Privacy Policy
Last updated: 1 October 2026
Privacy Policy
Last updated: October 2026
At MoVa, your privacy is important to us. This Privacy Policy explains how we collect, use, share, and protect your personal data when you visit our website, create an account, make a purchase, subscribe to our communications, or use our services, including Wardrobe in Motion.
This Privacy Policy is provided in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection law.
1. Who We Are
The controller responsible for the processing of your personal data is:
MoVa GbR
Karlstraße 31
71069 Sindelfingen
Germany
Email:info@mova-designs.com
2. Personal Data We Collect
Depending on how you interact with MoVa, we may collect and process the following categories of personal data:
- Name, billing and shipping address, email address, telephone number, and other contact details
- Account and authentication information
- Billing, transaction, and payment-related information
- Purchase, order, return, and refund history
- Membership plan, membership status, and billing information
- Garments assigned to your membership account and your garment exchange and return history
- Information relating to garment damage, loss, repairs, or outstanding returns where applicable
- Communications with us, including customer service inquiries
- Marketing and communication preferences
- Feedback, reviews, or other information you voluntarily provide
- IP address, browser, device, operating system, and technical information
- Website usage, interaction, and analytics information
- Cookie and similar technology data, where applicable
We generally collect personal data directly from you, automatically through your use of our website, or through service providers involved in providing our services.
3. How and Why We Use Your Data
We process personal data only where we have a valid legal basis under applicable data protection law.
Performance of a Contract
We process personal data where necessary to enter into or perform a contract with you, including to:
- Process and fulfil orders
- Process payments and refunds
- Arrange shipping, delivery, exchanges, and returns
- Create and manage customer accounts
- Administer Wardrobe in Motion memberships
- Manage garment assignments, exchanges, returns, and membership status
- Provide customer service
- Communicate with you regarding your orders, account, or membership
The legal basis for this processing is Article 6(1)(b) GDPR.
Legal Obligations
We may process and retain personal data where necessary to comply with legal obligations, including tax, accounting, commercial, and regulatory requirements.
The legal basis for this processing is Article 6(1)(c) GDPR.
Legitimate Interests
Where appropriate, we may process personal data where necessary for our legitimate business interests, provided that those interests are not overridden by your rights and freedoms.
These interests may include:
- Operating, maintaining, and securing our website and services
- Preventing and investigating fraud, misuse, non-payment, and loss of MoVa property
- Protecting and enforcing our legal and contractual rights
- Improving our services, operations, and customer experience
- Maintaining appropriate business and transaction records
- Responding to and managing customer inquiries and disputes
The legal basis for this processing is Article 6(1)(f) GDPR.
Consent
Where required, we process personal data based on your consent. This may include:
- Email marketing and newsletters
- Non-essential cookies
- Certain analytics or advertising technologies
- Other optional marketing activities
The legal basis for this processing is Article 6(1)(a) GDPR.
You may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
4. Wardrobe in Motion Membership Data
If you participate in Wardrobe in Motion, we process information necessary to administer your membership.
This may include your membership plan, payment status, garments currently assigned to you, previous exchanges and returns, and information relating to damaged, lost, or unreturned garments.
We use this information to provide the membership service, manage our garment inventory, process exchanges and returns, administer payments, protect MoVa property, and prevent fraud or misuse.
5. Payments
Payments may be processed through third-party payment service providers.
Payment providers may process information such as your name, billing details, payment method, transaction information, and other information necessary to authorize and process payments.
MoVa does not generally receive or store complete payment card details where these are processed directly by an external payment provider.
Payment providers may process certain personal data as independent controllers or as service providers in accordance with their own legal obligations and privacy policies.
6. Sharing Your Data
We do not sell your personal data.
We may share personal data where necessary with trusted third parties that help us operate our business and provide our services, including:
- Payment processing providers
- Website hosting and infrastructure providers
- E-commerce and membership technology providers
- Logistics, shipping, and fulfilment partners
- Professional cleaning and garment repair providers where necessary
- Customer service and IT support providers
- Email and marketing communication providers
- Analytics and website performance providers
- Advertising and social media platforms where applicable
- Cookie consent and preference-management providers
- Professional advisers, including accountants, lawyers, and tax advisers
- Public authorities or other parties where disclosure is required by law
We only disclose personal data where necessary for the relevant purpose and require service providers acting on our behalf to handle personal data appropriately and in accordance with applicable data protection requirements.
7. International Data Transfers
Some of our service providers may process personal data outside Germany or the European Economic Area (EEA).
Where personal data is transferred to a country outside the EEA that does not benefit from an applicable adequacy decision, we take appropriate measures as required by applicable data protection law.
These measures may include the European Commission's Standard Contractual Clauses or other legally recognized safeguards.
Where applicable, further information regarding the safeguards used for international transfers may be requested by contacting us at info@mova-designs.com.
8. Cookies, Analytics, and Advertising Technologies
Our website may use cookies and similar technologies to operate correctly, remember preferences, understand how visitors use our website, measure performance, and, where applicable, support advertising and marketing activities.
Technologies that are strictly necessary for the operation of the website may be used without consent where legally permitted.
Non-essential analytics, advertising, and marketing technologies are used only in accordance with applicable consent requirements.
You can manage your preferences through our cookie consent tool where available.
For further information about the cookies and similar technologies used on our website, please refer to our Cookie Policy.
9. Marketing Communications
If you subscribe to our newsletter or otherwise consent to receive marketing communications, we may use your contact details to send you information about MoVa, our collections, Wardrobe in Motion, events, launches, and other relevant updates.
Marketing communications may be delivered using third-party email marketing providers.
You can unsubscribe at any time using the unsubscribe link contained in our marketing emails or by contacting us at info@mova-designs.com.
Withdrawing from marketing communications does not affect service-related communications that are necessary for an order, membership, account, or other contractual relationship with MoVa.
10. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected and to comply with applicable legal obligations.
The applicable retention period depends on the type of data and the purpose for which it is processed.
For example:
- Order, transaction, invoice, and accounting information may be retained for the periods required by applicable tax and commercial law.
- Account and membership information may be retained for the duration of the customer relationship and for an appropriate period afterwards where necessary to establish, exercise, or defend legal claims or comply with legal obligations.
- Customer service communications may be retained for as long as necessary to resolve the relevant matter and for an appropriate period thereafter.
- Marketing data is generally retained until you withdraw your consent, unsubscribe, or the information is no longer required for the relevant marketing purpose, subject to any limited records necessary to document your preferences or withdrawal.
- Technical and analytics information is retained according to the applicable purpose, consent settings, and configuration of the relevant service.
Once personal data is no longer required, it will be deleted or anonymized unless continued retention is required or permitted by law.
11. Your Data Protection Rights
Subject to the conditions and limitations provided by applicable law, you may have the right to:
- Request access to your personal data
- Request correction of inaccurate or incomplete personal data
- Request deletion of your personal data
- Request restriction of processing
- Object to certain processing based on legitimate interests
- Object at any time to processing for direct marketing purposes
- Request data portability where applicable
- Withdraw consent at any time where processing is based on consent
- Lodge a complaint with a competent data protection supervisory authority
To exercise your rights, please contact us at info@mova-designs.com.
We may request additional information where reasonably necessary to verify your identity before responding to a request.
12. Right to Lodge a Complaint
If you believe that the processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with a competent supervisory authority.
As MoVa is established in Baden-Württemberg, the relevant supervisory authority is:
The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI Baden-Württemberg)
You may also have the right to contact another competent supervisory authority, including an authority in the EU or EEA country of your habitual residence, place of work, or the place of the alleged infringement.
13. Automated Decision-Making
MoVa does not currently use solely automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you within the meaning of Article 22 GDPR.
If this changes in the future, we will provide the information required by applicable data protection law.
14. Data Security
We use appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, disclosure, or destruction.
Access to personal data is limited to persons and service providers who require it for legitimate business purposes.
However, no electronic transmission or storage system can be guaranteed to be completely secure.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, technologies, service providers, business operations, or legal requirements.
The current version will be published on our website together with the date of the latest update.
Where required by applicable law, we will provide additional notice of material changes.
16. Contact
If you have any questions about this Privacy Policy, the way we process your personal data, or wish to exercise your data protection rights, please contact:
MoVa GbR
Karlstraße 31
71069 Sindelfingen
Germany
Email:info@mova-atelier.com