Privacy Policy
Last updated: 12 May 2026
This Privacy Policy explains how Claudy (“Claudy”, “we”, “us”, or “our”) collects, uses, stores, and protects personal data when you visit our website, contact us, request a quote, submit a customization request, place an order, or interact with our services.
Claudy is based in Germany and processes personal data in accordance with the General Data Protection Regulation (GDPR/DSGVO), the German Federal Data Protection Act (BDSG), and other applicable data protection laws.
1. Controller
The controller responsible for data processing on this website is:
Claudy
Represented by: Iker Matus Marquez
Legal form: Sole Proprietorship / Einzelunternehmen
Address: Hockberger Str. 5, 84347 Pfarrkirchen, Germany
Email: claudy.sportswear@gmail.com
Phone: +49 157 58727110
The controller is the person or business responsible for determining the purposes and means of processing personal data.
2. Personal Data We Collect
We may collect and process different types of personal data depending on how you interact with Claudy.
a) Data you provide directly
This may include:
Name
Email address
Phone number
Club, team, company, or organization name
Billing address
Shipping address
Order details
Product preferences
Jersey sizes, quantities, colors, names, numbers, logos, crests, and customization details
Files, images, logos, design references, or other attachments you send to us
Messages or inquiries submitted through our website, email, social media, or other communication channels
b) Order and customization data
Because Claudy provides custom sportswear, we may process data necessary to design, prepare, produce, and deliver customized products.
This may include team names, player names, shirt numbers, club crests, logos, design references, sizing information, quantities, and production specifications.
If you provide personal data relating to other people, such as team members, players, friends, or customers, you are responsible for ensuring that you have the right or permission to provide that data to us.
c) Technical data
When you visit our website, certain technical data may be collected automatically, including:
IP address
Browser type and version
Device information
Operating system
Date and time of access
Pages visited
Referrer URL
Cookie information
Website interaction data
This data may be processed to operate, secure, improve, and analyze the website.
3. Why We Process Personal Data
We process personal data for the following purposes:
To operate and provide our website
To respond to inquiries and contact requests
To prepare quotes, offers, and product proposals
To create custom sportswear designs
To process and fulfill orders
To manage invoices, payments, shipping, and delivery
To communicate with customers
To provide customer support
To coordinate production with manufacturers or production partners
To comply with legal, accounting, and tax obligations
To protect our website, business, and legal interests
To improve our services, products, and website experience
To use marketing materials, where legally permitted or where consent has been obtained
4. Legal Bases for Processing
We process personal data only when we have a legal basis under the GDPR. Depending on the situation, the legal basis may be:
Art. 6(1)(a) GDPR — Consent: for example, for non-essential cookies, marketing emails, or certain uses of customer images.
Art. 6(1)(b) GDPR — Contract or pre-contractual measures: for example, when responding to quote requests, preparing designs, processing orders, or delivering products.
Art. 6(1)(c) GDPR — Legal obligation: for example, for tax, accounting, invoicing, and business record obligations.
Art. 6(1)(f) GDPR — Legitimate interest: for example, to operate and secure the website, respond to general business inquiries, improve our services, or protect our legal interests.
5. Website Platform and Hosting
Our website is built and operated using Squarespace.
Squarespace may process technical and usage data necessary to provide, host, secure, maintain, and improve the website. This may include IP addresses, browser data, device information, cookies, website interaction data, and server logs.
Provider:
Squarespace
Squarespace Ireland Limited / Squarespace group companies
Website: www.squarespace.com
Squarespace provides information about its privacy and data protection practices in its own privacy policy.
The legal basis for using Squarespace is generally Art. 6(1)(f) GDPR, based on our legitimate interest in operating a secure and functional website. Where Squarespace processes data on our behalf, this may be governed by a data processing agreement.
6. Contact Forms and Inquiries
If you contact us through our website, email, social media, or another communication channel, we process the personal data you provide in order to respond to your inquiry.
This may include your name, email address, phone number, message content, attachments, and any information related to your requested product or project.
The legal basis is generally Art. 6(1)(b) GDPR if your inquiry relates to a potential order, quote, or contract, or Art. 6(1)(f) GDPR for general business communication.
We retain inquiry data only as long as necessary to handle your request, unless legal retention obligations or legitimate business interests require longer storage.
7. Quotes, Orders, and Custom Production
Claudy works primarily through a manual quote and customization process.
Customers may contact us to discuss product requirements, design ideas, quantities, sizes, materials, pricing, and delivery options. Based on this information, we may prepare an individual quote or proposal.
When you request a quote or place an order, we process the personal data necessary to prepare, produce, and deliver customized sportswear.
This may include:
Contact information
Billing and shipping information
Product selections
Sizes and quantities
Custom design details
Team names, player names, numbers, logos, crests, and related files
Production and delivery instructions
The legal basis is Art. 6(1)(b) GDPR, because this processing is necessary to take steps before entering into a contract or to fulfill a contract.
Certain order, invoice, tax, and accounting records may be retained under Art. 6(1)(c) GDPR.
8. Payment Processing
Claudy’s order process is handled manually through individual quotes and direct communication with customers. Once an order is confirmed, payment may be made through the payment methods offered by Claudy.
Claudy may accept the following payment methods:
Bank transfer
PayPal
Squarespace Payments
To process payments, we may process information such as:
Name
Billing details
Payment amount
Order reference
Transaction details
Payment confirmation details
For bank transfers, payment data may be processed by the banks involved in the transaction.
For PayPal payments, personal data may be processed by PayPal according to PayPal’s own privacy policy and terms.
For Squarespace Payments, payment data may be processed through Squarespace and its payment processing partners according to their applicable privacy and data protection terms. Squarespace states that PayPal and Squarespace Payments can be connected as payment options, and that Squarespace Payments can support payment methods such as credit cards, debit cards, Apple Pay, Link, Klarna, and Afterpay/Clearpay depending on availability.
We do not store full credit card or payment card information ourselves. Payment data is processed by the relevant payment provider or financial institution according to its own privacy policy and security standards.
The legal basis for payment processing is Art. 6(1)(b) GDPR, because payment processing is necessary to fulfill the contract.
Certain payment, invoice, accounting, and tax records may be retained under Art. 6(1)(c) GDPR.
9. Shipping and Delivery
To deliver orders, we may share necessary delivery information with shipping, logistics, or parcel forwarding providers.
This may include:
Name
Delivery address
Phone number or email address, where required for delivery
Order reference
Shipping details
Customs or import-related information, where applicable
Claudy may use the following logistics provider for shipments connected to production in China:
Shenzhen Lianhangda International Logistics Co., Ltd.
The legal basis is Art. 6(1)(b) GDPR, because shipping is necessary to fulfill the order.
If logistics providers are located outside the European Economic Area, the section on international data transfers applies.
10. Production Partners and Manufacturers
Claudy’s products may be produced with manufacturing partners located in China.
To produce customized sportswear, we may share order-related information with production partners or manufacturers. This may include:
Design files
Product specifications
Sizes and quantities
Team names
Player names
Shirt numbers
Logos and crests
Customization details
Production instructions
We only share the information necessary to produce the ordered products.
The legal basis is Art. 6(1)(b) GDPR.
Because production may take place outside the European Economic Area, international data transfer rules may apply.
11. International Data Transfers
Some of our service providers, platform providers, logistics providers, payment providers, or production partners may be located outside the European Economic Area.
This may include, in particular:
Squarespace-related data processing involving international infrastructure
Payment providers with international operations
Production partners in China
Logistics or parcel forwarding providers outside the EEA
Where personal data is transferred outside the EEA, we aim to ensure that appropriate safeguards are in place, such as:
An adequacy decision by the European Commission
Standard Contractual Clauses
Additional technical or organizational safeguards
Contractual data protection obligations
Consent, where legally required
12. Cookies
Our website uses cookies and similar technologies.
Cookies are small text files stored on your device. Some cookies are necessary for the website to function properly. Others may be used for analytics, performance, personalization, or marketing.
a) Necessary cookies
Necessary cookies are required for core website functions such as security, page navigation, website operation, and form functionality.
These cookies may be used without prior consent if they are strictly necessary.
The legal basis is Art. 6(1)(f) GDPR, based on our legitimate interest in operating a functional and secure website.
b) Analytics and performance cookies
Our website currently uses Squarespace Analytics.
Squarespace Analytics may collect information about how visitors use the website, such as page views, traffic sources, browser information, device information, and website interaction data.
Squarespace states that it uses cookies by default to run the site and obtain visitor information for Squarespace Analytics, and that site owners can use settings and cookie banner options to support compliance with EU/UK cookie requirements.
Where legally required, analytics and performance cookies are only used with your consent.
The legal basis is Art. 6(1)(a) GDPR, where consent is required.
c) Cookie banner and consent
Our website uses the native Squarespace cookie banner.
The cookie banner is used to inform visitors about cookies and, where required, to request consent for non-essential cookies.
You can manage or withdraw your cookie consent through the cookie settings available on our website.
Squarespace states that its cookie banner can be used to inform visitors about cookies and receive permission for certain types of cookies, including non-essential cookies.
13. Website Analytics
Our website currently uses Squarespace Analytics to understand how visitors use the website and to improve our services.
Analytics data may include page views, traffic sources, device information, browsing behavior, and interaction data.
Where required by law, analytics tools are only used after receiving consent through the cookie banner.
The legal basis is Art. 6(1)(a) GDPR, where consent is required, or Art. 6(1)(f) GDPR where processing is limited to necessary or legitimate website operation purposes.
Claudy does not currently use Google Analytics, Meta Pixel, TikTok Pixel, or similar third-party tracking tools. If these tools are added in the future, this Privacy Policy will be updated accordingly.
14. Newsletter and Marketing Emails
Claudy does not currently use a newsletter service.
If we introduce a newsletter or email marketing service in the future, we will update this Privacy Policy and, where required, request your consent before sending marketing emails.
You may unsubscribe from marketing communications at any time.
15. Social Media
Claudy may maintain profiles on social media platforms such as Instagram, TikTok, Facebook, LinkedIn, YouTube, or other platforms.
If you interact with us through social media, the relevant platform may process your personal data according to its own privacy policy.
We may process messages, comments, profile information, tags, or other content you share with us in order to respond to inquiries, communicate with you, or promote our services.
The legal basis may be Art. 6(1)(b) GDPR for business inquiries or Art. 6(1)(f) GDPR for general communication and marketing.
16. Customer Photos, Product Images, and Marketing Use
Claudy may use product images, artificial intelligence-generated images, photoshoots, customer jersey images, or photos of people wearing Claudy products for marketing purposes.
Where photos include identifiable individuals, we will only use them for marketing purposes if we have an appropriate legal basis, such as:
Consent from the person shown
A signed image release agreement
A contractual agreement
Another legally valid basis
Examples of marketing use may include:
Website content
Social media posts
Advertising
Product pages
Portfolio images
Promotional materials
If we photograph friends, models, customers, or team members wearing Claudy products, we may request a separate image release or consent form.
If customers provide photos or product images for marketing use, they are responsible for ensuring that they have the necessary rights and permissions from any people shown in the images.
The legal basis is generally Art. 6(1)(a) GDPR where consent is required, or Art. 6(1)(b) GDPR if the use is part of a specific agreement.
17. Customer Logos, Crests, and Designs
If you provide us with logos, crests, names, artwork, photos, design references, or other visual materials, we process these materials only as necessary to provide our services, prepare designs, produce products, and fulfill your order.
We do not claim ownership of customer logos, crests, or brand assets.
You confirm that you have the necessary rights or permissions to provide any logos, crests, names, images, or design elements submitted to Claudy.
We may use images of completed products for portfolio or marketing purposes only where legally permitted or where appropriate consent or agreement has been obtained.
18. Service Providers and Third Parties
We may share personal data with external service providers where necessary to operate our business and provide our services.
These may include:
Website platform provider: Squarespace
Payment providers and financial institutions, including banks, PayPal, Squarespace Payments, and related payment processing partners
Shipping and logistics providers
Parcel forwarding providers
Manufacturers and production partners
IT service providers
Email or communication providers
Tax advisors, accountants, or legal advisors
Analytics or cookie management providers, where applicable
We only share data to the extent necessary for the relevant purpose.
Where required, service providers process personal data under data processing agreements or equivalent contractual safeguards.
We do not sell personal data.
19. Data Retention
We retain personal data only for as long as necessary for the purposes described in this Privacy Policy.
Retention periods may vary depending on the type of data:
Inquiry data: retained as long as necessary to respond and follow up
Quote and order data: retained as long as necessary to process the order and provide support
Design and customization files: retained as long as necessary for production, reorders, customer service, or legitimate business purposes
Invoice, accounting, and tax records: retained according to legal retention obligations
Marketing consent records: retained as long as necessary to document consent
Technical logs and analytics data: retained for a limited period according to platform settings and security needs
When data is no longer required, we delete or anonymize it unless legal obligations require longer retention.
20. Data Security
We use appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.
These measures may include secure website infrastructure, access controls, password protection, limited data access, and careful handling of customer files and order information.
However, no online transmission or storage system is completely secure. Users should avoid sending unnecessary sensitive information.
21. Your Rights
Under the GDPR, you have the following rights:
Right of access to your personal data
Right to rectification of inaccurate data
Right to erasure of your personal data
Right to restriction of processing
Right to data portability
Right to object to processing
Right to withdraw consent at any time
Right to lodge a complaint with a supervisory authority
To exercise your rights, you can contact us at:
claudy.sportswear@gmail.com
If you withdraw consent, this does not affect the lawfulness of processing based on consent before withdrawal.
22. Right to Object
If we process your personal data based on legitimate interests under Art. 6(1)(f) GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation.
If your personal data is processed for direct marketing purposes, you have the right to object at any time without giving reasons.
23. Children’s Data
Our services are primarily directed at clubs, teams, organizations, and adult customers.
If an order includes names, numbers, sizes, images, or other personal data relating to minors, the person placing the order is responsible for ensuring that they have the necessary authority, consent, or legal basis to provide that data to Claudy.
We do not knowingly collect personal data directly from children without appropriate consent.
24. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, website functionality, legal requirements, providers, or data processing practices.
The latest version will be available on our website.