Last updated: September 2026

 

1. Data Controller

The controller responsible for the processing of personal data through this website is:

Janina Gold
Karwendelstr. 1
82194 Gröbenzell
Germany

Email: hello@janinagold.com
Tel.: +49 (0)15758293353

For the purposes of the EU General Data Protection Regulation (“GDPR”), Janina Gold is the data controller unless otherwise stated.

 

2. General Information About the Processing of Personal Data

We take the protection of your personal data seriously.

“Personal data” means any information relating to an identified or identifiable natural person. Depending on how you use our website and online shop, this may include your name, postal address, email address, telephone number, IP address, order information, payment information and other information you provide to us.

We process personal data only where necessary or legally permitted, including in order to:

• provide and operate our website and online shop;

• process and fulfil orders;

• provide digital products and downloads;

• process payments;

• communicate with you;

• provide customer support;

• comply with legal obligations;

• maintain the security and functionality of our website; and

• carry out analytics or marketing activities where legally permitted and, where required, with your consent.

Where the GDPR applies, processing may in particular be based on:

• Art. 6(1)(a) GDPR – your consent;

• Art. 6(1)(b) GDPR – performance of a contract or steps taken at your request before entering into a contract;

• Art. 6(1)(c) GDPR – compliance with a legal obligation; or

• Art. 6(1)(f) GDPR – our legitimate interests or those of a third party, provided that your interests and fundamental rights do not override those interests.

Where other privacy laws apply, we process personal data in accordance with the applicable legal basis and requirements of those laws.

 

3. Wix Website Hosting and Platform

This website is created and operated using services provided by Wix.com Ltd. (“Wix”).

Wix provides the technical infrastructure used to host and operate our website and may process personal data in connection with your use of the website.

Depending on how you interact with our website, this may include:

• IP address;

• browser and device information;

• date and time of access;

• pages and content accessed;

• technical log and server information;

• cookie and consent information;

• contact information;

• order and transaction information; and

• other information you submit through the website.

This processing may be necessary for the technical provision, operation, security and functionality of the website and, depending on the Wix services used, for online shop functions, order processing, communications, analytics and website administration.

Where the GDPR applies, processing necessary for the secure and reliable operation of our website may be based on Art. 6(1)(f) GDPR.

Processing necessary to enter into or perform a contract is based on Art. 6(1)(b) GDPR.

Where your consent is required, processing is based on Art. 6(1)(a) GDPR.

Further information about how Wix processes personal data can be found in the Wix Privacy Policy.

 

4. Server Log Data

When you access our website, certain technical information may be processed automatically.

This may include:

• your IP address;

• date and time of access;

• pages or files requested;

• amount of data transferred;

• browser type and version;

• operating system;

• referring URL; and

• technical information about your device.

This information is processed in particular to provide the website, maintain its stability and security, diagnose technical issues and protect against misuse.

Where the GDPR applies, the legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure, reliable and technically functional operation of our website.

 

5. Online Shop and Orders

When you place an order through our online shop, we process the personal data required to process and fulfil your order.

This may include:

• first and last name;

• billing address;

• shipping address for physical products;

• email address;

• telephone number, where applicable;

• products ordered;

• order number;

• date and time of the order;

• billing and payment information;

• payment status; and

• information relating to the provision of digital products.

Where the GDPR applies, this processing is based on Art. 6(1)(b) GDPR because it is necessary to enter into and perform the contract with you.

Where we are legally required to retain invoices, transaction records or other business information, processing is based on Art. 6(1)(c) GDPR.

 

6. Digital Products and Downloads

When you purchase digital products, including digital sewing patterns and e-books, we process the information necessary to process your order and provide access to the digital product.

This may include your contact details, order information, payment status and information relating to the provision of or access to the digital product.

Where the GDPR applies, processing necessary to fulfil your purchase is based on Art. 6(1)(b) GDPR.

Where certain information must be retained to comply with legal documentation, accounting, tax or other statutory requirements, processing may additionally be based on Art. 6(1)(c) GDPR.

 

7. Payment Processing

When you make a purchase, personal data may be transmitted to the payment service provider selected during checkout.

Depending on the payment methods actually offered through our online shop, payment processing may involve providers such as PayPal, Stripe, Wix payment services or other payment providers displayed during checkout.

The information processed may include:

• your name;

• billing address;

• email address;

• transaction amount;

• currency;

• order or transaction number;

• payment status; and

• other information required to process the payment.

Where the GDPR applies, processing necessary to complete your payment and fulfil your order is generally based on Art. 6(1)(b) GDPR.

Payment providers may process certain information as independent controllers in accordance with their own privacy policies and legal obligations.

Where payment information is entered directly into a payment provider's payment system, we generally do not receive or store complete payment credentials such as full credit card numbers. We receive only the information necessary to process and administer the transaction.

 

8. Contacting Us

If you contact us by email, contact form or another communication channel, we process the information you provide in order to respond to your enquiry.

This may include your name, email address, the content of your message and any additional information you voluntarily provide.

Where your enquiry relates to an existing or prospective contract, processing is based on Art. 6(1)(b) GDPR where the GDPR applies.

For other enquiries, processing may be based on Art. 6(1)(f) GDPR. Our legitimate interest is to communicate with website visitors and appropriately respond to enquiries.

 

9. Customer Accounts and Website Membership

Where our website allows you to create a customer account or website membership, we process the information necessary to provide and administer that account.

This may include your name, email address, login information, order history and other information associated with your account.

Where the account is necessary for or used in connection with purchases, processing may be based on Art. 6(1)(b) GDPR.

Where creation of an account is voluntary, the applicable legal basis depends on the particular circumstances and functions provided.

You may request deletion of your customer account, subject to any legal retention obligations or other lawful reasons requiring us to retain certain information.

 

10. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Cookies are small pieces of information that may be stored on or accessed from your device.

Some cookies and similar technologies are necessary for the technical operation, security and functionality of our website and online shop.

Other technologies may be used for purposes such as analytics, functionality, personalisation or marketing.

Where applicable law requires your consent before information may be stored on or accessed from your device, the relevant non-essential technologies will only be activated after you have made the corresponding selection through our cookie consent system.

You may change or withdraw your cookie choices for the future through the cookie settings provided on our website.

Technologies that are strictly necessary to provide a service expressly requested by you may be used without consent where permitted by applicable law.

Any subsequent processing of personal data associated with cookies or similar technologies is additionally subject to applicable data protection law.

 

11. Cookie Consent Management

We use consent-management functionality provided through Wix to manage cookie and similar technology preferences.

Through the cookie banner, you can select whether certain non-essential categories of cookies and similar technologies may be used.

Your choices may be stored so that your preferences can be recognised during subsequent visits.

You can change your choices for the future through the cookie settings made available on our website.

 

12. Analytics and Marketing Technologies

Where we use analytics, statistics, advertising or marketing technologies that are not strictly necessary for the operation of our website, these will only be activated after obtaining your consent where consent is required by applicable law.

Where the GDPR applies and consent is required, the legal basis for the associated processing is Art. 6(1)(a) GDPR.

You may withdraw your consent at any time with effect for the future through our cookie settings.

The specific analytics and marketing services used on this website depend on the services and integrations currently activated.

 

13. Embedded Content and Third-Party Services

Our website may include content or functionality provided by third parties, such as videos, maps, social media content or other external services.

When such functionality is activated, personal data such as your IP address and technical device information may be transmitted to the relevant third-party provider.

Where consent is required before such a service may be activated, the relevant content or functionality will only be activated after you have provided the required consent.

Where the GDPR applies, consent-based processing is based on Art. 6(1)(a) GDPR.

 

14. Newsletter and Email Marketing

If you subscribe to our newsletter or other marketing emails, we may use your email address and any additional information you voluntarily provide to send you the relevant communications.

Where required, marketing emails are sent on the basis of your consent.

Where the GDPR applies, consent-based processing is based on Art. 6(1)(a) GDPR.

You may unsubscribe at any time with effect for the future, in particular by using the unsubscribe link included in our marketing emails.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Where applicable law permits marketing communications on another legal basis, we may rely on that basis subject to the requirements of the applicable law.

 

15. Recipients and Service Providers

We disclose personal data only where this is necessary, permitted by law or required by law.

Depending on how you use our website, recipients may include:

• website hosting and infrastructure providers;

• Wix and technical service providers used in connection with Wix;

• payment service providers;

• shipping and logistics providers for physical orders;

• IT and technical service providers;

• accounting and tax service providers;

• professional advisers where necessary; and

• public authorities where disclosure is required by law.

Where service providers process personal data on our behalf, appropriate data processing arrangements are used where required by applicable law.

Some providers may also process personal data as independent controllers for their own legally permitted purposes.

 

16. International Data Transfers

Because we operate an online business and use international service providers, personal data may be processed in countries other than the country in which you reside.

In particular, the use of Wix and other service providers may involve the processing or transfer of personal data outside the European Union (“EU”) and European Economic Area (“EEA”).

Where the GDPR applies, international transfers of personal data are carried out only in accordance with the requirements of Chapter V GDPR.

Depending on the destination and recipient, this may include:

• a valid adequacy decision by the European Commission;

• Standard Contractual Clauses approved by the European Commission;

• an applicable recognised data privacy framework; or

• another legally recognised transfer mechanism.

Wix.com Ltd. is headquartered in Israel. Israel is currently recognised by the European Commission as providing an adequate level of protection for personal data.

Wix may also process or transfer information through group companies, data centres and service providers located in other countries, including the United States.

Where required, appropriate safeguards are used for such international transfers.

 

17. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.

The applicable retention period depends on the type of information and the purpose for which it is processed.

Order, payment, invoice and contractual information may need to be retained after completion of an order in order to comply with applicable commercial, accounting and tax retention requirements.

Once the applicable retention period has expired and there is no other lawful reason to retain the information, it will be deleted or otherwise handled in accordance with applicable law.

 

18. Your Privacy Rights

Depending on where you live and which privacy laws apply to you, you may have certain rights regarding your personal data.

Where the GDPR applies, these may include the right to:

• request access to your personal data;

• request correction of inaccurate or incomplete personal data;

• request deletion of your personal data;

• request restriction of processing;

• receive certain personal data in a portable format;

• object to certain processing;

• withdraw consent at any time with effect for the future; and

• lodge a complaint with a competent data protection authority.

Where processing is based on Art. 6(1)(f) GDPR, you may have the right to object to that processing in accordance with the statutory requirements.

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Residents of other jurisdictions may have additional privacy rights under the laws applicable to them.

To exercise your privacy rights, please contact:

hello@janinagold.com

We may need to verify your identity before processing certain requests where required or permitted by law.

 

19. Additional Rights Under Local Privacy Laws

Depending on your place of residence, local privacy laws may provide you with additional rights regarding your personal information.

These may include, where applicable, rights to request access, correction or deletion of personal information, receive information about how personal information is used or disclosed, obtain a portable copy of certain information, object to or restrict certain processing, withdraw consent or opt out of certain uses of personal information.

Where applicable law grants you rights in addition to those described in this Privacy Policy, we will respect those rights in accordance with the relevant legal requirements.

Nothing in this Privacy Policy is intended to limit mandatory privacy rights available to you under applicable law.

 

20. No Sale of Personal Data

We do not sell personal data to third parties in exchange for monetary payment.

Certain privacy laws may define terms such as “sale”, “sharing” or targeted advertising more broadly than an ordinary sale for money.

Where activities on our website fall within such definitions and applicable law provides you with an opt-out right, we will provide the required choices or mechanisms.

 

21. Children's Privacy

Our website and online shop are not specifically directed at children.

We do not knowingly seek to collect personal data from children in circumstances where parental or guardian consent would be required under applicable law.

If you believe that a child has provided personal data to us in violation of applicable law, please contact us at hello@janinagold.com so that we can review the matter and take appropriate action.

 

22. Right to Lodge a Complaint

Where the GDPR applies, you have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.

You may in particular contact a supervisory authority in the EU Member State of your habitual residence, your place of work or the place of the alleged infringement.

Depending on your place of residence, you may also have the right to contact another competent privacy or data protection authority under applicable local law.

 

23. Data Security

We take appropriate technical and organisational measures within our area of responsibility to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

The technical infrastructure and security measures of the service providers we use, including our website and payment service providers, also form part of the overall technical environment through which your information is processed.

However, no method of transmission over the internet or electronic storage can guarantee absolute security.

 

24. Changes to This Privacy Policy

We may update this Privacy Policy where necessary, for example if we change the services or technologies used on our website or if applicable legal requirements change.

The current version will be published on this website.

Where required by applicable law, we will provide additional notice of material changes.

Last updated: September 2026