This privacy policy applies to the following offerings: the website getsizer.com, the Sizer size advisor that online shops embed in their own websites, and the Sizer app for Shopify.
The controller within the meaning of the data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:
Laszlo Schürg
c/o POSTFLEX PFX-600-163
Emsdettener Straße 10
48268 Greven
Germany
Email: info@getsizer.com
We are the controller for this website. For the size advisor on a shop's website and for the Sizer app for Shopify we act as a processor on the shop operator's behalf — the two sections on those offerings below explain what that means for you.
Using the contact details above you can exercise the following rights under the GDPR at any time:
If you have given us consent, you can withdraw it at any time with effect for the future.
You can lodge a complaint with a supervisory authority at any time, for example with the authority of the German federal state you live in, or with the authority responsible for us.
A list of the supervisory authorities (for the non-public sector) with their addresses is available at: bfdi.bund.de.
When you access our website — that is, when you do not register or otherwise submit information — general information is collected automatically. This information (server log files) includes the type of web browser, the operating system used, the domain name of your internet service provider, your IP address and similar data. It is processed in particular for the following purposes:
We do not use this data to draw conclusions about you. We do, however, reserve the right to check the server log files afterwards if concrete evidence indicates unlawful use.
The processing takes place under Art. 6 (1) (f) GDPR, on the basis of our legitimate interest in improving the stability and functionality of our website and in ensuring system security and abuse detection.
Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website (hosting and CDN: Cloudflare, Inc.). Technical error reports are processed by Sentry — see “Error monitoring” below.
We store data in server log files in a form that allows the identification of the data subject for a maximum of 30 days, unless a security-relevant event occurs (a DDoS attack, for example).
In the event of such an event, we store server log files until the event is resolved and fully investigated.
The data collected may be transferred to the following third countries: USA. The following data protection guarantee is in place: adequacy decision of the European Commission.
You are neither legally nor contractually obliged to provide the personal data named above. Without your IP address, however, we cannot guarantee the service and the functionality of our website, and individual services can be unavailable or limited.
Please read the information about your right to object under Art. 21 GDPR below.
You can contact us by email at info@getsizer.com. In that case we store the personal data transmitted with your email. This includes the date and time the email was sent, the email address, IP addresses and information about the servers involved in the email communication. We also collect the content of your enquiry. We store your data for the purpose of individual communication with you.
The “Contact Us”, “Book a Call” and “Book a Demo” buttons lead to our booking page cal.com/sizer, which Cal.com, Inc. (USA) operates. When you follow such a link you leave our website, and the privacy policy of Cal.com applies to your visit there. We receive the appointment data you enter — in particular your name, your email address and your message.
This website has no contact form and no newsletter.
The processing takes place on the basis of a legitimate interest (Art. 6 (1) (f) GDPR). Our legitimate interest is to make it easy for you to contact us.
If you contact us to ask for an offer, the processing takes place to carry out pre-contractual measures (Art. 6 (1) (b) GDPR).
Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website, and Cal.com, Inc. for appointments you book there.
We delete the data no later than six months after we have dealt with your enquiry.
If a contractual relationship results, we are subject to the statutory retention periods. These are generally 6 or 10 years, for reasons of proper accounting and tax requirements.
The data collected may be transferred to the following third countries: USA. The following data protection guarantee is in place: adequacy decision of the European Commission.
You provide your personal data voluntarily. We can only deal with your enquiry, however, if you give us the necessary data and the reason for the enquiry.
Please read the information about your right to object under Art. 21 GDPR below.
A cookie is a small data record that is created when you visit a website and stored on the visitor's system. If the visitor calls up the server of that website again, the browser sends the cookie it received earlier back to the server. The server can evaluate the information it receives in this way. Cookies can in particular make navigation on a website easier.
Besides cookies we also use comparable technologies such as your browser's local storage (localStorage); the following information applies to these accordingly.
We use no cookies and no local storage for advertising, analytics or tracking — neither on this website nor in the size advisor.
You can delete individual cookies or your whole cookie store. You will also find information and instructions on how to delete these cookies or block their storage in advance. Depending on your browser vendor, the necessary information is in its help pages, for example for Mozilla Firefox, Microsoft Edge, Google Chrome, Opera and Safari.
We use your browser's local storage to make our offerings user-friendly. We need it for the following purposes:
The processing takes place solely on the basis of our legitimate interest in a user-friendly design of our website under Art. 6 (1) (f) GDPR in conjunction with § 25 (2) TDDDG.
The stored information stays in your browser. We do not transmit it to third parties.
The information stays in your browser until you delete it (see “Deleting cookies” above).
Please read the information about your right to object under Art. 21 GDPR below.
The size advisor is a module we operate ourselves. It runs on the demo page of this website, and online shops embed it in their product pages. When you run an advice session, we process the details you enter — the gender scale, the brand, the category and the size of a shoe that fits you well, and the size system you use — and, where the shop supplies it, the barcode (GTIN) of the product you are looking at. We use these details for one purpose only: to calculate the size recommendation.
The requests run without a user account, and we do not link them to your person. The information on server log files above applies.
After a completed advice session we store your entry (not the result) in your browser's local storage, so that a later session — for another shoe, for example — does not ask you for everything again. This information stays on your device. We do not transfer it to our servers, and we do not pass it to the website the module is embedded in.
The result screen tells you that we stored the entry, and you can delete it there at any time with “Forget size”. Your browser keeps this storage separately for each website, so a size remembered in one shop is not visible in another.
The processing is necessary to provide the service you requested (Art. 6 (1) (b) GDPR). The local storage is strictly necessary for this service, which you expressly requested (§ 25 (2) no. 2 TDDDG). We write it only after an advice session that you started yourself, never when you merely open a page.
The entry stored locally stays in your browser until you delete it with “Forget size” or through your browser functions. We store no advice session with a link to your person.
Online shops embed our size advisor in their own websites. The module loads from our domain (widget3.getsizer.com) and runs in a frame of its own, so your entries go to us and not to the shop. What we process is described in “Size advice (Sizer)” above: the details of the advice request and the technical connection data. Through the module we receive no customer account, no name, no address and no order data.
For the size advice on a shop's website, the shop operator is the controller and we act as a processor on their instructions (Art. 28 GDPR). We conclude a data processing agreement with each shop operator. The privacy policy of the shop applies to your visit there, so please send requests about your visit to the shop operator first.
Shop operators can request our data processing agreement at info@getsizer.com.
We answer an advice request and store no record of it that is linked to your person. The server log files described above are the only record, and we delete them after 30 days at the latest.
This section concerns shop operators who install our app from the Shopify App Store, and the customers of those shops whose order and return data reaches us through the app.
When the app is installed, we store the myshopify.com domain of the shop, the access token for the Shopify Admin API, the permissions granted (scopes), and whether the shop operator has paused the advisor. We need this data to run the app. Legal basis: the contract with the shop operator (Art. 6 (1) (b) GDPR).
The administration page of the app is embedded in the Shopify admin. Each request from it carries a short-lived session token from Shopify, which we verify. We use no cookies for this.
With the permission of the shop operator, the app receives the orders, refunds and returns of the shop — through Shopify webhooks and a nightly comparison that fetches orders we missed. We store the message that Shopify sends us, including its full content. That content can contain personal data of the shop's customers, for example the name, the email address, the delivery address, the articles and sizes ordered, and the reason given for a return.
We use this data for one purpose: to recognise from returns which size recommendations are wrong, and to improve the recommendations. We use it for no advertising, and we pass it to no third party.
For this data the shop operator is the controller, and we act as a processor on their documented instructions (Art. 28 GDPR) under a data processing agreement. If you are a customer of such a shop, please send a request for access or erasure to the shop you ordered from. The shop operator instructs us, and we then delete the data concerned.
Recipients are our technical service providers, which act as processors: Cloudflare, Inc. (hosting and database) and Sentry (error monitoring, see below). The data comes from Shopify (Shopify International Limited, Ireland, and Shopify Inc., Canada).
A transfer to the USA takes place on the basis of the adequacy decision of the European Commission (EU-US Data Privacy Framework) where the provider is certified under it, and otherwise on the basis of the EU standard contractual clauses (Art. 46 (2) (c) GDPR). For Canada the adequacy decision of the European Commission applies.
We store the data for as long as the shop operator uses the app. When the shop operator uninstalls the app, or when Shopify sends us an erasure request for the shop, we delete the record of the shop together with its access token. We delete an individual order when Shopify reports that the shop operator deleted it, and we delete order and return data on the instruction of the shop operator.
To find and correct technical errors, we use Sentry (Functional Software, Inc., USA) as a processor. When an error occurs, the software sends an error report: the error message, the page or the request concerned, the browser and the operating system, and the IP address.
In the size advisor we deliberately limit this to error reports — no performance measurement and no session recording. In our internal administration pages and in the administration page of the Shopify app, which only we and the shop operator use, the report also contains performance data and, in the event of an error, a recording of that administration page.
Legal basis: our legitimate interest in software that is stable and secure (Art. 6 (1) (f) GDPR). The transfer to the USA takes place on the basis of the adequacy decision of the European Commission (EU-US Data Privacy Framework) where the provider is certified under it, and otherwise on the basis of the EU standard contractual clauses (Art. 46 (2) (c) GDPR).
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that takes place under Art. 6 (1) (f) GDPR (data processing on the basis of a balance of interests). This also applies to profiling within the meaning of Art. 4 no. 4 GDPR that is based on this provision.
If you object, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.
Laszlo Schürg
c/o POSTFLEX PFX-600-163
Emsdettener Straße 10
48268 Greven
Germany
Email: info@getsizer.com
We reserve the right to adapt this privacy policy, so that it always meets the current legal requirements, or to reflect changes to our services in it — for example when we introduce a new service. The new privacy policy then applies to your next visit.
If you have questions about data protection, please send an email to the controller named above: info@getsizer.com.
This privacy policy was created with the help of activeMind AG — the experts for external data protection officers (version #2024-10-25).
As of: 16 September 2026