Data protection
Privacy Policy
7 O'CLOCK GmbH, Frankenstraße 45, 31135 Hildesheim (hereinafter "we" or "7 O'CLOCK") takes the protection of your personal data very seriously. We comply with the provisions of the European General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), and the Telecommunications-Digital Services Data Protection Act (TDDDG) when collecting, processing, and using your data.
This statement provides you with an overview of how we ensure data protection and what type of data we collect for what purpose.
1. Collection, Processing, and Use of Personal Data
1.1 What is personal data?
Personal data is all information that relates to an identifiable natural person. This includes, for example, your name, address, email address, or payment information.
We collect, store, and process personal data only within the framework of legal requirements and handle your data responsibly.
1.2 Protection of your data
Our website and systems are protected by technical and organizational measures against loss, destruction, access, or manipulation. Nevertheless, complete protection against all risks is not possible.
2. Purposes of processing your personal data
We use your data to:
- provide you with our services and enable access to your customer account,
- identify you as a registered user,
- process payments securely,
- enable the ordering and delivery of your items,
- handle returns and refunds,
- improve our customer service and respond to your inquiries,
- send you our newsletter or personalized offers,
- enable social media functions (e.g., sharing products),
- optimize internal business processes, e.g., through data analysis or fraud prevention,
- comply with legal requirements and enforce our General Terms and Conditions,
- protect our rights, property, and security.
We use your data exclusively for the purposes mentioned above. Should we need it for other purposes, we will inform you separately beforehand.
3. Data collection when visiting our website
When you visit our website without registration or placing an order, we automatically collect the following data (so-called "server log files"), which are necessary for the technical operation of the website:
- Visited website
- Date and time of access
- Amount of data sent
- Source/referral from which you accessed the page
- Browser type and version
- Operating system
- IP address (anonymized)
The processing of this data is carried out in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in a stable and secure website. The data will not be passed on unless there are concrete indications of unlawful use.
4. Newsletter & Withdrawal of Consent
You can subscribe to the 7 O'CLOCK newsletter on our website. For this, we require a valid email address.
The registration takes place via the double opt-in procedure:
- You enter your email address.
- We will send you a confirmation email to ensure that you have registered yourself.
- Only after confirmation will you receive our newsletter.
We store the following data:
- Email address
- IP address at the time of registration
- Date & time of registration
Legal basis: Art. 6 para. 1 lit. a GDPR (consent).
You can unsubscribe from the newsletter at any time by clicking on the "Unsubscribe" link in the newsletter or by sending an email to kundenservice@7oclock.de.
Note: Revoking your consent will not incur any costs other than the transmission costs of your internet provider.
5. SMS Notifications
If you sign up for text marketing or SMS notifications, you will receive automated messages to the phone number you provided.
- Consent is not a condition for purchase.
- You can unsubscribe at any time by replying with "STOP".
- Message and data rates from your mobile provider may apply.
Legal basis: Art. 6 Para. 1 lit. a GDPR (consent).
Further information can be found in our Privacy Policy and Terms of Use.
6. Data processing for customer account & orders
If you create a customer account or place an order, we collect and store personal data in accordance with Art. 6 para. 1 lit. b GDPR for the purpose of contract execution.
- You can view and edit your data at any time in your customer account.
- You can have your account deleted by sending an email to kundenservice@7oclock.de.
- After the contract has been completed and the statutory retention period has expired (in particular commercial and tax law retention obligations of up to 10 years), your data will be deleted.
For order, payment, and return processing, we work with third-party providers (e.g., payment service providers, shipping partners like DHL, and our return service provider Returnless) who use your data exclusively for the respective processing.
Our online shop is operated via the Shopify platform (Shopify International Ltd., Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, Ireland). Shopify processes the data collected during an order as a processor within the meaning of Art. 28 GDPR.
6a. Returns processing via our returns portal
For the processing of returns, we use the returns portal of the provider Returnless B.V., Sint Janssingel 92, 5211 DA 's-Hertogenbosch, Netherlands. Returnless acts as a data processor in this context in accordance with Art. 28 GDPR.
Data processed:
- Order number
- Name
- Email address
- Shipping address
- Reason for return
- Information about the returned items
Purpose of processing:
- Identification of your order
- Creation of the DHL shipping label
- Communication via email regarding the return
- Processing your refund
Legal basis: Art. 6 para. 1 lit. b GDPR (performance of a contract) and Art. 6 para. 1 lit. f GDPR (legitimate interest in efficient returns processing).
Data transfer: Processing takes place within the European Union. A data processing agreement exists with Returnless in accordance with Art. 28 GDPR.
Storage duration: Your data will be stored for as long as necessary for return processing and to comply with legal retention obligations (in particular commercial and tax law retention obligations of up to 10 years).
Further information can be found in the Returnless privacy policy: https://returnless.com/legal/privacy-statement
7. Social Media Plugins & Third-Party Tools
7.1 Facebook & Instagram
Facebook & Instagram (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland) can recognize if you are logged in there during your visit to our website. If you do not want these networks to collect your browsing behavior, please log out before visiting our website.
Legal basis: Art. 6 para. 1 lit. a GDPR (consent via our cookie banner).
7.2 YouTube Integration
When playing videos on our website, a connection to YouTube (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland) is established. YouTube can record your browsing behavior if you are logged in there.
Legal basis: Art. 6 para. 1 lit. a GDPR (consent via our cookie banner).
7.3 Google Analytics
We use Google Analytics, a web analysis service of Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland), to analyze website visits. Your IP address is anonymized before storage.
Information on data transfer to the USA: When using Google Analytics, your data may be transferred to Google LLC, which is based in the USA. Google LLC is certified under the EU-US Data Privacy Framework, ensuring an adequate level of data protection in accordance with Art. 45 GDPR.
Legal basis: Art. 6 para. 1 lit. a GDPR (consent via our cookie banner).
You can object to the collection by Google Analytics at any time: Google Opt-Out
8. Cookies & Tracking
Our website uses cookies to:
- collect statistics on website visits
- store your preferences (e.g., language, login)
- make advertisements more relevant
Technically necessary cookies are set on the basis of Art. 6 para. 1 lit. f GDPR to ensure the proper operation of our website.
All other cookies (e.g., analysis and marketing cookies) are only used with your express consent, which you can give during your first visit to our website via our cookie banner (legal basis: § 25 para. 1 TDDDG and Art. 6 para. 1 lit. a GDPR).
You can withdraw your consent at any time with effect for the future by adjusting the cookie settings on our website. In addition, you can manage or disable cookies at any time via your browser settings.
9. Your rights in data protection
You have the following rights:
- Right of access (Art. 15 GDPR): Inquire at any time what data we have stored about you.
- Right to rectification (Art. 16 GDPR): If data is incorrect or outdated, you can have it corrected.
- Right to erasure (Art. 17 GDPR): You can request the deletion of your data.
- Right to restriction of processing (Art. 18 GDPR): You can request that we restrict the processing of your data.
- Right to object (Art. 21 GDPR): If you no longer wish to receive advertising or have your data processed, you can object.
- Right to data portability (Art. 20 GDPR): You can request that we transfer your data to you or another provider.
- Right to withdraw consent (Art. 7 para. 3 GDPR): If you have given us your consent, you can withdraw it at any time with effect for the future. The lawfulness of the processing carried out until the withdrawal remains unaffected.
Contact for data protection inquiries:
7 O'CLOCK GmbH Frankenstraße 45 31135 Hildesheim kundenservice@7oclock.de
If you believe that we are not processing your data correctly, you can lodge a complaint with the competent data protection authority. For 7 O'CLOCK, this is:
Landesbeauftragte für den Datenschutz Niedersachsen Prinzenstraße 5, 30159 Hannover poststelle@lfd.niedersachsen.de
10. Changes to this Privacy Policy
We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services (e.g. when introducing new services). The current privacy policy will then apply to your renewed visit.
Status: April 2026