Shop

Privacy Policy

This policy explains which personal data we process when you visit re.fashion, what we use it for and what rights you have. Personal data is any information that can identify you personally.

Controller

OSKA Outlet GmbH
Dirnismaning 34
85748 Garching
Germany

Phone: +49 89 244138 490
Email: outlet@oska.com

Represented by the Managing Director, Helmut Bayer.

No analytics, no advertising

re.fashion uses no analytics or statistics services, no advertising or tracking cookies and no social media plugins. There are no customer accounts, orders or contact forms on this website.

Hosting and delivery of the website

The website is hosted by Kinsta Inc. (USA). For fast and secure delivery we use the content delivery network of Cloudflare, Inc. (USA). Both providers process data only on our behalf (Art. 28 GDPR).

Each time you visit, technically necessary data sent by your browser is processed:

  • IP address
  • date and time of access
  • page requested and amount of data transferred
  • previous page (referrer)
  • browser and operating system

We need this data to display the website, keep it secure (for example against attacks) and fix errors. The legal basis is our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). Server log files are kept only as long as needed for these purposes and then deleted.

More information: Kinsta privacy policy, Cloudflare privacy policy.

Cookies

We only use cookies that are technically required to run the website. These do not need your consent (Section 25(2) no. 2 TDDDG, Art. 6(1)(f) GDPR).

  • __cf_bm (Cloudflare, required): tells people apart from automated traffic and protects the website from bots. Stored for 30 minutes.
  • pll_language (required): stores the language you use the website in (German or English) so that pages, search and links are shown in that language. Stored for 1 year.

You can delete or block cookies in your browser at any time. The website will still work.

Instagram feed

On the home page we show recent posts from our Instagram account @re.fashionclub. The posts are fetched and stored by our own server, so your browser does not connect to Instagram when you view the page. Only when you click a post or the Instagram link do you go to Instagram, a service of Meta Platforms Ireland Limited, where the Instagram privacy policy applies.

Videos from Vimeo

Some stories include videos from Vimeo (Vimeo.com, Inc., New York, USA). The videos are only loaded when you click “Load video”. Until then, no data is sent to Vimeo.

By clicking, you consent to your browser connecting to Vimeo. Vimeo then receives your IP address, the page you are on and technical details of your device, and may set cookies. We load the videos with the “Do Not Track” setting so that Vimeo does not analyse your viewing behaviour. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). It applies only to that page view; if you reload the page, the video is not loaded until you click again.

More information: Vimeo privacy policy.

Transfers to the USA

Kinsta, Cloudflare and Vimeo are based in the USA. Transfers rely on the European Commission adequacy decision for the EU-US Data Privacy Framework where the provider is certified under it, and otherwise on the European Commission standard contractual clauses (Art. 46(2)(c) GDPR).

Links to other websites

re.fashion links to our online shop, the newsletter sign-up and Instagram. These services have their own privacy policies, which you can read there.

Contacting us by email or phone

If you contact us by email or phone, we process your details to answer your enquiry. The legal basis is our legitimate interest in replying (Art. 6(1)(f) GDPR) or, where a contract is concerned, Art. 6(1)(b) GDPR. We delete the data once your enquiry is resolved, unless we are legally required to keep it.

Your rights

You have the right at any time to:

  • access the data we hold about you (Art. 15 GDPR)
  • have incorrect data corrected (Art. 16 GDPR)
  • have your data erased (Art. 17 GDPR)
  • restrict processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • withdraw consent with effect for the future (Art. 7(3) GDPR)

Right to object: where we process your data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation (Art. 21 GDPR).

For any of these, a message to outlet@oska.com is enough. You can also complain to a data protection supervisory authority (Art. 77 GDPR), for example the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 18, 91522 Ansbach, Germany.

Further information

You are not obliged to provide personal data, but the website cannot be displayed without the technically necessary data. We do not use automated decision-making or profiling.

Last updated: October 2026. We update this policy when the website or the law changes.