Hilco
  • Our Story
  • Mrs Mint Design - FS 2027One Sunny Day - FS 2027Kinderkollektion HW 2026/2027Damenkollektion HW 2026/2027
  • Sales
  • Find a Dealer
  • Dealer Portal

Privacy Policy

Responsible Party

TDC-Design KG
Helmut Steer
Von-Holzapfel-Str. 7
86497 Horgau
Email: helmut-steer@tdc-steer.de
Phone: +49 8294 802849

Overview of Data Processing

We only process personal data to the extent necessary to provide a functional website and our content and services. Personal data is only processed regularly with the user's consent or when processing is permitted by law.

Hosting

This website is hosted by Railway (Railway Corporation, San Francisco, USA). When you visit this website, the host automatically collects information in server log files that your browser transmits (IP address, date, time, page). This data is not merged with other data sources. The legal basis is Art. 6 para. 1 lit. f GDPR. Data transfer to the USA is based on the EU-US Data Privacy Framework (DPF).

Contact Form

If you send us inquiries via the contact form, your information from the form, including the contact details you provide, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. For sending email notifications and confirmation receipts, we use the service Brevo (see below). We do not share this data without your consent. The legal basis is Art. 6 para. 1 lit. b GDPR. Data submitted via the contact form will be deleted after your inquiry has been fully processed, unless a business relationship is established — no later than 6 months.

Partner enquiry (“Become a partner”)

If you send us the “Become a partner” form, we store the company, contact person, email address, telephone number, town, type of business, website, your message and the language of your enquiry. To notify our team and confirm receipt to you we use Brevo (see below); the full content of your enquiry is transmitted in the process. The legal basis is Art. 6(1)(b) GDPR (initiation of a business relationship). The same deletion rules apply as for contact enquiries.

Email Service (Brevo)

For sending transactional emails (confirmations of receipt, notifications) we use the service Brevo (Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany). Transmitted are the recipient address, the subject and the content of the respective message. For messages from the contact and partner forms this includes your full message text; your email address is also set as the reply address. For order confirmations from the B2B portal the attached PDF is transmitted as well. Brevo processes the data exclusively within the EU. The legal basis is Art. 6(1)(b) GDPR (performance of a contract). A data processing agreement under Art. 28 GDPR is in place with Brevo. Further information: https://www.brevo.com/legal/privacypolicy/

Cookies

This website sets a single cookie: “NEXT_LOCALE” stores the language you have selected or that was detected from your browser settings, so that the pages are delivered in that language. It is set on your very first visit and has a lifetime of one year. We do not use tracking, analytics or advertising cookies; analytics tools such as Google Analytics or a Meta pixel are not embedded on this website. We do not display a consent banner, as none of this storage requires your consent. Our B2B portal additionally sets two cookies of its own — “portal-session” for your login (lifetime 7 days, or 30 days with “stay signed in”) and “portal-locale” for the language selection (lifetime 1 year); these are covered by the portal’s own privacy policy. The legal basis is Art. 6 para. 1 lit. f GDPR.

Fonts

This website uses the fonts DM Sans and DM Serif Display. The fonts are hosted locally on the server — no connection to Google servers is made.

Delivery of images and files (Cloudflare)

The design, collection and lookbook images on this website are not delivered from our own server but from storage operated by the provider Cloudflare. When you open a page containing such images, your browser therefore connects to Cloudflare and transmits your IP address in doing so; without that connection the images cannot technically be displayed. The legal basis is Art. 6(1)(f) GDPR (reliable and fast delivery of large image files). We use the same storage for files from the B2B portal (dealer logos, complaint photos); these are held in a non-public area and are only delivered to logged-in requests.

Error monitoring (Sentry)

To detect and fix technical faults on this website, we use the service Sentry (Functional Software, Inc. d/b/a Sentry, San Francisco, USA). From your browser, data is transmitted only in the event of an error: as long as no error occurs, your browser sends nothing to Sentry — performance tracing is set to zero, the session message that would otherwise be sent on every page view (“release health”) has been explicitly switched off, and so has the summary report with which Sentry would otherwise state how many events it discarded itself. Independently of this, our server transmits at regular intervals plain counts of how many requests completed without an error and how many did not (“release health”); these counts contain no information about individual people and no IP addresses. If an error does occur, the error message with its technical stack trace, the address called up including its parameters, details of your browser and operating system, and the last steps taken beforehand (pages visited, controls clicked, browser console messages) are transmitted; the same applies to errors occurring on our server. Your IP address is technically transmitted when the connection to Sentry is established; the sending of additional personal data is switched off, so that, according to the provider, the IP address is not included in the stored error report. No recording of your session (“session replay”) takes place, and Sentry stores neither cookies nor entries in your browser’s storage. The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in the stable and secure operation of the website). Sentry processes the data in the USA. We base the transfer on the European Commission’s standard contractual clauses (Art. 46 para. 2 lit. c GDPR), which form part of the data processing agreement under Art. 28 GDPR; that agreement is currently being concluded. You can request a copy of the safeguards informally at hello@hilco-vision.de.

Store locator (dealer directory)

Our website features a store locator in which specialist retail partners are displayed with their business name, address and, where applicable, website. A listing is only created with the express consent of the respective dealer (Art. 6(1)(a) GDPR); the time and channel of consent are documented. Phone numbers and email addresses are not published. Consent can be withdrawn at any time with effect for the future — via the removal link in our emails or informally to hello@hilco-vision.de; the listing will then be removed from the website. For display on the map, the business address is converted once into geo-coordinates using the Nominatim service of the OpenStreetMap Foundation (United Kingdom); only the business address is transmitted to this service. An adequacy decision of the EU Commission is in place for the United Kingdom.

We use OpenStreetMap for the map display. When you open the page containing the map, your browser loads map tiles from servers of the OpenStreetMap Foundation; in doing so, your IP address is transmitted. The legal basis is our legitimate interest in an appealing presentation of our retail partners (Art. 6(1)(f) GDPR). Further information: https://osmfoundation.org/wiki/Privacy_Policy

Sales representatives

On the “Sales” page and in our lookbooks we publish the contact details of the sales representative responsible for a region: name, company name where applicable, region, email address and telephone number. These are business contact details; publishing them enables specialist retailers to reach their contact person (Art. 6(1)(b) or (f) GDPR). Only those who are enabled for this with us are published. At the request of the person concerned we end publication at any time — an informal message to hello@hilco-vision.de is sufficient. The note under “Dealer search” that telephone numbers and email addresses are not published relates solely to the retailers listed there, not to our sales representatives.

Retention periods

Contact and partner enquiries are deleted once they have been fully dealt with, at the latest after 6 months, provided no business relationship arises; a dedicated function for this deletion is available in our internal system. Entries in the dealer search remain for as long as the consent applies; after a withdrawal we remove the entry from the website. Data from a business relationship — in particular orders and invoices — is retained for the duration of the statutory retention periods, as a rule ten years. For the B2B portal the periods stated in its own privacy policy apply in addition.

Your Rights

You have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)

Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data. Responsible supervisory authority: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA).

Changes

We reserve the right to update this privacy policy to ensure it always complies with current legal requirements.

Last updated: 18 August 2026

Hilco

Fabrics with Character.
For decades.

Navigation

HomeOur StoryKids CollectionWomen's CollectionFind a Dealer

Contact

hello@hilco-vision.de

TDC Design KG
Deutschland

© 2026 Hilco · TDC Design KG. All rights reserved.

Legal NoticePrivacy Policy