Privacy policy

Privacy Policy (GDPR Compliance)

Last updated: 01.04.2026

Theoneshirt (www.theoneshirt.de) is a brand operated by Anna & Morgan (www.annamorgantailoring.com).

All orders, services, and legal responsibilities described in this policy are carried out by Anna & Morgan (Frankenstraße 152, 90461 Nuremberg, Germany).

When you use theoneshirt website, your personal data is processed by Anna & Morgan as the data controller.

 

1. Introduction

This Privacy Policy explains how Anna & Morgan (“we”, “our”, “us”) collect, use, store, and protect your personal data in compliance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable German data protection laws (BDSG).

 

2. Data Controller

Anna & Morgan

Owner: Daniele Hans Frischknecht

Frankenstraße 152

90461 Nuremberg

Germany

Email: dany@annamorgantailoring.com

 

3. Categories of Data We Collect

- Identification Data: Name, title, date of birth (if provided)

- Contact Data: Billing address, shipping address, email address, phone number

- Order Data: Product details, customization specifications, transaction history

- Customization Data: Measurements, monogram details, and selected design options

- Account Data: Login credentials, saved preferences, membership status, and stored measurements (if applicable)

- Payment Data: Payment method and transaction details (processed via secure payment providers; we do not store full card numbers)

- Technical Data: IP address, browser type, device information, operating system, referral URLs

- Marketing Preferences: Newsletter subscriptions and communication preferences

- Customer Support Data: Any personal data you provide when contacting us

Customer data may be processed across Anna & Morgan and its associated brand theoneshirt for operational purposes, including order fulfillment, customer service, and account management.

 

4. Purpose and Legal Basis of Processing

- To process and fulfill your orders – Article 6(1)(b) GDPR (contract performance)

- To manage payments and prevent fraud – Article 6(1)(b) and (f) GDPR

- To provide customer support and respond to inquiries – Article 6(1)(b) GDPR

- To send order confirmations, invoices, and updates – Article 6(1)(b) GDPR

- To comply with legal obligations – Article 6(1)(c) GDPR

- To send marketing communications (if consent is given) – Article 6(1)(a) GDPR

- To improve our website and services – Article 6(1)(f) GDPR

 

5. Cookies and Tracking

We use cookies and similar technologies to ensure website functionality, analyze traffic, and improve user experience.

We use:

- Essential cookies required for website operation

- Optional analytics and marketing cookies (subject to your consent)

You can manage your cookie preferences at any time via our cookie banner. Disabling cookies may limit certain website functionalities.

 

6. Data Sharing and Transfers

- Logistics providers (e.g. DHL, UPS)

- Payment service providers (e.g. PayPal, Stripe)

- IT and hosting providers

- Legal and tax advisors

- Marketing providers (if consent is given)

If data is transferred outside the EEA, appropriate safeguards are applied.

 

7. Data Retention

- Order and invoice data: 10 years

- Customer service data: up to 3 years

- Marketing data: until consent is withdrawn

 

8. Your Rights Under GDPR

- Right of access

- Right to rectification

- Right to erasure

- Right to restriction of processing

- Right to data portability

- Right to object

- Right to withdraw consent

Contact: dany@annamorgantailoring.com

 

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data.

 

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

 

11. Supervisory Authority

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)

Promenade 18

91522 Ansbach

Germany

Website: https://www.lda.bayern.de