General Notice and Mandatory Information

Designation of the data controller
The controller responsible for data processing on this website is:

GML Fashion GmbH

Martina Schmidl 

Osterwaldstraße 10

80805 Munich


The data controller decides alone or jointly with others regarding the purposes and means of processing personal data (e.g., names, contact details, or the like).

Revoking Your Consent to Data Processing

Some data processing operations are only possible with your express consent. Once you have given your consent, it is possible to revoke it at any time. Informal communication by email is sufficient to revoke it: The lawfulness of the data processing up to the time of revocation will remain unaffected by the revocation.

Right to Lodge a Complaint with the Competent Supervisory Authority

As an affected party, you have the right to lodge a complaint with the competent supervisory authority in the event of a data protection violation. The competent supervisory authority with regard to data protection issues is the State Commissioner for Data Protection of the federal state in which our company’s registered office is located. The following link provides a list of data protection officers and their contact details:

Right to Data Portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to third parties. It is provided in a machine-readable format. If you request that the data be directly transferred to another data controller, this will only be done insofar as it is technically feasible.

Right of Access, Right to Rectification, Blocking, Erasure

Within the framework of the applicable legal provisions, you have the right at any time to receive information free of charge about your stored personal data, the origin of the data, its recipients, and the purpose of the data processing, and, where necessary, a right to the rectification, blocking, or erasure of this data. You can contact us at any time in this regard or with other questions on the subject of personal data via the contact options listed in the imprint.

SSL and TLS Encryption

For security reasons and to protect the transmission of confidential content that you send to us as the site operator, our website uses SSL and TLS encryption. This means that the data you transmit via this website cannot be read by third parties. You can recognize an encrypted connection by the “https://” address line of your browser and by the lock symbol in the browser line.

Server Log Files

Information that your browser automatically transmits to us is automatically collected and stored by the website provider in server log files. This includes:

Visited page on our domain
Date and time of the server request
Browser type and version
Operating system used
Referrer URL
Host name of the accessing computer
IP address

This data is not merged with other data sources. The data is processed based on Art. 6 (1) (b) GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

Contact Form

Data transmitted via a contact form will be stored along with your contact information in order to allow your inquiry to be processed or to be available for follow-up questions. This data will not be passed on to others without your consent.

The processing of the data entered in the contact form will be based exclusively on your consent (Art. 6 (1) (a) GDPR). Once you have given your consent, it is possible to revoke it at any time. Informal communication by email is sufficient to revoke it. The lawfulness of the data processing operations up to the time of revocation will remain unaffected by the revocation.

Data transmitted via the contact form will remain with us until you ask us to delete it, revoke your consent to have it stored, or there is no longer any need for the data to be stored. Mandatory legal provisions—in particular, retention periods—shall remain unaffected by this.


Our website uses cookies. These are small text files that your web browser stores on your terminal device. Cookies help us make our offer more user-friendly, effective, and secure.

Some cookies are “session cookies.” These cookies are automatically deleted after the end of your browser session. In contrast, other cookies remain on your terminal device until you delete them yourself. Such cookies help us to recognize you when you return to our website.

With a modern web browser, you can monitor, restrict, or disable the setting of cookies. Many web browsers can be configured to automatically delete cookies when the program is closed. Disabling cookies may limit the functionality of our website.

The setting of cookies necessary for exercising electronic communication processes or for providing certain functions desired by you (e.g., shopping cart) is based on Art. 6 (1) (f) GDPR. As the operator of this website, we have a legitimate interest in storing cookies for the purpose of technically error-free and smooth provision of our services. If any other cookies are set (such as for analysis functions), they are treated separately in this privacy policy.

Google Analytics

Our website uses functions of the Google Analytics web analysis service. The provider of the web analysis service is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses “cookies.” These are small text files that your web browser stores on your terminal device and enable an analysis of the website usage. Information generated by cookies about your use of our website is transmitted to a Google server and stored there. The server is usually located in the USA.

The setting of Google Analytics cookies is based on Art. 6 (1) (f) GDPR. As the operator of this website, we have a legitimate interest in analyzing user behavior in order to optimize our web content and any advertising.

IP Anonymization

We use Google Analytics in conjunction with the IP anonymization function. This ensures that Google truncates your IP address within Member States of the European Union or in other states party to the Agreement on the European Economic Area before it is transferred to the USA. There may be exceptional cases in which Google transmits the full IP address to a server in the USA and truncates it there. Google will use this information on our behalf for the purpose of evaluating your usage of the website, compiling reports on website activity, and providing us with other services relating to website and Internet usage. The IP address transmitted by Google Analytics is not merged with other Google data.

Browser Plugin

The setting of cookies by your web browser can be prevented. However, this may restrict some functions of our website as a result. Likewise, you can prevent the collection of data on your website usage, including your IP address, along with subsequent processing by Google. This is possible by downloading and installing the browser plugin accessible via the following link:

Objection to Data Collection

You can prevent your data from being collected by Google Analytics by clicking on the following link. An opt-out cookie is set that prevents your data from being collected during future visits to our website: Disable Google Analytics.

Details on how Google Analytics handles user data can be found in Google’s privacy policy:

Commissioned Data Processing

In order to fully comply with the legal data protection requirements, we have concluded a commissioned data processing agreement with Google.

Demographic Characteristics in Google Analytics

Our website uses the “demographic characteristics” function of Google Analytics. This can be used to create reports containing statements about the age, gender, and interests of visitors to the site. The data comes from interest-based advertising by Google in addition to visitor data from third-party providers. It is not possible to use the data to identify a specific person. You can disable this function at any time. This is possible via the advertising settings in your Google account or by generally prohibiting the collection of your data by Google Analytics, as explained in the “Objection to Data Collection” section.