitted by applicable law.
Non-essential technologies, including those used for analytics or advertising where consent is required, must not be activated before the required consent has been obtained.
Where applicable, you can accept, reject or configure non-essential cookies through the website's cookie-consent interface. You should also be able to change or withdraw your consent through the available cookie settings.
Changing your browser settings may provide additional control, but it does not necessarily replace the website's consent-management mechanism.
The precise cookies, third-party technologies, purposes and retention periods depend on the website's actual configuration. Please consult the cookie information provided through our consent interface for the applicable details.
7. Data Recipients and Service Providers
We may disclose personal data to service providers where this is necessary for the purposes described in this policy. These may include:
-
Wix, for website hosting, online shop functionality, forms and related website services.
-
Payment providers selected by customers at checkout.
-
Delivery and logistics providers.
-
IT, security and technical support providers.
-
Accounting, legal and other professional advisers.
-
Public authorities and courts where disclosure is legally required.
Where a service provider processes personal data on our behalf, we implement the contractual and organisational safeguards required by applicable law, including a data processing agreement where necessary.
We do not sell personal data. We do not share personal data with third parties for their own independent marketing purposes unless you have been appropriately informed and a valid legal basis permits the sharing.
8. International Data Transfers
Some service providers may process or access personal data from countries outside the European Economic Area (EEA).
Where personal data is transferred to a country without an applicable adequacy decision, we rely on an appropriate transfer mechanism under Chapter V GDPR, where required. This may include the European Commission's Standard Contractual Clauses, together with supplementary safeguards where necessary.
International transfers are assessed according to the relevant provider, service and processing activity. Further information about the applicable safeguards can be requested using the contact details in Section 1, subject to legal limitations.
9. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations or establish, exercise or defend legal claims.
Retention periods depend on the category of data and the purpose of processing. For example:
-
Order and accounting records: retained for the applicable statutory accounting and tax retention periods. Under German law, these periods vary by record type and can include eight-year, ten-year and six-year periods.
-
Customer enquiries: retained for as long as necessary to resolve the enquiry and for a reasonable period thereafter, unless a longer period is legally required or necessary to handle a dispute.
-
Customer accounts: retained while the account remains active and, after closure, for as long as necessary to meet applicable obligations or resolve claims.
-
Newsletter data: used until you withdraw your consent or unsubscribe, subject to the limited retention of information necessary to document consent, withdrawal or compliance.
-
Technical logs and cookie data: retained according to their purpose, configuration and the applicable retention settings or legal requirements.
Where data is no longer required and no legal retention obligation applies, it will be deleted or anonymised, as appropriate.
10. Your Rights Under the GDPR
Subject to the applicable legal conditions, you have the right to:
-
Access: obtain confirmation of whether we process your personal data and request a copy.
-
Rectification: request the correction of inaccurate or incomplete personal data.
-
Erasure: request deletion of your personal data where the legal requirements are met.
-
Restriction: request restriction of processing in the circumstances provided by law.
-
Data portability: receive certain data you have provided in a structured, commonly used and machine-readable format and, where technically feasible and legally applicable, transmit it to another controller.
-
Object: object to processing based on legitimate interests for reasons relating to your particular situation.
-
Object to direct marketing: object at any time to the processing of your personal data for direct marketing, including related profiling.
-
Withdraw consent: withdraw consent at any time where processing is based on consent.
-
Complain: lodge a complaint with a competent data protection supervisory authority.
To exercise your rights, email contact@dressyourmind.com. We may request information reasonably necessary to verify your identity before responding.
We will respond within the time limits established by the GDPR. These rights are subject to applicable legal exceptions, including statutory retention obligations.
11. Data Security
We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, disclosure or destruction.
Depending on the relevant service, these measures may include encrypted connections, access restrictions, authentication controls, security monitoring and safeguards provided by our service providers.
No method of electronic transmission or storage can be guaranteed to be completely secure. We review and maintain our safeguards in accordance with the risks and applicable legal requirements.
12. Automated Decision-Making
We do not intentionally make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you, unless this is separately disclosed and permitted under applicable law.
Payment providers may use their own automated systems for fraud prevention, security or payment authorisation. Such processing may be governed by the relevant provider's privacy information.
13. Children
Our website and products are not specifically directed at children. We do not knowingly collect children's personal data beyond what is necessary and legally permitted for the relevant transaction or service.
If you believe that a child has provided personal data unlawfully, please contact us so that we can review the matter and take appropriate action.
14. Changes to This Privacy Policy
We may update this policy when our processing activities, services or legal obligations change.
The current version will be published on this page with its latest revision date. Where required by law, we will provide additional information or seek consent for changes affecting consent-based processing.
15. Contact and Supervisory Authority
For questions or requests relating to your personal data, contact:
Vincenzo Cannone — DressYourMind Eyewear
Cornelius-Fredericks-Str. 54
13351 Berlin, Germany
Email: contact@dressyourmind.com
You also have the right to lodge a complaint with a competent data protection supervisory authority. In Berlin, this is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).
Official website: https://www.datenschutz-berlin.de/
You may also contact another supervisory authority where permitted under the GDPR, particularly in the EU/EEA country where you habitually reside, work, or where the alleged infringement occurred.