Free shipping and return within the EU

Data Protection statement

Data Protection Statement  of

The protection of your personal data during the collection, processing and use of your visit to this website is an important concern to us. The collection, processing and use of your data is carried out within the framework of the legal regulations. Below we explain what information is collected and used during your visit to this website and when using the applications there:

I. General data processing

1. Scope of processing of personal data
    We process personal data of our users only in so far as this is necessary for the provision of a functioning website as well as our content and services. The processing of personal data of our users is done regularly only with the consent of the user. An exception applies in cases where prior consent cannot be obtained for real reasons and the processing of data is permitted by law.
    Personal data are all data that are personal to you, e.g. name, address, e-mail addresses, user behaviour.

    2. Data deletion and storage

      Personal data will be deleted or blocked as soon as the purpose of storage is eliminated. Storage may also take place where provided for by European or national law in Union, law or other legislation to which the person responsible is subject. The data shall also be blocked or deleted when a storage period prescribed by those standards expires, unless there is a need for further storage of the data for the conclusion of a contract or the performance of a contract.

      3. Name and address of person responsible

        Responsible for the purposes of the Basic Data Protection Regulation and other national data protection laws of the Member States, as well as other data protection provisions, shall be:

        Bags-by-Sumageza, Soumaya Zairi, commerce in leather goods 

        legally represented by

        Soumaya Zairi.
        Untere Knollstrasse 17
        49179 Ostercappeln

        Telephone: +49 (0) 5473 957889, Fax: +49 (0) 5473 8019853,
        Mobile: +49 (0) 174 9327057

        II Collection of personal data when visiting our website

        1. Informative visit to our website
          When you use the website for information purposes only, i.e. if you do not register or otherwise provide us with information, the access data that your browser transmits to our server will be collected. This data set consists of, inter alia:
          • Website from which you visit us,
          • Date and time of request
          • Time zone difference to Greenwich Mean Time (GTM)
          • Content of the call (concrete page)
          • quantity of data transmitted,
          • Access status/HTTP status code,
          • a description of the type and version of the browser used;
          • the installed operating system and the set resolution,
          • Language and version of browser software
          • Your anonymous IP address.
          These data are necessary for us for the technical administration of the website, they serve the display of the website as well as the guarantee of security and stability, a transfer to third parties, even in excerpts, does not take place. The legal basis of the data collection is Article 6(1)(page 1, f) DSGVO
          These anonymous data are stored separately from personal records and are not linked to your personal data by us under any circumstances, so that no conclusions can be drawn for a particular person.

          2. Use of cookies

          1. This sales page uses cookies to facilitate the operation of the website. Cookies are small text files that your internet browser stores on your terminal device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser. session-cookies). Other cookies remain on your terminal device and allow us to recognize your browser at the next visit (persistent cookies). Our website only uses session cookies which are deleted after closing your browser.
          2. The use of cookies, for example, results in the availability of data entered by you once again when you complete the order form. A cookie can only contain information that we send to your terminal device -private data cannot be read out with it. Using the information gathered, we can analyse patterns and structures of use of our website. In this way, we can further optimize our website by improving content or personalisation and simplifying its use. The cookies only need a minimal storage space, do not affect the functionality of your device in any way and do not contain any personal data.
          3. You can change the storage of cookies in your browser settings at any time by selecting the "Do not accept cookies" function. However, we would like to point out that in this case our website may no longer be fully usable.
          4. If you leave our website via a link or by clicking on any banner advertisements, you may also be set cookies by the addressees of the targeted page. We are not legally responsible for these cookies. For the use of such cookies and the information stored on them by our advertising partners, please compare their privacy statements.
          5. Java script is used to provide this website. If for security reasons you are using these auxiliary programs or If you do not want to make active content usable, you should disable the corresponding settings of your browser.
          6. Acceptance of cookies is not a prerequisite for visiting our website. However, we would like to point out that the use of the shopping cart function and the ordering of products are only possible if you allow us to set cookies.

            III. Other features and offers of our website

            In addition to the purely informative use of our website, we offer other services that you can use. Personal data will only be collected by us if you voluntarily inform us:

             1. Registration as customer

            1. If you register as a customer on our website, the following personal data will be collected from you by the registration masks you fill out:
              • Called,
              • Name
              • Address (delivery address, invoice address)
              • Email,
              • Phone,
              • Fax
            We need the data you provide to process your order. For this purpose, we can pass your data on to third parties (forwarders) in detail below. The legal basis for this is Article 6(1)(page 1, b) DSGVO. 

            2. Use of the webshop

            1. If an order is made via our website, in addition to the data mentioned under III.1.1, payment information such as the bank connection and the details of their respective order will be collected. The bank connection data is collected via the respective credit institution or the respective online payment service. These are in detail:
            • PayPal (Europe) S.a.l. et Cie, S.C.A.
            • Mastercard Europe S.A.
            • Mastercard Inc.
            • Master
            • View Inc.
            • American Express Services Europe Limited,
            In addition, we offer you those in the footbar of our online shop under registered payment tools from Shopify (Shopify International Limited, address: Victoria Buildings, 2. Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland).

            The following payment tools are accepted for the accelerated check-out:
            • PayPal Express
            • Shop Pay
            • Apple Pay
            • Google Pay
            In addition, the following country-specific payment methods are offered:
            • SOFORT GmbH/Klarna
            • Ideal
            • Bancontact
            For details o n the handling of your personal data by the above mentioned credit institutions and online payment services as well as your rights in this regard, please refer to the privacy policies of the respective credit institutions and online payment services.

            We store your order data as part of the order history and send you the order data via email as part of the order confirmation. If you create a customer account, this order history will be stored and displayed within your customer account. Our Terms and Conditions are here: 

            This data is also needed to process your order. The legal basis of processing is Article 6(1)(page 1, b) DSGVO.

            3. Other

              In addition, we need information about your person in the following cases:

              • You sign up for the sending of a newsletter or similar promotional material (see the newsletter below). below);
              • You will contact us.

              IV. Use of personal data

              1. The personal data you provide (call, name, address, e-mail address, telephone number) will be stored legally and in accordance with the provisions of the DSGVO. Of course, your data will be treated confidentially.
              2. We use your personal data without your separate consent exclusively for the purpose of the technical administration of our website and for the fulfilment of your wishes and requirements, in particular for the execution of the contract concluded with you or for the reply to your request. For example, when ordering products, we may need to pass on your address to the transport company, which is necessary for billing purposes, to pass on your payment data to the credit institution in charge for payment processing.
              3. Any further transmission, sale or other transmission of your personal data to third parties shall not take place unless this is necessary for the purpose of the processing of the contract (see later). However, we are empowered to provide the competent authorities with information on your data on a case-by-case basis, to the extent that they require your data for the purpose of fulfilling legal powers (e.g. prosecution).
              4. This also applies to the data, as part of the payment process to Shopify (Shopify International Limited, address: Victoria Buildings, 2. Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland). These data remain in the European Economic Area, so that there is no cross-border data transfer. Standard contractual clauses under SSC (Standard Contractual Clauses) are therefore not applicable. Shopify only transmits basic data according to its own data protection structure when a shop is closed due to legal requirements or when there is an indictment due to fraudulent activities. We refer to the Privacy Statement and the corresponding GDPR (DSGVO) white paper For further enquiries, Shopify's Data Protection Officer responsible for the EU is available: Shopify International Ltd., Attn. Data Protection Officer, c/o Intertrust Ireland, 2nd Floor 1-2 Victoria Buildings, Haddington Road, Dublin4, D04 XN32, Ireland
                1. Without your consent, we do not use the data collected for advertising, market research or opinion research purposes.

                V. Duration of data storage

                Your personal data will only be stored for as long as is necessary to achieve the purpose of its collection.

                VI. Transmission of personal data to third parties

                1. For the execution of your order it is sometimes necessary to transmit your personal data to third parties (forwarders). These are in detail:
                  • DHL
                  • Hermes
                  • GLS
                  • Transglobal
                  • UPS
                  • TNT
                The data transmitted to third parties shall be used by them exclusively for the fulfilment of their obligations or tasks.

                2. We will only disclose your personal information to third parties if:
                • You have given your express consent to this under Article 6(1)(page 1, a) of the DSGVO,
                • the disclosure in accordance with Article 6(1)(page 1, f) of the DSGVO is necessary for the assertion, exercise or defence of legal claims and there is no reason to believe that you have a predominant interest in the non-disclosure of your data that is prejudicial to the protection of your privacy;
                • in the event that there is a legal obligation under Article 6(1)(page 1, c) of the DSGVO for the transfer,
                • and this is legally permissible and required byArticle 6(1)(page 1, b) of the DSGVO for the settlement of contractual relations with you.

                VII. Newsletter
                1. With your consent you can subscribe to our newsletter. For subscribing to our newsletter we use the so-called Double-opt-in. This means that after your registration we will send you an email to the indicated email address, in which we ask you for confirmation that you wish to send the newsletter. In addition, we store your IP addresses and dates of registration and confirmation. The purpose of the procedure is to prove your application and, where applicable. to be able to identify possible misuse of your personal data.
                2. Mandatory information for sending the newsletter is only your email address. After your confirmation we will save your email address for the purpose of sending the newsletter. Legal basis is  Article 6(1)(page 1, a) DSGVO.
                3. You can withdraw your consent to the storage and use of your email address to send the newsletter with effect for the future at any time by cancelling the newsletter on our website or simply sending us an email to:

                VIII. Web analytics
                1. This website uses Google Analytics, a web analytics service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google") to analyze and regularly improve the use of our website. With the statistics obtained we can improve our offer and make it more interesting for you as a user. The legal basis for use is Art.6 paragraph 1 page.1 point f DS-GVO.
                2. The information collected by the cookie about the use of our website (including your IP address) is usually transferred to a Google server in the USA and stored there. We would like to point out that Google Analytics has been extended to include the code "gat.u anonymizeIp();" for the anonymous recording of IP addresses (so-called IP addresses, IP masking).
                3. At our request, Google will therefore only record your IP address in abbreviated form, which ensures anonymisation and does not allow inferences on your identity. In case of activation of IP anonymisation on this website, your IP address will be abbreviated by Google within Member States of the European Union or in other States Parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. Google continues to observe the data protection provisions of the US Safe Harbor Agreement and is registered with the US Department of Commerce's Safe Harbor program. Google will use this information to evaluate your use of our website, to compile reports on website activities for us and to provide us with further services related to the use of the website and the Internet. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. The transfer of this data by Google to third parties is only carried out on the basis of legal regulations or in the context of order processing. Under no circumstances will Google aggregate its data with other data collected by Google.
                4. You can collect the data generated by the cookie and related to your use of the website (incl. prevent your IP address) to Google as well as the processing of this data by Google by using the following link Download and install available browser plugin.
                5. For more information on Google Analytics and data protection, please visit: and

                IX. Social Plug-in

                1. Facebook Social Plug-in
                1. On this website, social network plugins used by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). The plugins can be seen from the Facebook logo or the addition "Facebook Social Plugin".
                2. When you use such a plug-in to access the Internet pages of our website, a connection to the Facebook servers will be established and the plugin will be displayed by communication to your browser on the website. This will transmit to the Facebook server which of our websites you have visited. When using the plug-in functions (e.g. clicking the "like" button, commenting) the corresponding information is transmitted directly from your browser to Facebook and stored there.
                3. Facebook also makes your preferences public for your Facebook friends. If you are logged in to Facebook, Facebook can directly assign the call of our page to your Facebook account. Even if you are not logged in or do not have a Facebook account, your browser transmits information (e.g. which website you have called, your IP address) that is stored by Facebook. For details on the handling of your personal data through Facebook as well as your rights in this regard, please see the Facebook Privacy Policy:
                4. If you do not want Facebook to allocate the data collected through our websites to your Facebook account, you must log out of Facebook before visiting our websites or block the upload of Facebook plugins to our websites by using a "Facebook blocker". We would point out that the competent supervisory authorities are expressing data protection concerns about the use of Facebook.
                2. Using Instagram Social Plug Ins
                1. In addition, Instagram plugins run by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA (Instagram) are used on our website. The plugins are marked with an Instagram logo, for example in the form of an Instagram camera. An overview of the Instagram plugins and their appearance can be found here:
                2. When you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the servers of Instagram. The content of the plugin is transmitted by Instagram directly to your browser and integrated into the page. By this integration Instagram receives the information that your browser has called the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged into Instagram. This information (including your IP address) is transmitted directly from your browser to an Instagram server in the USA and stored there.
                3. If you are logged in to Instagram, Instagram can directly assign your visit to our website to your Instagram account. When you interact with the plugins, for example by pressing the "Instagram" button, this information is also transmitted directly to an Instagram server and stored there. The information will also be published on your Instagram account and will show your contacts there.
                4. The purpose and scope of the data collection and the further processing and use of the data by Instagram, as well as your rights and options in this respect to protect your privacy, please refer to the Instagram Privacy Policy:
                5. If you do not want Instagram to assign the data collected through our website directly to your Instagram account, you must log out of Instagram before visiting our website. You can also completely prevent Instagram plugins from being loaded with add-ons for your browser, e.g. with the script blocker "NoScript"

                X. Objection or revocation against the processing of your data
                1. If you have given your consent to the processing of your data, you may withdraw it at any time. Such a revocation affects the admissibility of the processing of your personal data after you have expressed it to us.
                2. As long as we base the processing of your personal data on the balance of interests, you can object to the processing. This is the case if the processing is not necessary in particular to fulfil a contract with you, as shown by us in the following description of the functions. In the event of such opposition, please explain why we should not process your personal data as we have done. In the event of your reasoned opposition, we will examine the situation and either stop the data processing or adapt or show you our compelling reasons for continuing the processing.
                3. Of course, you can object to the processing of your personal data for the purposes of advertising and data analysis at any time. You can inform us about your advertising claim under the following contact details:

                Bags-by-Sumageza,  Soumaya Zairi, Commerce in leather goods, legally represented by Soumaya Zairi, Untere Knollstrasse 17, 49179 Ostercappeln, Germany, telephone: +49 (0) 5473 957889, fax: +49 (0) 5473 8019853, mobile: +49 (0) 174 9327057,



                XI Rights

                  In addition, you have the right to:

                  1. according to Article 15 DSGVO ask for information about your personal data processed by us. In particular, you can require information on the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectify, delete, limit the processing or opposition, the existence of a the right of appeal, the origin of their data, if not collected from us, as well as the existence of automated decision-making including profiling and, where applicable, require meaningful information on their details;
                  2. according to Article 16 DSGVO to correct incorrect or complete your personal data stored with us without delay;
                  3. according to Article 17 DSGVO to request the deletion of your personal data stored with us, except for processing for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for assertion, the exercise or defence of legal claims is necessary;
                  4. according to Article 18 DGSVO to require the restriction of the processing of your personal data, in so far as the accuracy of the data is contested by you, the processing is illegal. But you refuse to delete them and we no longer need the data. However, you need them to assert, exercise or defend legal claims, or you need them according to your Article 21 DSGVO have lodged an opposition to the processing;
                  5. according to Article 20 DGSVO to obtain your personal data that you have provided to us in a structured, common and machine-readable format or to request transmission to another responsible person;
                  6. according to Article 7 paragraph 3 DSGVO your once granted consent to withdraw from us at any time. As a result, we cannot continue the data processing based on this consent for the future, and
                  7. according to Article 77 DSGVO to complain to a supervisory authority. As a general rule, you can contact the supervisory authority of your usual place of residence or place of work or our seat.

                  XII Security
                  1. We strive for all necessary technical and organisational security measures to store your personal data in such a way that it is not accessible to third parties or the public. For the protection of your data, we use the so-called SSL (Secure Socket Layer) transfer for all websites that transmit personal data. This method encrypts the data before it is transmitted on the Internet. No one can guarantee absolute protection.
                  2. We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or total loss, destruction or unauthorised access by third parties. Our security measures are constantly being improved in line with technological developments. We therefore explicitly protect the following pages with SSL encryption: Customer Login, New Registration, Change Password, Change Delivery Address and the complete order process.

                  XIII Update and amendment of this Privacy Statement/ Questions about Privacy

                  1. This Privacy Statement is currently valid and updated as of Dec.6.2020
                  2. It may be necessary to amend this Privacy Statement by developing our website and offers on it, or by changing legal or regulatory requirements. The current Data Protection Statement can be found at any time on the website at: be retrieved and printed by you.

                  We are happy to answer your questions about our data protection standards. Just contact us, for example by e-mail: