Last updated: October 2026. This is a translation for convenience; the German version is legally binding.
1. Controller
Mitchell Mfg. Vintage Flying Jackets UG (haftungsbeschränkt)
Plessastr. 18
52388 Nörvenich
Germany
Phone: +49 2426 958 19 39
Email: info@mitchellmfg.de
We have not appointed a data protection officer, as we are not required to. For any questions about data protection, please contact us at the address above.
2. Hosting and server log files
This website is operated by digital cuisine GmbH & Co. KG, Hanomagstraße 9, 30449 Hannover, Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.
Each time a page is accessed, the server automatically stores information your browser transmits: IP address, date and time, page requested, referrer URL, browser and operating system. We need this data to deliver the website securely and to detect attacks. The legal basis is Art. 6 (1) (f) GDPR. Log files are deleted after 14 days.
The connection to this website is encrypted with TLS, which you can recognise by “https://” in the address bar.
3. Fonts
The fonts of this website are stored on our own server. No connection is made to Google or any other font provider.
4. Cookies
We only set cookies that are technically necessary to operate the website. Under Section 25 (2) TDDDG these require no consent.
- Language (pll_language): remembers whether you chose the German or the English site. Stored for one year.
- Basket (woocommerce_items_in_cart, woocommerce_cart_hash, wp_woocommerce_session_…): keep your basket while you browse. Stored until the end of the session or for two days at most.
- Login (wordpress_logged_in_…, wordpress_sec_…): only when you log in to your customer account. Stored until you log out or for 14 days at most.
The legal basis is Art. 6 (1) (b) GDPR (basket, customer account) and Art. 6 (1) (f) GDPR (language). We do not use analytics or marketing cookies.
5. Contact form, email and phone
When you write to us using the contact form, we process your name, your email address, optionally your phone number, the chosen subject and your message in order to answer your enquiry. The same applies when you contact us by email or phone.
The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a contract or an order, otherwise Art. 6 (1) (f) GDPR; our legitimate interest is answering your enquiry. The form data is sent to us as an email and is not stored on the website. We delete it once your enquiry has been dealt with, unless statutory retention periods apply.
6. Spam protection with Cloudflare Turnstile
To protect the contact form against automated requests we use Cloudflare Turnstile, provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When a page with the form is loaded, technical data such as your IP address and information about your browser is transmitted to Cloudflare to check whether the request comes from a human. Turnstile does not set cookies for advertising or analytics.
The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is protection against abuse and spam. Cloudflare is certified under the EU-US Data Privacy Framework; transfers to the USA are based on the European Commission’s adequacy decision. More information: cloudflare.com/privacypolicy.
7. Orders and customer account
When you place an order, we process the data required for the contract: name, billing and delivery address, email address, phone number, the items ordered and your size details. A customer account is required to order; there you can see your orders and change your details.
The legal basis is Art. 6 (1) (b) GDPR. Order and invoice data is kept for as long as commercial and tax law requires (usually six or ten years). You can have your customer account deleted at any time; a short message to us is enough.
8. Payment and shipping
Depending on the payment method you choose, we pass on the data required for payment:
- PayPal: to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal’s own privacy statement also applies: paypal.com/de/legalhub/privacy-full.
- Bank transfer in advance: your payment is handled by your bank; we receive the details shown on our bank statement.
For shipping we pass your name and delivery address to DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany. The legal basis in each case is Art. 6 (1) (b) GDPR.
9. Emails about your order
We send you emails about your order, for example an order confirmation and a shipping notification. We do not send advertising or a newsletter.
10. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw any consent you have given at any time with effect for the future. An informal message to the address above is enough.
Right to object (Art. 21 GDPR): where we process data on the basis of Art. 6 (1) (f) GDPR, you can object at any time on grounds relating to your particular situation.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.