Privacy policy

1. Controller

Justido GmbH, Kurfürstendamm 37, 10719 Berlin, Germany — Amtsgericht Charlottenburg, HRB 250605 B, VAT ID DE285976038. Lillian Lavalle is a brand of Justido GmbH.

For anything concerning your data: hello@lillianlavalle.com. No data protection officer has been appointed, as the legal requirements for one are not met.

2. Hosting and server logs

The website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you open a page, the server processes technically necessary data: IP address, date and time, the page requested, browser and operating system, referring page. These logs serve the secure and stable operation of the website and are deleted after a short period. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operating the website).

Vercel also processes data in the United States. This is covered by the EU Commission's Standard Contractual Clauses in our data processing agreement with Vercel and by Vercel's certification under the EU-US Data Privacy Framework.

Domain name resolution (DNS) is provided by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. No website content is routed through Cloudflare.

3. Cookie-free analytics

We use Vercel Web Analytics to see how many people visit and which pages they open. It sets no cookies and stores no identifiers in your browser; the IP address is used only for counting and is not stored. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in anonymous audience measurement).

4. Waitlist

When you join the waitlist, we store your e-mail address, your first name if you give it, the time you signed up and the time you confirmed (double opt-in). After signing up you receive an e-mail with a confirmation link; you are on the list only once you click it.

Purpose: to send you one e-mail when the first capes are ready, and nothing else. Legal basis: your consent, Art. 6(1)(a) GDPR. You can withdraw it at any time — with the unsubscribe link in every e-mail or by writing to hello@lillianlavalle.com. After withdrawal we delete your data from the list. Processing carried out before withdrawal remains lawful.

The list is kept with MailerLite, MailerLite Limited, 88 Harcourt Street, Dublin 2, D02 DK18, Ireland, under a data processing agreement. MailerLite states that its data storage centre is located in the European Union (ISO 27001). See MailerLite's privacy policy.

5. E-mail

If you write to hello@lillianlavalle.com, we process what you send us in order to reply (Art. 6(1)(b) or (f) GDPR). Our mailbox is hosted by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, with storage in the EU. We delete correspondence once your request is settled and no statutory retention period applies.

6. Cookies

This website sets a single cookie, and only when you switch the language: "NEXT_LOCALE" remembers your choice for one year. It contains no personal data and is technically necessary for the function you asked for. There are no advertising or tracking cookies, and therefore no cookie banner.

7. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You may withdraw any consent you have given at any time with effect for the future (Art. 7(3)). Just write to hello@lillianlavalle.com.

You may also lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin, Germany, www.datenschutz-berlin.de.

8. Changes

If the website changes — for instance when a shop is added one day — we will update this policy. The version published here applies.