FRILISA GmbH

Privacy Policy

Contents

Date: 01.01.2026

This English version is provided for convenience only. The German version is legally authoritative. In the event of incon­sist­en­cies, ambiguities or conflicts between the German version and any translation, the German version shall prevail.

The following information provides an overview of what happens to your personal data when you visit this website or contact FRILISA.

Personal data means all data that can be used to personally identify you. This includes, in particular, your name, address, telephone number, e-mail address, appointment data, payment data, order data, measurements, photos, videos, communication content, garment details, invoice data and technical usage data.

Detailed information on data protection can be found in this Privacy Policy.

Data processing on this website is carried out by the website operator. The contact details can be found in the section “Controller” of this Privacy Policy.

Your data is collected, on the one hand, when you provide it to us, for example by e-mail, telephone, messenger, social media or in person at the atelier.

Other data is collected automatically by our IT systems when you visit the website. This primarily includes technical data, such as your internet browser, operating system, time of page access, IP address or server log data.

Part of the data is collected in order to ensure error-free, secure and stable provision of the website. Other data is processed in order to respond to enquiries, coordinate appointments, prepare orders, fulfil contracts, process payments, comply with legal obligations or protect FRILISA’s legitimate interests.

FRILISA currently does not use analytics or tracking tools.

Subject to statutory requirements, you have in particular the right of access, rectification, erasure, restriction of processing, data portability, objection to certain processing operations, withdrawal of consent with effect for the future and the right to lodge a complaint with a data protection supervisory authority.

You may contact us at any time regarding these rights and any other questions relating to data protection.

The controller responsible for data processing is:

FRILISA GmbH
Uhlandstraße 130
10717 Berlin
Germany

Represented by: Viktor Fromm and Larissa Fromm
Phone: +49 30 2000 56 01
E-mail: service@frilisa.com

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

For questions regarding data protection, the processing of personal data or the exercise of your rights, you may contact us:

FRILISA GmbH
Uhlandstraße 130
10717 Berlin
Germany
E-mail: service@frilisa.com
Phone: +49 30 2000 56 01

A data protection officer has not currently been appointed unless there is a statutory obligation to appoint one. If a data protection officer is appointed, their contact details will be added to this Privacy Policy.

We treat your personal data con­fid­en­tially and in accordance with statutory data protection provisions and this Privacy Policy.

We process personal data only insofar as this is necessary for the provision of our services, handling of enquiries, appointment coordination, contract fulfilment, payment processing, communication, compliance with statutory obligations, protection of legitimate interests or on the basis of consent.

Please note that data transmission on the internet, for example when communicating by e-mail or messenger, may have security gaps. Complete protection of data against access by third parties is not possible.

We process personal data in particular on the following legal bases:

a) Art. 6(1)(b) GDPR, if processing is necessary for the performance of pre-contractual measures or for the fulfilment of a contract;
b) Art. 6(1)(c) GDPR, if processing is necessary for compliance with a legal obligation;
c) Art. 6(1)(f) GDPR, if processing is necessary for the purposes of legitimate interests pursued by FRILISA or third parties and no overriding interests of the data subject conflict;
d) Art. 6(1)(a) GDPR, if you have given us your consent;
e) Art. 9(2)(a) GDPR, insofar as special categories of personal data are exceptionally processed on the basis of explicit consent.

Where consent has been obtained, it may be withdrawn at any time with effect for the future.

We host the content of our website with the following provider:

ALL-INKL.COM - Neue Medien Münnich
Owner: René Münnich
Hauptstraße 68
02742 Friedersdorf
Germany

Details can be found in All-Inkl’s privacy information.

The use of All-Inkl is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the most reliable, secure and stable presentation of our website.

If appropriate consent has been obtained, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s end device. Consent may be withdrawn at any time.

We have concluded a data processing agreement for the use of the above-mentioned service. This is a data protection contract required by law which ensures that All-Inkl processes personal data of our website visitors only on our instructions and in compliance with the GDPR.

When you visit our website, technical data may be processed automatically. This may include in particular IP address, date and time of access, pages accessed, referrer URL, browser type, operating system, data volume transferred and technical server logs.

Processing takes place for the provision of the website, system security, error analysis, prevention of misuse and technical optimisation.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in a secure, stable and functional website.

For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption.

You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us generally cannot be read by third parties.

FRILISA currently does not use analytics or tracking tools.

Google Fonts are integrated locally. Therefore, no personal data is transmitted to Google solely through the use of Google Fonts.

Currently, no cookie or consent tool is active on the website. If FRILISA uses a cookie or consent management tool in the future, CCM19 is currently intended for this purpose.

CCM19 may be used to obtain, document and manage consent to the use of certain cookies, services or external content.

Non-essential cookies, analytics, marketing or tracking technologies will only be used insofar as consent is required and has been obtained.

The contact form on the FRILISA website merely serves to prepare a message for the user’s e-mail program. The message is then sent via the user’s e-mail program.

No content is permanently stored on the FRILISA website server via this form.

If you contact us by e-mail, we process the data you transmit in order to handle your enquiry, communicate with you, carry out pre-contractual measures and, where applicable, process the contract.

This may include in particular name, e-mail address, telephone number, request, communication content, photos, files, appointment wishes, order information and other voluntary information.

Processing takes place on the basis of Art. 6(1)(b) GDPR if your enquiry is related to the fulfilment of a contract or is required for the performance of pre-contractual measures. In all other cases, processing takes place on the basis of our legitimate interest in the effective handling of enquiries submitted to us pursuant to Art. 6(1)(f) GDPR or on the basis of your consent pursuant to Art. 6(1)(a) GDPR, if such consent has been requested.

File uploads via the website are currently not offered. Customers may send photos, documents or other files only by other means, in particular by e-mail.

The data transmitted to us by you remain with us until you request deletion, withdraw your consent to storage or the purpose for storage no longer applies. Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.

If you contact us by e-mail, telephone, social media, messenger, SMS, in person at the atelier or by other means, we process the data you provide in order to handle your enquiry and for further communication.

This may include in particular name, contact details, request, communication content, photos, files, appointment wishes, order information and other voluntary information.

Processing takes place for the imple­ment­a­tion of pre-contractual measures, contract fulfilment or on the basis of our legitimate interest in the efficient handling of enquiries.

FRILISA may communicate with customers via messenger and digital communication channels, in particular via:

a) WhatsApp Business;
b) Instagram Direct Messages;
c) Facebook Messenger;
d) SMS;
e) e-mail;
f) telephone.

If you use these communication channels, we process the data you transmit to handle your enquiry, coordinate appointments, communicate with customers, carry out pre-contractual measures and, where applicable, process the contract.

Depending on the communication channel, additional data may be processed by the respective provider. The privacy information of the respective provider applies to such processing.

Order-relevant content from messenger communication may be transferred to the customer file, project file or accounting documents insofar as this is necessary for order processing, documentation, subsequent customer support, legal defence or compliance with statutory obligations.

Messenger conversations are reviewed regularly. If no order results from a communication and the content is no longer needed for customer communication, appointment coordination, documentation, legal defence or statutory retention obligations, it will generally be deleted after 12 to 24 months.

For communication with customers, prospective customers and other third parties, we use, among other services, WhatsApp Business. The provider is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

Communication is end-to-end encrypted, which prevents WhatsApp or other third parties from gaining access to the communication content. However, WhatsApp may have access to metadata generated during the communication process, such as sender, recipient and time of communication. We also point out that WhatsApp may share personal data with companies of the Meta group.

The use of WhatsApp is based on our legitimate interest in communicating as quickly and effectively as possible with customers, prospective customers and other business and contractual partners pursuant to Art. 6(1)(f) GDPR.

If corresponding consent has been requested, data processing is carried out exclusively on the basis of consent. This consent may be withdrawn at any time with effect for the future.

The communication content exchanged between you and us via WhatsApp remains with us until you request deletion, withdraw your consent to storage or the purpose for data storage no longer applies. Mandatory statutory provisions, in particular retention periods, remain unaffected.

We use WhatsApp in the WhatsApp Business variant.

Where required, we have concluded a data processing agreement with the provider or base the processing on another suitable data protection basis.

At present, no binding online contracts are concluded via the FRILISA website. Likewise, no products, vouchers, consultations or appointments are currently sold, paid for or bindingly booked directly via the website.

FRILISA plans to offer online services such as vouchers, products, online payments, payment links or online bookings in the future.

As soon as such functions are activated, this Privacy Policy will be supplemented and updated accordingly.

At present, FRILISA does not offer binding online appointment booking via an external booking system.

In the future, FRILISA may use booking systems such as eTermin, SumUp or comparable providers. In this case, in particular name, e-mail address, telephone number, desired appointment, appointment type, voluntary information about the request, payment or reservation information and technical booking data may be processed.

A binding online appointment booking, online payment or purchase or booking process will only be offered once the respective function has been technically and legally set up. This Privacy Policy will then be supplemented accordingly.

Insofar as service providers process personal data on our behalf, this shall be done on the basis of a data processing agreement, insofar as legally required.

If you commission us with a made-to-measure garment, alteration, repair, refinement, consultation, fitting or other atelier service, we process the data required for this purpose.

This may include in particular:

a) name and contact details;
b) invoice and payment data;
c) order data and service description;
d) measurements, fit information and fitting notes;
e) information about shoes, underwear, accessories or styling, insofar as relevant for the fit;
f) photos, sketches, designs, moodboards or reference images;
g) information about materials, fabrics, garments and alteration requests;
h) communication history.

We process this data for consultation, order processing, production, alteration, quality assurance, documentation, invoicing and customer support.

Measurements, fit information and fitting notes may contain body-related information. We process these only insofar as they are necessary for the requested service or you voluntarily provide them to us.

Customer photos, measurements, fit data, fitting notes and project data may be stored on an encrypted server and/or in printed form.

The storage serves to process ongoing orders, answer later enquiries, prepare follow-up orders, document fit and project histories and protect legitimate interests of FRILISA as well as of the customer.

These data are generally stored as long as they are necessary for the stated purposes or until the customer requests deletion, unless statutory retention obligations, legitimate interests or legal claims conflict.

Project photos may remain stored in the archive as long as follow-up orders are expected, further customer support is useful or the customer does not request deletion.

Marketing materials used on the basis of consent may be used and stored until the consent is withdrawn. After withdrawal, no new publication will take place on the basis of the withdrawn consent. Already published content will be removed or adapted to a reasonable extent.

Non-accepted offers and related business cor­res­pond­ence may remain stored in the accounting or admin­is­tra­tion system insofar as this is necessary for documentation, traceability, legal defence, internal organisation or due to statutory retention obligations.

Photos, videos or other personal content in which customers are recognisable or from which conclusions can be drawn about a specific person are used by us for reference, portfolio, social media, website, internet, print, press, advertising or marketing purposes only with corresponding consent or on another legal basis.

Consent granted may be withdrawn at any time with effect for the future. The lawfulness of processing carried out up to the withdrawal remains unaffected.

Anonymised detail shots of seams, embroidery, materials, appliqués, artisanal processes, fabrics, cut details or non-personal workshop and product details may be used by us for portfolio, documentation, presentation or marketing purposes, provided that no legitimate interests conflict.

FRILISA may use digital creative and AI-assisted tools, in particular:

a) ChatGPT / OpenAI;
b) Adobe / Photoshop;
c) Canva;
d) Suno;
e) Google Gemini.

These tools may be used in particular for text development, image editing, retouching, visualisation, design support, design preparation, music ideas, video ideas, marketing preparation or internal organisation.

Personal customer photos are generally used in such tools only if this is necessary for the respective purpose, a suitable legal basis exists and recognisable faces have previously been made unre­cog­nis­able or separate consent has been obtained.

Where possible, FRILISA uses anonymised, pseudonymised or non-personal content.

If recognisable persons, voices, names, personal char­ac­ter­ist­ics or other identifiable content are affected, we use these for AI-assisted editing for marketing, reference or social media purposes only with corresponding consent or on another legal basis.

If AI-assisted service providers are used, personal data may be transmitted to them. We ensure that only such data is transmitted as is necessary for the respective purpose.

FRILISA offers in particular card payment, bank transfer, instant bank transfer, online payment or payment link.

Cash payment is not offered as a regular payment method, but may be accepted in exceptional cases by prior agreement.

For card payments, online payments or payment links, FRILISA may use payment service providers such as SumUp or comparable providers. In this context, in particular name, payment amount, payment date, payment method, transaction data, invoice data and order reference may be processed.

Processing takes place for the execution of payments, contract processing, accounting, fulfilment of tax and commercial law obligations and documentation of payment transactions.

The privacy information of the respective payment service provider may additionally apply to payment processing.

We process personal data for the preparation of offers, order confirmations, invoices, credit notes, payment overviews and accounting records.

This may include in particular name, address, contact details, service data, payment data, tax data and invoice data.

Processing takes place for contract fulfilment and compliance with statutory retention, tax and accounting obligations.

Business and tax-relevant documents are stored in accordance with statutory retention periods.

FRILISA currently does not offer a newsletter via separate newsletter software.

If FRILISA offers a newsletter in the future, the necessary information, in particular on the provider used, the registration procedure, consent, unsubscribe options and the processing of personal data, will be included in this Privacy Policy.

FRILISA currently uses in particular the following social media presences:

a) Instagram;
b) Facebook;
c) LinkedIn.

If you visit our social media profiles, communicate with us there, comment on posts, send messages or share content, personal data may be processed by us and by the respective platform provider.

We process data from social media communication for handling enquiries, communication, external presentation, customer support and marketing.

The respective platform providers’ own privacy information applies to data processing by those providers. We have only limited influence on the scope and purpose of data processing by the platform providers.

Personal data may, where necessary, be transmitted to the following recipients or categories of recipients:

a) IT and hosting service providers, in particular All-Inkl;
b) providers of appointment booking and management systems, in particular eTermin, SumUp or comparable providers, if used in the future;
c) payment service providers, banks and card payment providers;
d) tax advisers, accounting and auditors;
e) legal advisers, insurers or debt collection service providers, where necessary;
f) shipping service providers, where shipping has been agreed;
g) providers of digital creative, image, video, music, AI or design tools, insofar as necessary for the respective purpose;
h) providers of communication services, messengers and social media platforms, insofar as you use these communication channels;
i) authorities or public bodies, where there is a statutory obligation.

Data is disclosed only insofar as this is legally permissible and necessary for the respective purpose.

Insofar as personal data is transmitted to providers outside the European Union or the European Economic Area, this shall only take place if a suitable legal basis exists.

This may include in particular an adequacy decision of the European Commission, the conclusion of EU Standard Contractual Clauses, explicit consent or another legally permissible basis.

When using social media platforms, international payment service providers, AI, design, image, video, music, messenger or cloud services, transfer to third countries cannot be excluded.

We store personal data only for as long as this is necessary for the respective purposes or statutory retention obligations exist.

Enquiries and communication data are deleted when they are no longer required for handling and no statutory retention obligations, legitimate interests or legal claims conflict.

Order, invoice and accounting data are stored in accordance with statutory retention obligations.

Data processed on the basis of consent is stored until withdrawal of consent or until the purpose ceases to apply, unless statutory retention obligations conflict.

Photos, videos, reference or marketing content used on the basis of consent may be used until consent is withdrawn, unless otherwise agreed within the scope of the consent.

Customer photos, measurements, fit data, fitting notes and project data may be stored as long as they are necessary for ongoing or later orders, enquiries, preparation, documentation, legal defence or legitimate interests, or until the customer requests deletion, unless statutory retention obligations, legitimate interests or legal claims conflict.

Messenger conversations without an order are generally reviewed and deleted after 12 to 24 months, insofar as they are no longer needed.

We take technical and organ­isa­tional measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure.

These include in particular access restrictions, secure communication channels, careful selection of service providers, appropriate storage of documents and organ­isa­tional protective measures in the atelier operation.

Customer photos, measurements, fit data, fitting notes and project data may be stored on an encrypted server and/or in printed form.

Subject to statutory provisions, you have the following rights:

a) right of access to the personal data processed by us;
b) right to rectification of inaccurate data;
c) right to erasure of personal data;
d) right to restriction of processing;
e) right to data portability;
f) right to object to certain processing;
g) right to withdraw consent granted with effect for the future;
h) right to lodge a complaint with a data protection supervisory authority.

To exercise your rights, you may contact us at any time:

FRILISA GmbH
Uhlandstraße 130
10717 Berlin
Germany
E-mail: service@frilisa.com

If data is processed on the basis of Art. 6(1)(e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data. This also applies to profiling based on these provisions.

If you object, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

If your personal data is processed for direct advertising purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising. This also applies to profiling insofar as it is related to such direct advertising.

If you object, your personal data will subsequently no longer be used for direct advertising purposes.

If processing is based on your consent, you may withdraw this consent at any time with effect for the future.

The lawfulness of processing carried out before the withdrawal remains unaffected.

You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format.

If you request direct transfer of the data to another controller, this will only be done if technically feasible.

Within the scope of statutory provisions, you have the right at any time to obtain information about your stored personal data, its origin, recipients and the purpose of data processing.

You also have the right to have this data rectified or erased, provided that the statutory requirements are met.

You have the right to request restriction of the processing of your personal data.

The right to restriction of processing exists in particular if you dispute the accuracy of your personal data stored by us, if the processing is unlawful, if we no longer need the data but you need it for the establishment, exercise or defence of legal claims, or if you have objected to processing and it has not yet been determined whose interests prevail.

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes data protection law.

The supervisory authority generally responsible for FRILISA is:

Berliner Beauftragte für Datenschutz und Inform­a­tionsfreiheit
Alt-Moabit 59-61
10555 Berlin
Germany
Phone: +49 30 13889-0
E-mail: mailbox@datenschutz-berlin.de

We object to the use of contact details published as part of the legal notice obligation for the purpose of sending advertising and information materials that have not been expressly requested.

FRILISA expressly reserves the right to take legal action in the event of unsolicited advertising information being sent, for example by spam e-mails.

We may amend this Privacy Policy if our data processing, services used, legal requirements or technical processes change.

The current version made available on our website or on request shall apply.