Privacy policy

Draft. Please have it checked before the site goes public. Highlighted parts still need your details.

Who is responsible

The controller for this website is Fabrics of the Water Dragon, Nienbergen 38, 29468 Bergen, Germany, email info@waterdragonfabrics.com. See the imprint for full details.

What we store and why

Your account. Name, email address, country and an encrypted (hashed) password, so you can log in and keep your designs; the country is used to estimate the shipping cost. If you tell us the kung fu style you practice (optional), we use it to suggest a fitting uniform. You can change both under My account. Legal basis: Art. 6 (1) (b) GDPR (contract and pre-contractual steps).

Your designs and comments. The garments, options and fabrics you choose, and any comments you add, so you can come back to them and send them to us.

Your measurements. The body measurements you enter under Measurements (also for other people, e.g. family members, if you enter theirs; please only do so with their consent), so you can reuse them and send them to us, including pictures you add to your own measurements (we remove the hidden photo details such as camera and location when you upload them). When you send them, they are emailed to our customer service and used to make your garments.

Quotation requests. When you ask for a quotation, your name, email address, country, kung fu style (if given), the selected designs and your message are sent by email to our customer service, to prepare your quotation.

Community. If you join the community (from 16 years), we store your nickname, the optional profile text and picture, your posts with their pictures and texts, comments, likes and reports. Posts and comments show your nickname, never your name, and appear after our staff have checked them – to everyone, or only to your friends if you choose "Friends only". Your profile page is shown to everyone, to your friends only or only to you, as you choose, and to anyone you give your private share link while it is switched on. For friends we store who is friends with whom, friend requests and blocks; only you see your friends list. We email you about friend requests unless you switch this off. Photos are saved again without their hidden photo details. Water Dragon shows a post on its Instagram, Facebook or TikTok pages only if you ticked the box for it. You can delete posts and your profile at any time. Legal basis: Art. 6 (1) (a) GDPR (your consent, given when you share). Share buttons are simple links: Facebook, WhatsApp, Pinterest or another service only receives data when you click one of them.

Reviews. A few weeks after your order arrives we email you once – and remind you once – to ask for a review of your garments; you can stop these emails in every email and in My account. When you write a review we store your ratings, text, photos and private note with your order. The review is published with your community nickname or your first name and the first letter of your last name, the garment and the month of your order – never your full name, email address or measurements. You can change or delete it at any time. Legal basis: Art. 6 (1) (f) GDPR (our interest in feedback on our work) and your consent when you publish a review.

Invitations. If you sign up through a friend's invitation link, we note who invited you, so that you get your discount code and your friend theirs. Your friend sees your first name, the initial of your last name, the day you signed up and whether your first order has arrived – nothing else about your orders. We email you your discount code. Legal basis: Art. 6 (1) (b) GDPR.

Questions you send us. When you use "Questions? Ask us" or the Help & contact page, we store your name, email address, your question, the page you sent it from and – if you leave the box ticked – what you were looking at (for example your design, a fabric or your order). Pictures you add are scaled down and saved again without their hidden photo details. Your question is emailed to our customer service and shown in our order software, so we can answer it. Legal basis: Art. 6 (1) (b) GDPR (pre-contractual steps) and (f) (answering inquiries). We count questions per connection for one hour, using a scrambled form of your IP address, to stop automated misuse.

Server logs. When you visit the site, the server briefly records technical data such as IP address, time and requested page, to keep the site secure and working. Legal basis: Art. 6 (1) (f) GDPR. Logs are deleted after 14 days.

Cookies

We only use cookies that the site needs to work: one to keep you logged in and one that protects forms against misuse. We don't use tracking or advertising cookies, and no fonts or scripts are loaded from other companies.

Where your data is processed

The website and its database run on our own server, hosted by Strato GmbH, Berlin, Germany. Emails (account confirmation, password reset, quotation requests) are sent through Google Workspace (Google Ireland Ltd.). Google may process data in the USA; the transfer is based on the EU-US Data Privacy Framework and Google's standard contractual clauses.

How long we keep it

Your account, designs and measurements are kept until you delete your account. You can do this yourself at any time under My account; everything is deleted immediately. Questions sent without an account are deleted, with their pictures, two years after we closed them; questions sent from an account are deleted with the account. Quotation emails and resulting orders are kept as long as tax and commercial law requires (up to 10 years).

Your rights

You have the right to access, correct and delete your data, to restrict or object to its processing, and to receive it in a portable format. Write to info@waterdragonfabrics.com. You can also complain to a data protection authority, for example Die Landesbeauftragte für den Datenschutz Niedersachsen.