Privacy Policy
Last updated: September 2026
1. Data Controller
The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Janina Gold
Karwendelstr. 1
82194 Gröbenzell
Germany
Email: hello@janinagold.com
Phone: +49 (0)15758293353
2. General Information on Data Processing
Protecting your personal data is important to us.
Personal data means any information relating to an identified or identifiable natural person. This may include, for example, your name, address, email address, telephone number, IP address, and order and payment information.
We process personal data only to the extent necessary or permitted for providing our website and online shop, processing orders and contracts, communicating with you, complying with legal obligations, or based on consent you have given.
Processing is carried out in particular on the basis of Article 6(1) GDPR.
Depending on the processing activity, the following legal bases may apply:
-
Article 6(1)(a) GDPR – Consent;
-
Article 6(1)(b) GDPR – Taking steps prior to entering into a contract and performing a contract;
-
Article 6(1)(c) GDPR – Compliance with a legal obligation;
-
Article 6(1)(f) GDPR – Pursuit of legitimate interests.
-
3. Hosting and Website Platform – Wix
This website was created using Wix and is operated through services provided by Wix.
In connection with the provision and use of our website, personal data may be processed by Wix.
This may include, in particular:
-
IP address;
-
Browser and device information;
-
Date and time of access;
-
Pages and content accessed;
-
Technical log and server data;
-
Cookie and consent information;
-
Contact details;
-
Order data; and
-
Other information you submit through our website.
Processing takes place primarily to ensure the technical operation and security of the website and, depending on the Wix features used, to process orders, facilitate communication, perform analytics, and manage the website.
Where processing is necessary to provide the website, it is carried out in particular on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in providing a secure, stable, and economically efficient online service.
Where processing is necessary for the performance of a contract or to take steps prior to entering into a contract, it is based on Article 6(1)(b) GDPR.
Where processing requires your consent, it is based on Article 6(1)(a) GDPR.
Further information about data processing by Wix can be found in the Wix Privacy Policy.
4. Server Log Files
When you access our website, technically necessary information may be processed automatically.
This may include, in particular:
-
IP address;
-
Date and time of access;
-
Page or file accessed;
-
Amount of data transferred;
-
Browser type and version;
-
Operating system used;
-
Referrer URL; and
-
Technical information about the device used.
This processing is carried out primarily to ensure the technical operation, stability, and security of our website and to detect and prevent misuse and technical disruptions.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable operation of our website.
5. Online Shop and Orders
When you place an order through our online shop, we process the personal data necessary to handle and fulfill your order.
This may include, in particular:
-
First and last name;
-
Billing address;
-
Shipping address for physical products;
-
Email address;
-
Telephone number, where applicable;
-
Products ordered;
-
Order number;
-
Date and time of the order;
-
Billing and payment information; and
-
Information relating to the delivery of digital products, where applicable.
Processing is carried out for the performance of the contract concluded with you and to take steps prior to entering into a contract, in accordance with Article 6(1)(b) GDPR.
Where we are required to retain certain order, invoice, or business records under tax or commercial law, processing is based on Article 6(1)(c) GDPR.
6. Digital Products and Downloads
When you purchase digital products, particularly digital sewing patterns and e-books, we process the data necessary to complete the order and provide access to the download.
This may include your contact details, order information, payment status, and information relating to the provision of or access to the digital product.
Processing is based on Article 6(1)(b) GDPR for the performance of the contract.
Where certain information must be retained to comply with statutory documentation or retention obligations, processing is additionally based on Article 6(1)(c) GDPR.
7. Payment Processing
To process payments, personal data may be transmitted to the payment service provider you select.
Depending on the payment methods actually offered during checkout, these may include payment service providers such as PayPal, Stripe, or payment services integrated through Wix.
The following data may be processed, in particular:
-
Name;
-
Billing address;
-
Email address;
-
Payment amount;
-
Currency;
-
Order number;
-
Payment status; and
-
Other information necessary to process the payment.
Processing is generally carried out for the performance of the contract pursuant to Article 6(1)(b) GDPR.
The respective payment service provider's privacy policy also applies to any further processing of your data by that provider.
As a general rule, we receive only the payment information necessary to process your order. Complete payment details, such as credit card numbers, are generally not stored by us where payment processing is handled directly by the respective payment service provider.
8. Contacting Us
If you contact us by email, through our contact form, or by other means, we process the information you provide in order to handle your inquiry.
This may include your name, email address, the content of your message, and any additional information you voluntarily provide.
If your inquiry relates to an existing or prospective contract, processing is based on Article 6(1)(b) GDPR.
For other inquiries, processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in appropriately handling and responding to inquiries.
9. Customer Accounts / Website Membership
Where our website allows you to create a customer account or website membership, we process the data necessary for this purpose.
This may include your name, email address, login details, order history, and other information provided by you.
Where the customer account is used for processing contracts, processing is based on Article 6(1)(b) GDPR.
Where creating a customer account is voluntary, processing is based on the applicable legal basis in each case.
You may request the deletion of your customer account, provided that no statutory retention obligations or other legal grounds prevent deletion.
10. Cookies and Similar Technologies
Our website uses cookies and similar technologies.
Cookies are small pieces of information that may be stored on or accessed from your device.
Some cookies and comparable technologies are technically necessary to provide our website and certain features you have requested.
Other technologies may be used, for example, for analytics, functionality, or marketing purposes.
Where consent is required to store or access information on your device, this will only take place after you have made the relevant selection through our cookie banner.
You can change or withdraw your consent at any time, with effect for the future, through the cookie settings provided on our website.
Consent may not be required for strictly necessary technologies where the applicable legal requirements are met.
The processing of personal data in connection with cookies or similar technologies is additionally governed by the relevant provisions of the GDPR.
11. Cookie Consent Management Through Wix
We use the cookie consent management features provided by Wix.
Through the cookie banner, you can make your choices regarding non-essential cookies and comparable technologies.
Your preferences may be stored so that your cookie settings can be taken into account during future visits.
You can change your decision at any time, with effect for the future, through the cookie settings provided on our website.
12. Analytics and Marketing Services
Where we use analytics, statistical, or marketing services that are not strictly necessary for operating the website, these services are generally activated only after you have provided the relevant consent, where such consent is legally required.
In this case, the legal basis for the associated processing of personal data is Article 6(1)(a) GDPR.
You may withdraw your consent at any time, with effect for the future, through the cookie settings.
The specific analytics or marketing services used on our website depend on the features and integrations currently enabled.
13. Embedded Content and External Services
Our website may incorporate content or features from external providers, such as videos, maps, social media content, or other third-party services.
When using such features, data, particularly your IP address and technical device information, may be transmitted to the respective provider.
Where consent is required to activate such a service, the relevant content will generally only be activated after you have provided your consent.
The legal basis for processing that requires consent is Article 6(1)(a) GDPR.
14. Newsletter and Email Marketing
If you subscribe to our newsletter or other marketing emails, we use your email address and, where applicable, additional information voluntarily provided by you to send the relevant communications.
These communications are generally sent on the basis of your consent pursuant to Article 6(1)(a) GDPR, unless another legal basis applies.
You may withdraw your consent at any time, with effect for the future, particularly by using the unsubscribe link included in our marketing emails.
The lawfulness of processing carried out on the basis of your consent before its withdrawal remains unaffected.
15. Recipients of Personal Data
We disclose personal data only where legally permitted or required.
Recipients may include, in particular:
-
Hosting and website service providers;
-
Wix and technical service providers associated with Wix;
-
Payment service providers;
-
Shipping and logistics providers for physical orders;
-
IT and technical service providers;
-
Tax and accounting service providers; and
-
Public authorities where disclosure is legally required.
Where service providers process personal data on our behalf, this is carried out in accordance with applicable legal requirements.
16. Transfers of Data to Third Countries
In connection with the use of Wix and, where applicable, other service providers we engage, personal data may also be processed outside the European Union or the European Economic Area.
Such transfers take place only in compliance with the legal requirements of the GDPR.
This may include transfers based on an adequacy decision by the European Commission or appropriate safeguards, such as the Standard Contractual Clauses adopted by the European Commission.
17. Data Retention
We retain personal data only for as long as necessary for the respective processing purpose or as required by statutory retention obligations.
Data relating to orders and contracts may be retained beyond the actual performance of the contract, particularly due to retention requirements under commercial and tax law.
Once the applicable retention period has expired, the data will be deleted unless there is another legal basis for its continued processing.
18. Your Rights
Subject to the applicable legal requirements, you have, in particular, the right to:
-
Access the personal data we process about you;
-
Request the correction of inaccurate or incomplete data;
-
Request the deletion of your personal data;
-
Request the restriction of processing;
-
Data portability;
-
Object to certain processing activities; and
-
Withdraw consent previously given, with effect for the future.
Where processing is based on Article 6(1)(f) GDPR, you may object to the processing subject to the applicable legal requirements.
You may withdraw consent at any time, with effect for the future.
To exercise your rights, please contact us at:
19. Right to Lodge a Complaint With a Supervisory Authority
In accordance with applicable law, you have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.
In particular, you may contact the data protection supervisory authority in the country or region of your habitual residence, your place of work, or the place of the alleged infringement.
20. Security
We implement appropriate technical and organizational measures, within our capabilities, to protect personal data against loss, misuse, unauthorized access, alteration, or unauthorized disclosure.
The technical infrastructure and security measures of the service providers we use, particularly our website and payment service providers, may also play a role in this regard.
21. Changes to This Privacy Policy
We may update this Privacy Policy if our website, the services we use, or applicable legal requirements change.
The current version published on this website shall apply.
Last updated: September 2026