Privacy statement

Who is responsible

DVWZ B.V., trading as Doll.shop, Königsborner Straße 26a, 39175 Biederitz, Germany, KvK 82678057 (registered office Meppel, the Netherlands), is the data controller for the processing of personal data via this website. You can direct privacy questions to [email protected].

Discretion matters to our customers, and we take it seriously. We do not process more data than is needed to deliver your order and meet our legal obligations, and we never share it with parties that do not need it.

What data we process

• First and last name, address and city, for delivery and the invoice.
• Email address and phone number, for the order confirmation, track & trace, and contact about your order.
• Payment details: these are processed by our payment service provider Mollie. We only receive confirmation of payment and never see full card or account details.
• Order details: which products you ordered and when.
• Details you send us yourself via the contact form, email or live chat.
• Technical data when you visit the site: IP address (anonymised in statistics), browser and device type, pages visited.
• Messages you send in the chat and your rating of the answers.

For what purpose and on what legal basis

We do not use your data for automated decision-making or profiling, and we do not send newsletters unless you have signed up for them.

In the chat, an AI assistant (Claude by Anthropic) answers the first questions. You can switch to a chat with a member of staff at any time. Only share in the chat what is needed for your question; your name, address or payment details do not need to be included there.

How long we retain data

We retain invoices and the related order and payment data for seven years, as required by the Dutch Tax and Customs Administration. We retain other customer data, such as correspondence, for up to two years after the last contact. Contact form details that do not lead to an order are deleted after one year. Analytical data is anonymised. We retain chat conversations and your ratings of them for up to two years after the last contact.

Who we share data with

We only share personal data with parties that need it to fulfil your order, answer your questions or make the website work, and we have either concluded a data processing agreement with each of them or they are independently responsible under their own terms:

• UPS (and occasionally PostNL for small accessories): name, address, phone number and email address for delivery and track & trace. The parcel shows no product information.
• Sendcloud: name, address, email address, phone number and order number, to create the shipping label, register the shipment with the carrier and, in many cases, send the emails with track & trace. Sendcloud processes the data within the EU.
• Mollie: the payment details needed to process the payment.
• Klarna: if you pay with Klarna, Klarna processes your data as an independent controller, including for a credit check. Klarna’s privacy notice applies to this.
• Hosting provider and email provider within the European Union.
• Cloudflare: provides the network (CDN) and security of the website and processes technical data for this purpose, such as your IP address.
• Anthropic (Claude): the messages you send in the chat, to answer your question. Anthropic does not use these messages to train its own AI models. We use the questions asked and your ratings of answers to improve the chat.
• Accountant: invoice data.
• ValuedShops: your email address and order number, solely to send you one invitation for a review after delivery. You can object to this when placing your order.
• Trustpilot: your name, email address and order number, to send you an invitation to write a review after delivery. You can object to this.

We never sell data to third parties. Data is stored within the European Economic Area as far as possible. Anthropic and Cloudflare may also process data outside the EEA, including in the United States; this is only done on the basis of appropriate safeguards, such as the European Commission’s standard contractual clauses.

Cookies

We only use technical and functional cookies, and analytical cookies for which we ask for consent in advance. We do not use marketing cookies. Read our cookie policy.

Security

The connection to our website is encrypted. Access to customer data is limited to staff who need it for their work, and payments run through Mollie’s secure environment. Packaging, shipping label and payment description contain no product information.

Your rights

You have the right to access your data, to correct and delete it, to restrict processing, to data portability, and the right to object to processing based on legitimate interest. You can withdraw consent you have given at any time. Send your request to [email protected]; we respond within one month. To make sure the request comes from you, we may ask you to confirm your identity.

If you are not satisfied with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) (autoriteitpersoonsgegevens.nl). We would appreciate it if you contact us first, so that we can resolve it together.

Changes

We may amend this statement, for example in response to new legislation or new services. The date of the last change is shown at the top of this page.