Privacy policy
The European Organic Clothing Register is operated by Akaterra AB. This page describes what personal data the site handles and why. It is written against what the site actually does rather than what a directory might typically do.
No cookies, no analytics, no third-party requests
This site sets no cookies, loads no third-party scripts, and uses no analytics or advertising services. Fonts and product photos are served from our own server, so your browser does not contact Google, a brand's image host or anyone else while you read.
Links to shops
Links to brands' shops pass through an address on this site starting with /go/. When you follow one, we record which link it was, the page you clicked it on and the time. We record nothing about you: no IP address, no browser details, no identifier. This is how we count which links are used.
Some of those links are affiliate links and are labelled as such. When one goes through Awin (AWIN AG, Berlin), an affiliate network, we first show a page asking whether Awin may record the visit to credit a purchase to us. Only if you agree does the link go through Awin. Awin then uses cookies and similar techniques (such as local storage and recognising your device from its browser settings) on its own domain and on the shop's site for up to a year, and processes data about the click, such as your IP address and browser. It keeps tracking data for up to three years, and some in pseudonymised form for up to five years for its own analysis, as an independent controller; see Awin's privacy policy. If you decline, the link goes straight to the shop and nothing is sent to Awin. Your answer applies to that click only, and we store nothing. The legal basis for the click through Awin is your consent (Art. 6(1)(a) GDPR). To withdraw it, delete the cookies of awin1.com and of the shop in your browser; for Awin's own processing you can write to global-privacy@awin.com. Links from other affiliate networks are not used until they get the same question. Shops may set their own cookies on their own sites, under their own privacy policies. See our affiliate disclosure.
What you send us deliberately
If you use the contact form, we store the name, email address, subject and message you provide, so that we can reply. If you submit or claim a listing, we store the company details you enter along with your name and email address, so an editor can review the entry and contact you about it.
The legal basis is legitimate interest in operating the directory and responding to people who write to us. We do not send marketing email and there is no mailing list.
Server logs
The web server records each request, including the IP address, the page requested, the browser user-agent string and the referring page. These logs exist to keep the service running and to identify abuse. They are retained for 30 days and then deleted automatically.
Where the data is held
Listing and message data is stored in a Supabase (PostgreSQL) database hosted in Frankfurt, Germany. The site itself runs on a Hetzner server in Nuremberg, Germany. Both are within the EU. Supabase and Hetzner act as processors on our behalf; no data is transferred outside the EU for the operation of this site.
Brand information published here
The register lists businesses, not individuals. Entries are compiled from brands’ own public websites and certifiers’ public registers, and cover the company, not named people. If you represent a listed brand and want the entry corrected, write to us and we will do it.
Your rights
Under the GDPR you may request a copy of the personal data we hold about you, ask for it to be corrected or deleted, object to processing, or complain to your national data protection authority. Contact us and we will respond within 30 days.
Changes
If this site later adds analytics or advertising, this page will be updated before those are switched on, and a consent mechanism will be in place where one is required.
Last updated: 7 October 2026.