Privacy Policy
1. Introduction
This privacy policy of Mr. Santos Classic Style GmbH informs you about the collection, processing and use of your personal data when you visit this website and when you shop in our online shop at https://www.mr-santos.com.
Protecting your privacy is important to us. We treat your personal data confidentially and in accordance with statutory data protection regulations and this Privacy Policy. Mr. Santos Classic Style GmbH operates this online shop and website, including all related information, content, functions, tools, products, and services, to provide you, the customer, with a personalized shopping experience (the "Services"). These pages and the shop are powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, or disclose personal information when you visit, use, or make a purchase or other transaction using the Services, or otherwise communicate with us. If there is a conflict between our terms and conditions and this Privacy Policy, this Privacy Policy will govern with respect to the collection, processing, and disclosure of your personal information.
Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and agree to the collection, use, and disclosure of your information as described in this Privacy Policy.
2. Person responsible
Responsible for data processing within the meaning of the GDPR is:
Mr. Santos Classic Style GmbH
Eschershauser Weg 23 B
14163 Berlin
Management: Manuel Ruhnau dos Santos
Email: info (at) mr-santos.com
Website: www.mr-santos.com
3. Subject of data protection
The subject of data protection is personal data. This is any information relating to an identified or identifiable natural person (Article 4 No. 1 GDPR). When we use the term "personal data," we refer to information that identifies you or another person or can be directly associated with you. Personal data does not include information that has been collected anonymously or anonymized in such a way that identification or association with you is not possible. Depending on how you interact with the Services, where you live, and as permitted or required by applicable law, we may collect or process the following categories of personal data, including inferences drawn from that personal data:
- Contact information including name, postal address, billing address, delivery address, telephone number and email address.
- Financial data including credit, debit card and financial account numbers, payment card information, financial account information, transaction details, payment type, payment confirmation and other payment details.
- Account information including username, password, security questions, configurations and settings.
- Transaction information including the items you view, add to cart, wishlist, purchase, return, exchange, or cancel, and your past transactions.
- Communications with us, including the information you provide when communicating with us, for example when you submit a customer support request.
- Device information including information about the device, browser or network connection, IP address and other unique identifiers.
- Usage Information, including information about your interaction with the Services, including how and when you interact with or browse the Services.
4. Sources of personal data
We may collect personal information from the following sources:
- Directly from you We collect information when you create an account, access or use the Services, communicate with us, or otherwise provide us with your personal information.
- Automatically through the Services We collect data from, among other things, your device, when you use our products or services or visit our website, and through the use of cookies and similar technologies.
- From our service providers We collect data, among other things, when we instruct service providers to enable certain technologies and when they collect or process your personal data on our behalf.
- From our partners and other third parties
5. Automated data collection / server log files
When you visit our website, your browser automatically transmits technical data to our server. These server log files include:
- IP address
- Date and time of access
- accessed page/file
- Browser type and version
- Operating system
- Referrer URL
This data is used to ensure trouble-free operation, improve the service and ensure IT security.
Legal basis: Art. 6 (1) (f) GDPR
6. Cookies and similar technologies
Our website uses cookies and similar technologies to provide features, analyze usage, and display personalized advertising.
Types of cookies used:
- Technically necessary cookies
- Functional cookies (e.g. B. Login status)
- Analysis cookies (e.g. Google Analytics)
- Marketing cookies (e.g. B. to display personalized advertising)
Legal basis:
- Technically necessary cookies: Art. 6 (1) (f) GDPR
- All other cookies: Art. 6 (1) (a) GDPR (consent)
Cookie settings can be adjusted or revoked via our Consent Manager.
7. Use of our webshop
When you use our online shop, we process your personal data to process your order, communicate with customers and fulfill legal requirements.
Data collected:
- Customer account: name, email address, address, telephone number, voluntary information such as measurements and order options
- Order: Products, delivery and billing address, payment details
- Communication about the order
Legal basis: Art. 6 (1) (b) GDPR (contract)
8. Use of your data
Depending on how you interact with us or which of the Services you use, we may use personal information for the following purposes:
- Providing, customizing, and improving the Services. We use your personal information to provide you with the Services. This includes, but is not limited to, fulfilling our contract with you, processing your payments, fulfilling your orders, remembering your configurations and the items you are interested in, sending you notifications related to your account, creating, maintaining, and otherwise administering your account, arranging shipping, facilitating returns and exchanges, allowing you to leave reviews, and creating a personalized shopping experience for you, for example, by recommending products based on your purchases. This may also include using your personal information to better customize and improve the Services.
- Marketing and Advertising. We use your personal information for marketing and advertising purposes, such as sending marketing and promotional messages by email, text message, or postal mail, and showing you online advertisements for products or services on the Services or other websites, including based on items you have previously purchased or added to your shopping cart and other activities related to the Services.
- Security and fraud prevention. We use your personal information to authenticate your account, provide a secure payment and shopping experience, detect, investigate, or take action regarding potentially fraudulent, illegal, unsafe, or malicious activities, protect public safety, and maintain the security of our Services. If you choose to use the Services and register an account, you are responsible for protecting your account credentials. We strongly recommend that you do not share your username, password, or other credentials with anyone.
- Communicating with you. We use your personal information to provide you with customer support and effective services, respond to your inquiries promptly, and maintain our business relationship with you.
- Legal reasons. We use your personal information to comply with applicable law or respond to lawful legal processes, including requests from law enforcement or regulatory authorities; to investigate or participate in civil investigations, potential or actual litigation or other adversarial proceedings; and to investigate potential violations of our terms or policies or to enforce the terms and policies.
9. Disclosure of personal data
Under certain circumstances, we may share your personal information with third parties for legitimate purposes in accordance with this Privacy Policy.
Data is only passed on:
- with consent (Art. 6 (1) (a) GDPR)
- for the performance of the contract (Art. 6 (1) (b) GDPR)
- in case of legal obligation (Art. 6 para. 1 lit. c GDPR)
- in case of legitimate interest (Art. 6 (1) (f) GDPR)
Recipients can... These may include: payment service providers, shipping companies, IT service providers, accounting, and authorities. Such circumstances may include:
- For Shopify, these are vendors and other third parties who provide services on our behalf (e.g., IT management, payment processing, data analysis, customer support, cloud storage, fulfillment, and shipping).
- We share personal information with business and marketing partners who provide marketing services and display ads to you. For example, we use Shopify to support personalized advertising with third-party services based on your online activity across retailers and websites. Our business and marketing partners use your information in accordance with their own privacy policies. Depending on where you live, you may have the right to instruct us not to share information about you to display targeted ads and marketing based on your online activity across retailers and websites.
- When you request or otherwise consent to us sharing certain information with third parties, for example to deliver products to you or when you use social media widgets or login integrations.
- We share personal information with our affiliates or otherwise within our group of companies.
- In connection with a business transaction such as a merger or bankruptcy, to comply with applicable legal obligations (including responding to subpoenas, search warrants, and similar requests), to enforce applicable terms of service or policies, and to protect or defend the Services, our rights, the rights of our users, or others.
10. Payment processing
To process payments, your data will be forwarded to:
- Shopify Payments (incl. Stripe) – https://www.shopify.com/legal/privacy
- PayPal (Europe) S.à rl – https://www.paypal.com/de/webapps/mpp/ua/privacy-full
These service providers process data exclusively for payment processing.
Legal basis: Art. 6 (1) (b) GDPR
11. Contact
If you contact us by email, telephone or form, we will save your details (e.g. B. Name, email, telephone number, message) for processing and follow-up questions.
Legal basis: Art. 6 (1) (b) or (f) GDPR
12. Newsletter
When you subscribe to our newsletter, we will use your email address to send you regular updates. Registration is done via the double opt-in process. We also store your IP address and timestamp for record-keeping purposes.
Legal basis: Art. 6 (1) (a) GDPR
You can unsubscribe at any time using the link in every email.
13. Analysis tools / Google Analytics
Our website uses Google Analytics with IP anonymization. Provider: Google Ireland Ltd. The analysis is carried out pseudonymously to optimize our content.
Legal basis: Art. 6 (1) (a) GDPR
Data transfer to third countries (e.g. B. USA) is based on standard contractual clauses.
Data storage period: 14 months
Further information: https://policies.google.com/privacy
14. Embedded third-party content
We integrate third-party content such as Google Fonts, Google Maps, YouTube videos, or social plugins. When you access this content, your IP address may be transmitted to third parties.
Legal basis: Art. 6 (1) (f) GDPR (user-friendliness)
15. Third-party websites and links
The Services may provide links to websites or other online platforms operated by third parties. If you follow links to websites that are not affiliate sites or not controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee, and are not responsible for, the privacy or security of such websites, including the accuracy, completeness, or reliability of any information located on such websites. Information you provide in public or semi-public places, including information you share on third-party social networking platforms, may also be viewed by other users of the Services and/or users of such third-party platforms, without limitation regarding their use by us or any third party. Our inclusion of such links does not imply our endorsement of the content of such platforms or their owners or operators, unless explicitly stated on the Services.
16. Hosting by Shopify
Our website is hosted by Shopify International Ltd. (Ireland/Canada/USA). Shopify is our data processor pursuant to Art. 28 GDPR.
Transfers to third countries are carried out in accordance with Art. 46 GDPR on the basis of standard contractual clauses.
Data that you submit to the Services will be shared with Shopify, as well as with third parties that may be located in countries other than your country of residence, to provide and improve the Services for you. To protect, expand, and improve our business, we also use certain advanced Shopify features that incorporate data and information from your interactions with our store, with other merchants, and with Shopify. To provide these advanced features, Shopify may use personal data collected about your interactions with our store, other merchants, and Shopify. In these circumstances, Shopify is responsible for processing your personal data, including responding to your requests to exercise your rights regarding the use of your personal data for these purposes. For more information about how Shopify uses your personal data and your rights, please see the Shopify Consumer Privacy Policy . Depending on where you reside, you may be able to exercise certain rights with respect to your personal data listed here. Link to the Shopify Privacy Portal .
More information: https://www.shopify.com/legal/privacy
17. Automated decisions and profiling
We do not make any automated decisions within the meaning of Art. 22 GDPR that have legal effect for you.
However, our processor Shopify uses limited automated decision-making to prevent fraud:
- Temporary IP blocks, e.g. B. in the case of multiple failed payments
- Temporary credit card blocks if they are associated with suspicious IPs
These measures have no legal consequences for you.
18. Storage period
Personal data will only be stored for as long as necessary to fulfill the purpose or as required by law. After that, it will be deleted or anonymized.
Purpose-bound data (e.g. B. accounting) we store within the framework of legal retention obligations (e.g. B. 6–10 years).
19. Your rights
Depending on where you live, you may have some or all of the rights listed below regarding your personal data. However, these rights are not absolute, may only apply in limited circumstances, and in certain cases, we may refuse your request to the extent permitted by law.
- Information (Art. 15 GDPR)
- Correction (Art. 16 GDPR)
- Deletion (Art. 17 GDPR)
- Restriction (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection (Art. 21 GDPR)
You may have the right to request that we stop or restrict the processing of personal data for certain purposes.
- Revocation of consent (Art. 7 para. 3 GDPR)
If we rely on consent to process your personal data, you have the right to withdraw that consent. Withdrawing your consent will not affect the lawfulness of processing based on your consent before its withdrawal.
You can exercise these rights where appropriate in the Services or by contacting us using the contact details provided below. For more information about how Shopify uses your personal data and your rights, including your rights regarding the data Shopify processes, please visit https://privacy.shopify.com/en.
Please contact: info (at) mr-santos.com
20. Right to complain
You have the right to lodge a complaint with a supervisory authority. If you have any complaints about how we process your personal data, please contact us using the contact details provided below. Depending on your residence, you have the right to object to our decision by contacting us using the contact details provided below or to lodge your complaint with the relevant data protection authority. A list of relevant data protection authorities is available for the European Economic Area. If you would like to consult it, you can do so here .
You will not suffer any disadvantage by exercising these rights. Where permitted or required by applicable law, we may need to verify your identity before processing your requests. In accordance with applicable law, you may designate an agent to submit requests to exercise your rights on your behalf. Before accepting such a request from an agent, we will require that agent to provide proof that you have authorized them to act on your behalf. This may require you to confirm your identity directly with us. We will respond to your request expeditiously, subject to applicable law.
21. International broadcasts
Please note that we may transfer, store and process your personal information outside of your country of residence.
When we transfer your personal data outside the European Economic Area or the United Kingdom, we rely on accepted transfer mechanisms such as the European Commission's Standard Contractual Clauses or equivalent contracts issued by the relevant UK authority, unless the transfer is to a country that has been proven to provide an adequate level of protection.
22. Data security and storage of your data
Please note that no security measures are perfect or impenetrable, and we therefore cannot guarantee "perfect security." Furthermore, information you send us may also be exposed to risks during transmission. We recommend that you avoid using insecure channels when transmitting sensitive or confidential information to us.
However, we implement appropriate technical and organizational measures to protect your data from loss, manipulation, or unauthorized access. These measures are regularly reviewed and adapted to new security standards.
23. Changes to this Privacy Policy
We reserve the right to amend this statement in the event of changes to the legal situation or our services. The most current version is available on our website at any time.
24. Contact
If you have any questions about our data protection practices or this Privacy Policy, or if you wish to exercise any of your rights, please contact us by email at info@mr-santos.com or by mail at Mr.Santos Classic Style GmbH, Eschershauser Weg 23B, Berlin, 14163, DE. For the purposes of applicable data protection laws, we are the data controller of your personal data.
As of July 2025