Privacy statement

Who is responsible

DVWZ B.V., trading as Doll.shop, Königsborner Straße 26a, 39175 Biederitz, Germany, KvK 82678057 (registered office Meppel, the Netherlands), is the data controller for the processing of personal data via this website. You can direct privacy questions to [email protected].

Discretion matters to our customers, and we take it seriously. We do not process more data than is needed to deliver your order and meet our legal obligations, and we never share it with parties that do not need it.

What data we process

• First and last name, address and city, for delivery and the invoice.
• Email address and phone number, for the order confirmation, track & trace, and contact about your order.
• Payment details: these are processed by our payment service provider Mollie. We only receive confirmation of payment and never see full card or account details.
• Order details: which products you ordered and when.
• Details you send us yourself via the contact form, email or live chat.
• Technical data when you visit the site: IP address (anonymised in statistics), browser and device type, pages visited.

For what purpose and on what legal basis

We do not use your data for automated decision-making or profiling, and we do not send newsletters unless you have signed up for them.

How long we retain data

We retain invoices and the related order and payment data for seven years, as required by the Dutch Tax and Customs Administration. We retain other customer data, such as correspondence, for up to two years after the last contact. Contact form details that do not lead to an order are deleted after one year. Analytical data is anonymised.

Who we share data with

We only share personal data with parties that need it to fulfil your order, and we have either concluded a data processing agreement with each of them or they are independently responsible under their own terms:

• UPS (and occasionally PostNL for small accessories): name, address, phone number and email address for delivery and track & trace. The parcel shows no product information.
• Mollie: the payment details needed to process the payment.
• Hosting provider and email provider within the European Union.
• Accountant: invoice data.
• ValuedShops: your email address and order number, solely to send you one invitation for a review after delivery. You can object to this when placing your order.

We never sell data to third parties. Data is stored within the European Economic Area. If a processor outside the EEA is used, this is only done on the basis of the European Commission’s standard contractual clauses.

Cookies

We only use technical and functional cookies, and analytical cookies for which we ask for consent in advance. We do not use marketing cookies. Read our cookie policy.

Security

The connection to our website is encrypted. Access to customer data is limited to staff who need it for their work, and payments run through Mollie’s secure environment. Packaging, shipping label and payment description contain no product information.

Your rights

You have the right to access your data, to correct and delete it, to restrict processing, to data portability, and the right to object to processing based on legitimate interest. You can withdraw consent you have given at any time. Send your request to [email protected]; we respond within one month. To make sure the request comes from you, we may ask you to confirm your identity.

If you are not satisfied with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) (autoriteitpersoonsgegevens.nl). We would appreciate it if you contact us first, so that we can resolve it together.

Changes

We may amend this statement, for example in response to new legislation or new services. The date of the last change is shown at the top of this page.