Privacy policy
1. Controller
The controller responsible for data processing on www.urbancitystyles.net, www.urbancitystyles.de and www.urbancitystyles.fr is:
Urban City Styles Retail Limited
Franz-Joseph-Str. 11
80801 Munich
Germany
Email: info@urbancitystyles.net
2. Hosting and shop system
Our online shop is operated on the Shopify platform (Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland). Shopify processes your data on our behalf under a data processing agreement. Data may also be transferred to Shopify Inc. in Canada and to service providers in the USA; Canada has an adequacy decision of the European Commission, and transfers to the USA are based on the EU-U.S. Data Privacy Framework or standard contractual clauses. Legal basis: Art. 6(1)(b) and (f) GDPR.
In addition, Shopify uses certain customer and order data under its own responsibility to improve its services, prevent fraud and personalise offers and advertising within the Shopify network (Shopify Network Intelligence). The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and efficient operation of our shop. You may object to this processing in accordance with Art. 21 GDPR. Further information: shopify.com/legal/privacy.
3. Access data and cookies
When you visit our shop, technically necessary data such as IP address, date and time of access, browser and device information are processed in order to deliver the website securely (Art. 6(1)(f) GDPR). We use technically necessary cookies, for example for the shopping cart and checkout (Section 25(2) TDDDG). Cookies and similar technologies for analytics or marketing are only used with your consent, which you can give or refuse via our cookie banner and withdraw at any time with effect for the future (Art. 6(1)(a) GDPR, Section 25(1) TDDDG).
4. Google Analytics 4 and Google Ads
With your consent, we use Google Analytics 4 to analyse how our shop is used and Google Ads conversion tracking to measure the success of our advertising. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Using cookies and similar identifiers, information such as pages viewed, device and browser information, approximate location and purchase events is processed; Google Analytics 4 does not store IP addresses. Data may be transferred to Google LLC in the USA, which is certified under the EU-U.S. Data Privacy Framework. Legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time via the cookie settings. Further information: policies.google.com/privacy.
5. Orders and customer account
To process your order we process your name, billing and shipping address, email address, telephone number (if provided), the ordered items and payment information (Art. 6(1)(b) GDPR). If you create a customer account, your data is stored until you delete the account. You can also order as a guest.
6. Payment
Depending on the payment method you choose, the data required for payment is transmitted to the respective payment provider (e.g. Shopify Payments, Klarna, Apple Pay, Google Pay, EPS, Satispay, Twint). We never see or store your full card details. The privacy policy of the respective provider applies in addition. Legal basis: Art. 6(1)(b) GDPR; for fraud prevention also Art. 6(1)(f) GDPR.
7. Shipping
To deliver your order we pass your name and shipping address to the shipping company and to our logistics partners. Where necessary for delivery notifications, we also pass on your email address or telephone number (Art. 6(1)(b) GDPR).
8. Contact by email
If you contact us by email, we process your details to handle your request (Art. 6(1)(b) or (f) GDPR).
9. Newsletter and product recommendations
We only send you a newsletter with your consent (Art. 6(1)(a) GDPR). If you have bought from us, we may send you recommendations for similar products by email (Section 7(3) UWG, Art. 6(1)(f) GDPR). You can object to this at any time, for example via the unsubscribe link in every email, without incurring any costs other than the basic transmission costs.
10. Storage period
We delete your data as soon as it is no longer required for the purpose for which it was collected, unless statutory retention periods apply. Commercial and tax documents are retained for 6 or 10 years in accordance with the German Commercial Code (HGB) and the Fiscal Code (AO).
11. Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to withdraw any consent given at any time with effect for the future (Art. 7(3) GDPR). To exercise your rights, simply contact us at info@urbancitystyles.net.
Right to object: Where we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR). You may object to direct marketing at any time without giving reasons.
You also have the right to lodge a complaint with a data protection supervisory authority, for example the authority responsible for us: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.
12. Changes
We may update this privacy policy if our services or legal requirements change. The current version is always available on this page.
Last updated: November 2026