Privacy Notice for the AI Assistant

These notes supplement our Privacy Policy. The controller is the operator of this shop named there.

On our website you can ask an AI assistant questions. To answer your question or pass your request on to our customer service, we process the content of your messages and, if you provide them, your order number, email address and body measurements. If you ask about an order, the assistant retrieves the status of the order, shipping, return and refund from our shop. The legal basis is Art. 6(1)(b) GDPR where your order or a purchase is concerned, and otherwise our legitimate interest in fast customer service under Art. 6(1)(f) GDPR.

The answers are generated by the AI service of Anthropic PBC (San Francisco, USA) acting as our processor. For this purpose, Anthropic receives your messages and the order data retrieved. Transfers to the USA are based on the EU Standard Contractual Clauses. Anthropic does not use this data to train AI models.

We also use this service for enquiries by email: it drafts a suggested reply for our team from your message, your email address and the order data. Every reply is checked and sent by a person from our team.

We do not store the conversation permanently; it is only held in working memory while the conversation lasts. If we pass your request on to our customer service, we store a hand-over note with the order number, the status of shipping, return and refund, the confirmation emails for your order (type, date, recipient address partly masked), any new email address you give us (partly masked) and an excerpt of the assistant's answer, and delete it after 30 days. At the same time, we create a ticket with your email address, your messages from the conversation and this note in our customer service system eDesk, which acts as our processor. We handle the ticket like an email to our customer service and delete it once it is no longer needed for processing your request or for statutory retention obligations.

To prevent misuse, we store your IP address, a random device identifier and, if order details are entered incorrectly, the email address provided only as a pseudonymised check value (hash) for a maximum of 35 days. The legal basis is our legitimate interest in secure operation under Art. 6(1)(f) GDPR.