This English translation is provided for convenience only. The German version is legally binding.
1. Controller
The controller responsible for data processing on this website is:
Source Mode – wahres Leben.
Paul-Heyse-Strasse 55
04347 Leipzig
Germany
Source
Email: support@sourcemode.de
Website: www.sourcemode.de
2. General information and mandatory information
The protection of your personal data is important to us. This Privacy Policy informs you about how we collect, process and protect your data when you visit our website or shop with us.
Personal data is any information relating to an identified or identifiable natural person. This may include, for example, your name, your email address, your postal address or your IP address.
We process your data only on the basis of a legal basis pursuant to Art. 6 of the General Data Protection Regulation (GDPR/DSGVO, Datenschutz-Grundverordnung). The most important legal bases are:
Art. 6(1)(a) GDPR: Your express consent (e.g. for newsletters or marketing cookies)
Art. 6(1)(b) GDPR: Performance of a contract (e.g. order processing)
Art. 6(1)(c) GDPR: Compliance with a legal obligation (e.g. taxes, accounting)
Art. 6(1)(f) GDPR: Legitimate interests (e.g. website security, improvement of our offering)
3. SSL encryption
This website uses SSL encryption (Secure Sockets Layer) to protect your data. You can recognise this by the fact that the URL begins with "https://" and a padlock symbol is displayed in your browser.
SSL encryption means that your data is transmitted in encrypted form. This means that your information cannot be read or manipulated by third parties during transmission between your browser and our server. This is particularly important when sending sensitive data such as payment information or personal details.
We recommend that you always make sure that the connection is encrypted before entering sensitive data.
4. Data collection when visiting our website
When you visit our website, information that your browser transmits to our servers is collected automatically. This data is stored in so-called server log files.
Server log files: Our servers automatically collect the following information:
IP address (Internet Protocol address) – the unique address of your device on the internet
Date and time of access
Pages accessed and their content
Referrer (the page from which you came to us)
Browser type and browser version
Operating system of your device
Screen resolution
Duration of the visit
This data is processed for statistical purposes, to improve our online offering and to ensure website security. The legal basis is our legitimate interest pursuant to Art. 6(1)(f) GDPR. The data is generally deleted after 30 days.
5. Cookies and tracking
Our website uses cookies to provide you with an optimal user experience and to improve our website. Cookies are small text files that are stored on your device (computer, tablet or smartphone).
Session cookies: These cookies are only stored during your visit to our website and are deleted when you close your browser. They are necessary for the functionality of the website, e.g. to save your shopping cart or to keep you logged in. The legal basis is Art. 6(1)(b) GDPR (performance of a contract).
Persistent cookies: These cookies remain stored on your device even after you close your browser. They are used to save your settings or to recognise you on your next visit. For non-essential persistent cookies, we require your consent pursuant to Art. 6(1)(a) GDPR.
Necessary cookies: These are required for the functionality of the website and cannot be deactivated. They include:
Shopping cart cookies (save your products)
Authentication cookies (keep you logged in)
Security cookies (protect against attacks)
Analytics cookies: These help us to understand and improve the use of the website. They collect anonymised data about your behaviour on the website. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.
Marketing cookies: These are used for personalised advertising and retargeting. They enable us to show you relevant offers. Here, too, we require your consent pursuant to Art. 6(1)(a) GDPR.
Opt-out and management: You can manage or deactivate cookies at any time in your browser settings. Most browsers give you the option of blocking or deleting cookies. Please note, however, that deactivating necessary cookies may impair the functionality of the website. You can also change your cookie settings at any time via our cookie banner.
6. Ordering process and contract data
When you place an order with us, we collect the following personal data, which is necessary to perform your purchase contract:
Personal data:
First name and surname
Email address
Telephone number
Address data:
Delivery address (street, house number, postcode, town/city, country)
Billing address (if different)
Payment data:
Payment method (credit card, PayPal, etc.)
Payment information (transmitted in encrypted form)
Order data:
Products ordered and quantities
Order date and order number
Total order value
Legal basis: This data is processed pursuant to Art. 6(1)(b) GDPR, as it is necessary for the performance of the purchase contract between you and us.
Storage period: We store this data for the duration of the business relationship and, beyond that, for the statutory retention periods. These are in particular:
10 years for invoices and business records (pursuant to the German Commercial Code (HGB) and the German Criminal Code (StGB))
6 years for other business records (pursuant to the German Civil Code (BGB))
7. Payment service providers
We use external payment service providers to process payments securely. Your payment data is transmitted directly to these service providers and is not stored on our servers.
Shopify Payments:
Provider: Shopify Inc., 150 Elgin Street, Ottawa, Ontario K2P 1L4, Canada
Data transfer: Your payment data (credit card number, expiry date, CVC) is transmitted directly to Shopify and is not stored on our servers.
Legal basis: Art. 6(1)(b) GDPR (performance of the purchase contract)
Data protection: Shopify is subject to the EU-US Data Privacy Framework and processes your data in accordance with high security standards.
PayPal:
Provider: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg
Data transfer: If you choose PayPal as your payment method, your data will be transmitted to PayPal. You will be redirected to the PayPal website to confirm the payment.
Legal basis: Art. 6(1)(b) GDPR (performance of the purchase contract)
Data protection: PayPal processes your data in accordance with the provisions of the PayPal Privacy Statement.
For further information on data processing by these providers, please refer to their privacy policies, which you can find on their websites.
8. Shipping service providers
To deliver your order, we pass on your address data (name, address, telephone number) to shipping service providers. This is necessary in order to deliver your order to you.
DHL (Deutsche Post DHL Group):
Data transfer: Your delivery address and contact details are transmitted to DHL.
Legal basis: Art. 6(1)(b) GDPR (performance of the purchase contract)
Processing: DHL processes your data exclusively for the delivery of your order.
DPD (Dynamic Parcel Distribution):
Data transfer: Your delivery address and contact details are transmitted to DPD.
Legal basis: Art. 6(1)(b) GDPR (performance of the purchase contract)
Processing: DPD processes your data exclusively for the delivery of your order.
The shipping service providers are processors and may only use your data to perform their tasks. They do not pass your data on to third parties unless this is necessary for delivery (e.g. to customs authorities in the case of international deliveries).
9. Email marketing and newsletter
If you subscribe to our newsletter, your email address and, optionally, further information (e.g. first name, surname) will be stored.
Subscription: Subscription to the newsletter is based on your express consent pursuant to Art. 6(1)(a) GDPR. You will receive a confirmation email in which you must confirm your subscription (double opt-in procedure).
Content: The newsletter contains information about new products, offers, promotions and other relevant information about Source Mode – Real Life Label.
Frequency: You will receive newsletters at regular intervals. The exact frequency will be communicated to you when you subscribe.
Unsubscribing: You can unsubscribe from the newsletter at any time free of charge. You can unsubscribe by:
Clicking the unsubscribe link in any newsletter email
Sending us an email at support@sourcemode.de
Your unsubscription will be processed immediately.
Storage period: Your email address will be stored for as long as you are subscribed to the newsletter. After you unsubscribe, your email address will be deleted, unless we have another legal reason to store it (e.g. for orders).
9a. Anonymous counting of Source Experiences (Source Live)
When you complete a Source Experience, your browser sends a message to our counting service at Cloudflare (Cloudflare Workers, database with storage location in the EU). Only daily totals per Experience and country are stored. We do not store IP addresses, do not set any cookies for this purpose and do not create profiles. For technical reasons, Cloudflare briefly processes your IP address when the request is made in order to deliver the request.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in anonymous reach measurement).
10. Rights of data subjects
You have the following rights with regard to your personal data. To exercise your rights, please contact us at support@sourcemode.de.
Right of access (Art. 15 GDPR): You may at any time request information about which personal data we store about you, where this data comes from, to whom we pass it on and how long we store it. We will provide you with this information free of charge.
Right to rectification (Art. 16 GDPR): You may request the rectification of inaccurate or incomplete data. If your data is no longer up to date, we can correct it at your request.
Right to erasure (Art. 17 GDPR): You may request the erasure of your personal data ("right to be forgotten"). However, this is not possible if we are required to store the data due to a legal obligation (e.g. for tax purposes or for the performance of a contract).
Right to restriction of processing (Art. 18 GDPR): You may request that the processing of your data be restricted. This is the case, for example, if you dispute the accuracy of your data or if the processing is unlawful but you do not want the data to be erased.
Right to object (Art. 21 GDPR): You may object to the processing of your data, in particular for marketing and analytics purposes. This applies in particular to processing based on Art. 6(1)(f) GDPR (legitimate interests). Following your objection, we will no longer process your data for these purposes.
Right to data portability (Art. 20 GDPR): You may receive your personal data in a structured, commonly used and machine-readable format (e.g. CSV) and transmit it to another controller. This applies to data that you have provided to us and that is processed on the basis of your consent or for the performance of a contract.
Right to withdraw consent: You may withdraw your consent to data processing at any time. This applies, for example, to consent to the newsletter or to marketing cookies. The withdrawal takes effect from the time of notification and does not affect the lawfulness of the processing carried out up to that point.
11. Right to lodge a complaint with the supervisory authority
You have the right to lodge a complaint with the competent data protection authority if you believe that the processing of your personal data infringes the GDPR or other data protection laws. This applies in particular if we do not respond to your request or if you are not satisfied with our response.
Competent authority for Saxony:
Sächsischer Datenschutzbeauftragter (Saxon Data Protection Commissioner)
Devrientstrasse 5
01026 Dresden
Germany
Telephone: +49 (0)351 85471-0
Email: poststelle@datenschutz.sachsen.de
Website: www.datenschutz.sachsen.de
Lodging a complaint with the supervisory authority does not prevent you from pursuing other legal remedies.
12. Storage period
We store your personal data only for as long as is necessary to fulfil the purposes for which we collected it, or as required by law.
Order data: Stored for the duration of the business relationship and, beyond that, for 10 years (invoices) or 6 years (other business records).
Newsletter data: Stored for as long as you are subscribed to the newsletter. Deleted after you unsubscribe.
Server log files: Generally deleted after 30 days.
Cookies: Session cookies are deleted when you close your browser. Persistent cookies are deleted after the period specified in the cookie settings.
Contact form data: Deleted after your enquiry has been answered and an appropriate retention period has expired.
13. Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy at any time in order to adapt it to changes in the legal situation, technical developments or new business practices. You can always find the current version on our website at www.sourcemode.de.
In the event of material changes, we will inform you by email or by means of a prominent notice on our website. Your continued use of the website after a change shall be deemed acceptance of the new Privacy Policy.
As of: October 2026
Last updated: October 2026