Last updated: August 2026
1. Controller
The controller for the processing of personal data within the meaning of the General Data Protection Regulation (GDPR) and other applicable data protection legislation is:
FIGHTMODE SPORTSWEAR
Sandro Keßler (sole trader)
Leibnizstraße 2
88250 Weingarten
Germany
Email: info@fightmode-custom.com
Phone: 015123492583
2. General information on data processing
Protecting your personal data matters to us. We process personal data exclusively within the framework of applicable data protection law, in particular the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
Personal data means any information relating to an identified or identifiable natural person. This includes, for example, name, address, email address, telephone number, order and payment information as well as – where they contain personal information – files and content uploaded through our product configurator.
We process personal data in particular:
- to provide and secure our website
- to handle enquiries
- to set up and manage customer accounts
- to process and fulfil orders
- to provide our product configurator
- to create and manufacture individually designed fightwear
to process payments and shipping, and
with your consent, for newsletter, analytics and marketing purposes.
The relevant legal basis and the specific purpose of processing are explained below.
3. Hosting and server log files
When you visit our website, technically necessary data is processed by our hosting provider.
This may include in particular:
- IP address
- date and time of access
- pages and files requested
- volume of data transferred
- browser type and version
- operating system used
- referrer URL
host name of the accessing device, and
further technical connection data.
This processing is necessary in order to provide our website technically, to ensure its stability and security, and to detect and defend against misuse and technical attacks.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing our online offering securely, stably and reliably.
Hosting provider (processor):
Benjamin Noah Heisel | HeiselConnect, Länderlesstraße 6, 74078 Heilbronn, Germany
The server is located in the data centre of netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany. No processing outside the European Union takes place for hosting.
Server log files are rotated daily and deleted after 14 days.
4. Customer account
Where we offer the creation of a customer account, we process the data provided by the customer in order to set up, provide and manage that account.
This may include in particular:
- first and last name
- email address
- billing and delivery address
- contact details
- access credentials
- order history
saved product configurations, and
saved designs.
Processing takes place in order to provide the requested customer account functions and to carry out pre-contractual measures and existing contractual relationships.
The legal basis is Art. 6(1)(b) GDPR.
Customers may request deletion of their customer account. Statutory retention obligations and other lawful grounds for continued storage of certain data remain unaffected.
5. Orders in our online shop
When you place an order through our online shop, we process the personal data required to initiate, perform and complete the contract.
This may include in particular:
- first and last name
- billing address
- delivery address
- email address
- telephone number where provided
- products ordered
- sizes and quantities
- product configurations
- order and job numbers
- payment and transaction information
shipping information, and
communication relating to the order.
Processing takes place for the purpose of handling your order, manufacturing the products ordered, processing payment, delivery and dealing with any queries.
The legal basis is Art. 6(1)(b) GDPR.
Where we are obliged to retain certain records under commercial, tax or other statutory provisions, further processing takes place on the basis of Art. 6(1)(c) GDPR.
6. FIGHTMODE CUSTOM product configurator
Our website offers a product configurator with which customers can design individual sportswear and equipment products.
When the configurator is used, the following information in particular may be processed:
- selected product
- colours and design variants
- sizes and quantities
- individual texts and lettering
- names and numbers
- positioning of individual design elements
- logos
- graphics
- images
- club, team and gym names
- sponsor logos and sponsor names
- other uploaded design files
saved drafts, and
technical information about the respective configuration.
Processing takes place in order to enable you to create an individual design, to display and save your configuration technically, and to prepare, manufacture and deliver the personalised fightwear you have requested.
Where processing relates to a specific order or its preparation, the legal basis is Art. 6(1)(b) GDPR.
7. Uploading logos, images, graphics and other files
Within our product configurator, customers can upload their own files and content.
This may include in particular:
- company and sponsor logos
- gym, club and team logos
- brand logos
- graphics and illustrations
- images
names and lettering, and
other design files intended for product design.
This content is processed to the extent necessary in order to create, display and check the product design requested by the customer, to prepare it technically for production and to manufacture the personalised product.
Uploaded files may contain personal data, for example names, images or other information about identifiable persons.
Please therefore only submit personal information that is necessary for the desired product design and that you are entitled to submit and use.
Uploaded files may be linked to the respective configuration, the order and – where one exists – the customer account.
Where processing is necessary to prepare or perform an order, it takes place on the basis of Art. 6(1)(b) GDPR.
Please note: whether the customer holds the necessary copyright, trade mark, design, name and other usage rights in the uploaded content is governed separately in our general terms and conditions and in the terms for personalised products.
8. Storage of configurations and design files
Product configurations and the design files required for them may be stored to the extent necessary to process and perform an order.
Where we offer customers the option to save designs for later repeat orders, configurations and associated design files may also be stored for that purpose.
Where storage forms part of the service requested by the customer or is necessary for the performance of the contract, processing takes place on the basis of Art. 6(1)(b) GDPR.
Data is deleted as soon as its storage is no longer necessary for the respective purpose and no statutory retention obligations or other legal grounds prevent deletion.
9. Payment processing
To process payments we use payment service providers, depending on the payment method chosen by the customer.
The following data in particular may be processed or transmitted to the respective payment service provider:
- name
- billing address
- order amount
- order number
- payment method
transaction information, and
further data required for the respective payment method.
Where necessary to perform the contract and to process the payment method chosen by the customer, processing takes place on the basis of Art. 6(1)(b) GDPR.
Depending on the payment method, the respective payment service provider may process personal data under its own data protection responsibility.
Payment service providers we use:
Mollie and, where this payment method is chosen, cash on delivery via the shipping service provider.
Company name: Mollie B.V.
Registered office and address: Keizersgracht 313, 1016 EE Amsterdam, Netherlands
Chamber of Commerce (KvK): registered under number 30204462
Supervisory authority: De Nederlandsche Bank (DNB) – registration number F0038
Associated client funds foundation: Stichting Mollie Payments (KvK no. 50205773)
The respective providers and any supplementary data protection information required are listed in line with the payment methods actually offered.
10. Shipping and delivery
In order to deliver the products ordered, we transmit the personal data required for shipping to the shipping or logistics service provider used in each case.
This includes in particular:
- name of the recipient
- delivery address
consignment and order information, and
where necessary for the chosen shipping method and legally permissible, further contact details.
Processing takes place in order to perform and complete the contract pursuant to Art. 6(1)(b) GDPR.
11. Contacting us
If you contact us by email, contact form or any other communication channel offered, we process the personal data you provide in order to handle your enquiry.
This may include in particular:
- name
- email address
- telephone number
- order or customer number
the content of your message, and
further information provided voluntarily.
If your enquiry relates to an existing contract or to pre-contractual measures, processing takes place on the basis of Art. 6(1)(b) GDPR.
For other enquiries, processing generally takes place on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in dealing appropriately with enquiries from customers and interested parties.
12. Email newsletter
You have the option of subscribing voluntarily to our FIGHTMODE email newsletter.
Our newsletter informs you in particular about:
- new products
- new collections
- product news
- promotions
- offers
discount campaigns, and
other news about FIGHTMODE.
For sending it we process in particular your email address and, where applicable, your name and the information required to document your consent.
Processing takes place on the basis of your consent pursuant to Art. 6(1)(a) GDPR.
Subscribing to the newsletter is voluntary and is not a condition for placing an order.
You may withdraw your consent at any time with effect for the future. To do so you can in particular use the unsubscribe link contained in our newsletter emails or contact us using the contact details given in this privacy policy.
Withdrawal does not affect the lawfulness of processing carried out up to the point of withdrawal.
Where we use a double opt-in procedure, the information required for registration and confirmation is processed in order to prove the subscription and to prevent misuse of third-party email addresses.
Newsletter service provider:
Your consent is currently documented by us alone; we do not yet use an external newsletter service provider. As soon as we do, we will name it here before your data is transmitted to it.
13. Cookies and comparable technologies
Our website may use cookies and comparable technologies.
Cookies are small data records that can be stored on or read from the user's device.
Where cookies or comparable technologies are technically necessary, they may be used to provide basic functions of our website, the shopping cart, the product configurator, the customer account and the ordering process.
Where the use of certain cookies or comparable technologies requires consent, they are only used once the corresponding consent has been given.
The specific legal bases depend on the respective purpose and the technology used.
14. Analytics, marketing and tracking services
Where we use analytics, marketing or tracking services, we provide separate information within this privacy policy about the respective provider, the purpose and scope of the data processing, the legal basis, the storage period, the recipients and any transfers to third countries.
Where consent is required for a particular service, that service is generally only activated once such consent has been given.
Services used:
We currently do not use any analytics, marketing or tracking services that require consent. Only technically necessary cookies are used, which are required for the shopping cart, the product configurator and the ordering process.
Should we use such services in future, we will add the provider, purpose, legal basis, storage period and any third-country transfers to this privacy policy beforehand.
15. Recipients and disclosure of personal data
We only disclose personal data where there is a legal basis for doing so.
Depending on the processing operation, recipients may in particular be:
- hosting and IT service providers
- payment service providers
- shipping and logistics companies
- production and fulfilment service providers
- newsletter service providers
- analytics and marketing service providers
tax advisers and other professional advisers, and
authorities and public bodies, where we are legally obliged to do so.
Where external service providers process personal data on our behalf, we conclude appropriate data processing agreements where required.
16. Transfer of personal data to third countries
When certain service providers are used, personal data may be processed outside the European Union or the European Economic Area.
Where personal data is transferred to a third country, this only takes place in compliance with the statutory requirements.
Depending on the recipient, the transfer may in particular be based on an adequacy decision of the European Commission, on appropriate safeguards or on another legally provided basis.
Whether and to what extent third-country transfers take place at FIGHTMODE depends in particular on the hosting, payment, newsletter, analytics and marketing service providers actually used.
17. Storage period
As a rule we store personal data only for as long as is necessary to fulfil the respective purpose of processing.
Beyond that, data may be stored where we are obliged to do so by statutory retention periods or where continued storage is necessary to assert, exercise or defend legal claims.
Once the respective purpose no longer applies and existing retention periods have expired, the personal data concerned is deleted or, where possible, anonymised.
Different storage periods may apply to certain categories of data, in particular uploaded design files and saved configurations; these are described in the relevant sections of this privacy policy.
18. Fonts
The fonts used on our website are served from our own server. No connection to third-party servers is established for this purpose; in particular, no IP address is transmitted to Google.
19. Data security
We take appropriate technical and organisational measures to protect personal data against loss, manipulation, unauthorised access and other unlawful processing.
Our security measures are reviewed and adapted appropriately in line with technical developments and the respective risks.
Our website is transmitted in encrypted form where this is technically provided for and necessary.
20. Rights of data subjects
Subject to the statutory requirements, you have in particular the following rights:
Right of access:
You may request information as to whether and which personal data we process about you.
Right to rectification:
You may request the rectification of inaccurate personal data or the completion of incomplete personal data.
Right to erasure:
You may request the erasure of your personal data subject to the statutory requirements.
Right to restriction of processing:
You may request that the processing of your personal data be restricted, subject to the statutory requirements.
Right to data portability:
Where the statutory requirements are met, you may request to receive personal data in a structured, commonly used and machine-readable format or to have it transmitted to another controller.
Right to withdraw consent:
You may withdraw consent you have given at any time with effect for the future. The lawfulness of processing up to the point of withdrawal remains unaffected.
Right to object:
Where we process personal data on the basis of Art. 6(1)(e) or (f) GDPR, you may object to the processing subject to the statutory requirements.
Where personal data is processed for direct marketing purposes, you have the right to object to such processing at any time.
21. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your personal data infringes data protection law.
This right exists without prejudice to any other administrative or judicial remedy.
22. Changes to this privacy policy
We reserve the right to amend this privacy policy if our website, our product configurator, the service providers used, our data processing or the legal requirements change.
The current version published on our website applies in each case.
Last updated: August 2026