FEMKIT · Modekonstrukt GmbH

Last updated: September 2026

1. General Information

Thank you for your interest in FEMKIT and our online shop. Protecting your personal data is important to us. This Privacy Policy explains which personal data we process when you use our website, place orders, contact us, subscribe to our newsletter or use other functions of our online shop, and for which purposes such processing takes place.

Personal data means any information relating to an identified or identifiable natural person, for example name, address, email address, telephone number, IP address or order data.

We process personal data in accordance with the General Data Protection Regulation (GDPR), the German Telecommunications Digital Services Data Protection Act (TDDDG) and other applicable data protection laws.

2. Controller

The controller responsible for data processing on this website is:

Modekonstrukt GmbH
Danziger Straße 146
10407 Berlin
Germany

Managing Director: Cindy Schlobinsky
Telephone: +49 (0)30 24 35 51 67
Email: service[at]femkit.de
Website: femkit.de

Data protection contact: datenschutz[at]modekonstrukt.de

3. General Information on the Processing of Personal Data

We process personal data only insofar as this is necessary to provide our online shop, process orders and contracts, communicate with you, comply with legal obligations or for other purposes described in this Privacy Policy.

Depending on the processing activity, we rely in particular on Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (contract or pre-contractual measures), Art. 6(1)(c) GDPR (legal obligation) and Art. 6(1)(f) GDPR (legitimate interests).

Where information is stored on or accessed from your terminal device, permissibility is additionally governed by Section 25 TDDDG. For technologies that are not strictly necessary, this generally takes place only with your consent.

4. Provision of the Website and Server Log Data

When you use our website for purely informational purposes, technically necessary information transmitted by your browser or device to the systems used to provide the website is processed.

·         IP address

·         date and time of access

·         page or file accessed

·         referrer URL

·         browser type and browser version

·         operating system and device information

·         language settings

·         technical connection information

This data is processed in particular to technically provide the website, ensure secure and stable operation, identify errors and prevent attacks and abusive use.

Where processing is necessary to provide a digital service expressly requested by you, the legal basis is Art. 6(1)(b) GDPR; otherwise, the legal basis is Art. 6(1)(f) GDPR based on our legitimate interest in a secure, functional and stable website.

5. Shopify

Our online shop is operated using the Shopify e-commerce platform. For merchants in Europe, Shopify International Limited, Ireland, is generally the relevant Shopify contracting entity.

Shopify provides us in particular with the technical infrastructure for our online shop, order processes, customer accounts, checkout, payment integrations and other e-commerce functions.

When using the shop, Shopify may process in particular contact details, billing and shipping addresses, order data, customer account data, payment and transaction information, IP address as well as device, browser and usage information.

Where Shopify processes personal data on our behalf, this takes place in accordance with the applicable data protection agreements with Shopify. Shopify may use affiliated companies and subprocessors to provide its services. According to Shopify, personal data of customers from the EEA is initially processed by Shopify International Limited in Ireland.

6. Contact and Customer Service

If you contact us by email, telephone, through our online shop, via social media or by other means, we process the information you provide. This may include, in particular, your name, email address, telephone number, order number, order and return information, address and the content of your message.

If your enquiry relates to an existing contract or serves to initiate a contract, the legal basis is Art. 6(1)(b) GDPR. For other enquiries, processing is based on our legitimate interest in handling and responding to enquiries pursuant to Art. 6(1)(f) GDPR.

7. Orders and Contract Processing

When you place an order in our online shop, we process the personal data required to fulfil the order.

·         first and last name

·         email address

·         billing and shipping address

·         telephone number, where provided or required

·         items ordered, order number and order value

·         payment method and payment/transaction status

·         shipping and return information

·         communications relating to your order

 

The data is processed in particular to accept and process your order, process payments, arrange delivery, handle returns, refunds and complaints, communicate with customers and comply with statutory commercial and tax obligations.

The legal basis is Art. 6(1)(b) GDPR. Where statutory retention or documentation obligations apply, processing additionally takes place on the basis of Art. 6(1)(c) GDPR.

8. Customer Account

Where we offer the option to create a customer account, you may use it voluntarily. In connection with a customer account, we may process in particular your contact details, address details, order history and other information you store in the customer account.

Processing takes place to provide and manage the customer account and to simplify future orders on the basis of Art. 6(1)(b) GDPR. Where our shop allows orders without a customer account, creating a customer account is not required to place an order.

9. Shipping and Delivery

To fulfil your order, we disclose the personal data required for delivery to the respective shipping or logistics service provider. This includes in particular your name, delivery address and, where required for the specific shipping method, telephone number, email address and shipping information.

For our shipping processes, we use in particular Post & DHL Shipping and DHL Express Commerce. The processing and disclosure of data required for delivery takes place on the basis of Art. 6(1)(b) GDPR.

Where additional contact details are used for optional delivery notifications or comparable additional services, this takes place only in accordance with the applicable data protection requirements.

10. Returns, Withdrawals and Complaints

If you submit a return, withdrawal or complaint, we process the data required for this purpose. This may include in particular your name, contact details, order number, affected items, reason for return, shipping information, photographs in the case of complaints and your further communications with us.

For technical support in processing returns, we use a returns solution integrated into Shopify (easyReturns).

Processing takes place for the performance of the contract, including reversal, reimbursement and handling of complaints, on the basis of Art. 6(1)(b) GDPR and, where required, for compliance with legal obligations pursuant to Art. 6(1)(c) GDPR.

11. Payment Processing

We use payment service providers to process payments. The payment methods actually available may depend in particular on your country, your device and the respective order. Payment service providers receive the information required to execute, authorise and process the respective payment.

11.1 Shopify Payments

A substantial part of the payment methods offered in our shop is provided through Shopify Payments. Depending on availability and region, these may include in particular Visa, Mastercard, Maestro, American Express, UnionPay, Apple Pay, Google Pay, Shop Pay, Bancontact, BLIK, EPS and Klarna, as well as other local payment methods provided through Shopify Payments.

During payment processing, data such as your name, billing details, payment information, transaction information, IP address and other information required for payment and fraud checks may be processed. The legal basis is Art. 6(1)(b) GDPR.

11.2 PayPal

We offer payment via PayPal. For users in the European Economic Area, the provider is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg.

If you select PayPal as your payment method, the data required to process the payment is transmitted to PayPal. PayPal is independently responsible under data protection law for its subsequent processing. The legal basis for our transmission of data for payment processing is Art. 6(1)(b) GDPR.

11.3 Klarna

Depending on country and availability, we offer payment methods provided by Klarna. The provider is Klarna Bank AB (publ), Sveavägen 46, SE-111 34 Stockholm, Sweden.

If you select a Klarna payment method, contact, order, identification, payment, device and transaction data may in particular be transmitted to Klarna. Klarna may use data, among other things, for payment processing, identity verification, fraud prevention and, where required for the selected payment method, assessment of creditworthiness.

The legal basis for our transmission of data required for payment processing is Art. 6(1)(b) GDPR. Klarna's privacy provisions apply to further processing by Klarna.

12. Cookies and Similar Technologies

We use cookies and similar technologies on our website. Cookies are small pieces of information that are stored on your terminal device or may enable access to information stored there.

12.1 Categories

·         Necessary technologies: required for the shop and essential functions such as the shopping cart, checkout, security, language settings or privacy settings to work.

·         Preference technologies: may be used to store settings selected by you.

·         Statistics technologies: may be used to analyse the use of our shop.

·         Marketing technologies: may be used to measure advertising performance and tailor advertising to interests.

For cookies and comparable technologies that are not technically necessary, we obtain your consent. The legal basis for storing information on or accessing information from your terminal device is Section 25(1) TDDDG; subsequent processing of personal data generally takes place on the basis of your consent pursuant to Art. 6(1)(a) GDPR.

For technologies that are strictly necessary, no consent is required pursuant to Section 25(2) TDDDG, provided that the statutory requirements are met.

13. Consent Management with Consentmo

We use Consentmo GDPR Compliance to manage your cookie and privacy settings. The provider is iSense Ltd., 4 Prof. Georgi Bradistilov St., Entrance A, 4th Floor, 1700 Sofia, Bulgaria, trading under the name Consentmo.

Consentmo allows you to accept or reject non-essential technologies and to configure your privacy settings. In this context, your consent decision, technical information, timestamps, browser and device information as well as information required to document and implement your decision may in particular be processed.

To this extent, Consentmo processes personal data of shop visitors as a processor on our behalf. Storing your consent decision is necessary so that we can respect your selection and comply with data protection accountability obligations.

Where processing is necessary to comply with legal accountability obligations, it is based on Art. 6(1)(c) GDPR; otherwise, it is based on our legitimate interest in legally compliant and user-friendly consent management pursuant to Art. 6(1)(f) GDPR.

The website is configured so that non-essential technologies are generally not enabled before the corresponding consent has been given. You can manage your choices through the privacy settings provided on the website.

14. Meta – Facebook and Instagram

We use Meta services to advertise our offering and measure the success of our advertising activities. This may include technologies relating to the Facebook and Instagram platforms. For users in the European Economic Area, the provider is generally Meta Platforms Ireland Limited, Ireland.

As part of the Meta integration we use, information about the use of our shop and certain events, such as page views, product views, shopping cart actions or purchases, may be transmitted to Meta. According to our current Shopify configuration, the integration operates both via web technologies and server-side.

Meta may use this data in particular to measure advertising campaigns, attribute conversions, create audiences and – depending on your settings with Meta – personalise advertising.

Where information is stored on or accessed from your terminal device for these purposes and personal data is processed for marketing purposes, this takes place only with your consent pursuant to Section 25(1) TDDDG and Art. 6(1)(a) GDPR.

15. Google Ads, Google & YouTube and Customer Match

We use the Shopify Google & YouTube integration and Google Ads to present our products on Google, run advertising campaigns and measure their success. For users in the European Economic Area, Google Ireland Limited, Ireland, is generally the relevant Google provider.

Our Google integration includes in particular a connection to Google Ads and Google Merchant Center. In connection with Google Ads, information about the use of our shop and certain actions may be processed, for example to determine whether a user performed a particular action in our shop after clicking on an advertisement.

For consent management relating to Google advertising technologies, we use Google Consent Mode v2 in conjunction with our consent management solution. Non-essential Google marketing technologies are controlled in accordance with your consent.

15.1 Google Customer Match

Customer Match is enabled in our Google & YouTube integration. Where the applicable data protection requirements are met, customer data collected by us or via the integration may be used to create audiences for Google advertising services or to associate existing customer relationships with advertising campaigns.

Where such use requires consent, it takes place on the basis of Art. 6(1)(a) GDPR. Where information is stored on or accessed from your terminal device, Section 25(1) TDDDG also applies.

15.2 Google Analytics

We currently do not actively use Google Analytics for website analytics. The mere technical detection of Google Analytics cookie names by a cookie scanner does not mean that Google Analytics is actively used by us.

16. Newsletter and Direct Marketing

You can subscribe to our email newsletter. For this purpose, we process in particular your email address and any other information you provide voluntarily. We use this data to inform you about FEMKIT, new collections, products, promotions, offers and other news.

The legal basis for sending the newsletter is your consent pursuant to Art. 6(1)(a) GDPR. Where we use a confirmation procedure to safeguard the registration process, the time of registration and confirmation as well as technical verification data may also be processed.

You may withdraw your consent at any time with effect for the future, in particular via the unsubscribe link in our newsletter emails or by contacting us.

Where permitted by law, we may also send existing customers information about our own similar goods or services. You may object to such use of your email address at any time.

17. Newsletter Popup

A popup for subscribing to our newsletter may be displayed on our website. If you enter your email address there and submit the registration, we process this data in accordance with the newsletter provisions above. Merely closing the popup does not result in a newsletter subscription.

18. Product Availability Notifications

Where we offer a function on product pages that allows you to be notified when an item becomes available again, we process the contact details you provide for this purpose, in particular your email address, as well as information about the selected product.

For this purpose, we use a notification function integrated into our Shopify shop (Notify Me!). The data is used to send you the requested notification when the respective product becomes available again.

Processing takes place on the basis of your express request for the notification pursuant to Art. 6(1)(b) GDPR; where consent is requested, on the basis of Art. 6(1)(a) GDPR. Registering for a product availability notification does not automatically subscribe you to our general newsletter.

19. Instagram Content / Instafeed

Content from our Instagram presence may be displayed on our website via an application integrated into Shopify (Instafeed). In this context, content from Instagram or Meta may be embedded on our website or technically provided by the application.

Where loading such content establishes a direct connection to Meta or information is stored on or accessed from your terminal device, non-essential processing takes place only in accordance with your cookie and privacy settings.

Where processing is based on your consent, Section 25(1) TDDDG and Art. 6(1)(a) GDPR are the relevant legal bases.

20. Social Media Presences

FEMKIT maintains presences on social networks, in particular Instagram and Facebook. When you visit our social media pages, the privacy policies of the respective platform operator also apply.

If you contact us via social networks, we process the information you provide in order to handle your message. Depending on the content, the legal basis is Art. 6(1)(b) or (f) GDPR.

With regard to certain statistical information about the use of our Facebook and Instagram pages, Meta and we may be joint controllers under data protection law. We have only limited influence over the independent data processing carried out by the respective social networks.

21. Competitions

If we conduct competitions, we process the personal data required for participation. This may include in particular your name, social media username, email address and – if you win – contact details and/or shipping address.

The data is processed to conduct the competition, determine and notify the winners and, where applicable, send the prize. The legal basis is Art. 6(1)(b) GDPR.

Where a competition is conducted jointly with a partner and data is transmitted to that partner, we will inform you accordingly in connection with the respective competition. After the competition has ended, the data will be deleted unless statutory retention obligations or other lawful reasons require further processing.

22. Disclosure of Personal Data

We disclose personal data only where this is legally permitted or required. Disclosure may take place in particular:

·         where you have given your consent,

·         for the performance of a contract,

·         to payment service providers,

·         to shipping and logistics companies,

·         to technical service providers and processors,

·         for returns and customer service processing,

·         where we are legally required to do so, or

·         where this is necessary for the establishment, exercise or defence of legal claims.

 

Service providers generally receive only the data they require for the respective purpose. Where a service provider processes personal data on our behalf, we enter into a data processing agreement pursuant to Art. 28 GDPR where required.

23. Transfers of Data to Third Countries

When using certain service providers, personal data may be processed outside the European Economic Area. Such transfers take place only where the statutory requirements of Art. 44 et seq. GDPR are met.

Depending on the recipient, a transfer may in particular be based on an adequacy decision of the European Commission or on appropriate safeguards such as the Standard Contractual Clauses adopted by the European Commission.

Shopify International Limited is the primary Shopify contracting entity for merchants in the EMEA region. Shopify states that, for certain transfers to its Canadian parent company, it relies on the relevant adequacy decision and, for other international transfers, among other mechanisms, on Standard Contractual Clauses.

Where a third-country transfer takes place solely on the basis of your consent, we will inform you accordingly in connection with the relevant consent.

24. Withdrawal of Consent

Where processing is based on your consent pursuant to Art. 6(1)(a) GDPR, you may withdraw your consent at any time with effect for the future. This applies in particular to consent for newsletters and optional statistics and marketing technologies.

You can manage your cookie and tracking settings via the privacy settings provided on our website. Withdrawal does not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal.

25. Right to Object

Where we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right pursuant to Art. 21 GDPR to object to such processing on grounds relating to your particular situation.

Where personal data is processed for direct marketing purposes, you may object to such processing at any time. In this case, we will no longer process your personal data for these purposes.

To withdraw consent or object to processing, you may contact us in particular at datenschutz@modekonstrukt.de.

26. Your Data Protection Rights

Where the statutory requirements are met, you have in particular the following rights:

·         Right of access pursuant to Art. 15 GDPR regarding the personal data we process.

·         Right to rectification pursuant to Art. 16 GDPR of inaccurate data and completion of incomplete data.

·         Right to erasure pursuant to Art. 17 GDPR, provided that there are no statutory grounds requiring further processing.

·         Right to restriction of processing pursuant to Art. 18 GDPR.

·         Right to data portability pursuant to Art. 20 GDPR.

·         Right to object pursuant to Art. 21 GDPR.

·         Right to withdraw consent pursuant to Art. 7(3) GDPR with effect for the future.

To exercise your rights, you can contact us at datenschutz@modekonstrukt.de. We also provide pages for data protection requests through our privacy solution.

27. Right to Lodge a Complaint with a Supervisory Authority

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes data protection law. In particular, you may contact the supervisory authority of your habitual residence, your place of work or the place of our registered office.

28. Automated Decision-Making

As a general rule, we ourselves do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

Individual payment service providers may carry out automated checks under their own responsibility, in particular for fraud, identity or creditworthiness checks. This may be relevant in particular for certain Klarna payment methods. The respective payment service provider is responsible for such processing.

29. Storage Period and Deletion

As a general rule, we store personal data only for as long as is necessary for the respective processing purpose.

Once the processing purpose no longer applies, the data will be deleted or its processing restricted unless statutory retention obligations, legitimate interests in the establishment or defence of legal claims, or other legally permissible grounds require continued storage.

In particular, commercial and tax law provisions may require certain contractual, invoice and accounting records to be retained for longer periods. Since the applicable retention period depends on the type and purpose of the documents and the statutory provisions applicable at the relevant time, we do not specify a single blanket retention period.

30. Data Security

We take appropriate technical and organisational measures to protect personal data against loss, manipulation, unauthorised access and other unlawful processing.

Our website is transmitted in encrypted form. You can recognise the encrypted connection in particular by “https” and the corresponding security symbol in your browser. Our security measures are adapted in line with technological developments and taking into account the respective risk.

31. Changes to this Privacy Policy

We may update this Privacy Policy if our website, the services we use, our business processes or statutory or regulatory requirements change. The current version published on femkit.de applies.

Last updated: September 2026

32. Prevailing German Version

Where we additionally provide this Privacy Policy in English or other languages, the translation is provided for convenience and better understanding. In the event of discrepancies or contradictions between language versions, the German version shall prevail. 

Notes on the Legal and Provider Information Used

This final version was prepared on the basis of the FEMKIT shop configuration provided and jointly reviewed, as well as provider information available in September 2026. Its structure additionally draws on the comparison privacy policy provided by FEMKIT, without adopting providers or services from that policy that have not been confirmed for FEMKIT.

·         Section 25 TDDDG: Gesetze im Internet (Federal Ministry of Justice / Federal Office of Justice).

·         Shopify: Shopify Help Center and Shopify Data Processing Addendum, 2026.

·         Consentmo: Privacy Policy and Merchant Data Processing Agreement of Consentmo/iSense Ltd., July 2026.

·         PayPal: PayPal Privacy Statement, January 2026.

·         Klarna: Klarna privacy and corporate information, 2026.

 

This Privacy Policy describes the technical status jointly reviewed at the time of preparation. Changes to Shopify apps, tracking, payment, shipping or marketing services should always prompt a renewed review of this Privacy Policy.