Privacy Policy
Effective date: 23 July 2026
Data Controller
Thürsam & Bezold GbR
Meinsdorfer Str. 18
06862 Dessau-Rosslau
Germany
E-Mail: contact@dollmode.com
The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is the company identified above.
If you have any questions regarding this Privacy Policy or the processing of your personal data, you may contact us at any time using the contact details provided above.
General Information
We take the protection of your personal data seriously. Personal data is processed confidentially and in accordance with the applicable data protection laws, in particular the General Data Protection Regulation (GDPR).
Personal data means any information relating to an identified or identifiable natural person.
We process personal data only where necessary to provide our website, operate our online shop, fulfil contractual obligations, communicate with customers, comply with legal obligations, protect our legitimate business interests, or where you have given your consent.
Hosting
This website is hosted by:
Hostinger International Ltd.
61 Lordou Vironos Street
6023 Larnaca
Cyprus
When you visit our website, Hostinger automatically processes certain technical information in server log files. This may include:
- IP address
- date and time of access
- browser type and browser version
- operating system
- referrer URL
- requested pages and files
- access status / HTTP status code
- amount of data transferred
These data are processed to ensure the stability, security and proper operation of the website, to detect technical faults and to defend against misuse and cyber attacks.
The legal basis for this processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing a secure and reliable website.
Hostinger processes personal data on our behalf pursuant to a data processing agreement in accordance with Art. 28 GDPR.
Further information is available at:
https://www.hostinger.com/privacy-policy
SSL / TLS Encryption
For security reasons and to protect the transmission of confidential information, this website uses SSL/TLS encryption.
An encrypted connection can be recognized by the “https://” address and the lock icon displayed by your browser.
Encryption helps protect transmitted information against unauthorized access.
Cookies and Similar Technologies
This website uses cookies and comparable storage technologies, including local storage and session storage.
These technologies are used to provide essential website functions, improve usability, maintain security, remember user preferences, process orders, and manage consent settings.
Technically Necessary
Technically necessary cookies and storage technologies may be used for:
- shopping cart functionality
- checkout processes
- customer login sessions
- language preferences
- security and fraud prevention
- payment processing
- website performance and caching
- website security
- consent management
The legal basis is Art. 6(1)(f) GDPR together with the applicable provisions governing the use of cookies and similar technologies.
Without these technologies, important functions of the online shop cannot be provided.
Consent Management (Complianz)
This website uses Complianz to manage cookie consent and document users’ consent preferences.
Complianz stores your consent choices together with technical information required to demonstrate compliance with applicable data protection legislation.
The legal basis for this processing is Art. 6(1)(c) GDPR (compliance with legal obligations) and Art. 6(1)(f) GDPR (legitimate interest in demonstrating compliance).
You may change or withdraw your consent at any time via the cookie settings available on this website.
Optional Cookies
If optional cookies or comparable technologies are used for analytics, statistics, marketing or similar purposes, they are processed only on the basis of your prior consent pursuant to Art. 6(1)(a) GDPR.
At present, this website does not use analytics or advertising services that require consent, such as Google Analytics, Meta Pixel or Google Ads.
Should such services be introduced in the future, this Privacy Policy will be updated accordingly.
For more detailed information about the cookies and similar technologies used on this website, including their purposes, storage durations, and providers, please refer to our separate Cookie Policy.
Google reCAPTCHA
To protect our online shop and payment process against fraud, abuse and automated attacks, this website uses Google reCAPTCHA in connection with WooCommerce PayPal Payments.
The provider is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
reCAPTCHA analyzes various information to determine whether actions performed on the website originate from a human user or from automated software.
Depending on the situation, Google may process information including:
- IP address
- browser and device information
- operating system
- language settings
- mouse movements
- keyboard interactions
- time spent on pages
- referrer URL
- technical interaction data
The legal basis for this processing is Art. 6(1)(f) GDPR.
Our legitimate interest consists of protecting our online shop, payment process and customers against fraud, misuse, spam and automated attacks.
Personal data may also be transferred to Google LLC in the United States. Where required by law, such transfers are based on an adequacy decision of the European Commission, the EU-U.S. Data Privacy Framework, Standard Contractual Clauses or other appropriate safeguards.
Google’s Privacy Policy:
https://policies.google.com/privacy
Google Terms of Service:
https://policies.google.com/terms
Contact Requests
If you contact us by e-mail or through any other communication channel, we process the personal data you voluntarily provide in order to respond to your request and, where applicable, initiate or perform a contractual relationship.
Depending on your inquiry, the processed data may include:
- name
- e-mail address
- telephone number (if provided)
- order number
- message content
- any other information you choose to provide
The legal basis for this processing is:
- Art. 6(1)(b) GDPR where your request relates to the performance of a contract or the implementation of pre-contractual measures; or
- Art. 6(1)(f) GDPR based on our legitimate interest in responding to inquiries and maintaining effective customer communication.
Your data will only be retained for as long as necessary to process your request unless statutory retention obligations require longer storage.
Withdrawal Requests
If you submit a withdrawal request using the withdrawal form provided on our website, we process the personal data required to handle and document your request in accordance with applicable consumer protection laws.
Depending on your submission, this may include:
- name
- e-mail address
- order reference
- withdrawal details
- IP address
- browser information (User-Agent)
- date and time of submission
The legal basis for this processing is Art. 6(1)(c) GDPR, as the processing is necessary to comply with our legal obligations under applicable consumer protection legislation, and Art. 6(1)(b) GDPR where the withdrawal relates to the performance or termination of a purchase contract.
Withdrawal requests and related records are retained only for as long as required by applicable legal retention obligations.
Customer Account
You may create a customer account when placing an order.
A customer account allows you to:
- view previous orders
- manage billing and shipping addresses
- complete future purchases more conveniently
- manage your account information
When creating and maintaining a customer account, we may process:
- name
- billing address
- shipping address
- e-mail address
- phone number (if provided)
- encrypted password
- order history
- account preferences
The legal basis for this processing is Art. 6(1)(b) GDPR.
If you request a password reset, your IP address may be included in the password reset e-mail for security purposes.
You may request deletion of your customer account at any time. However, information that must be retained under commercial or tax legislation will continue to be stored for the legally required retention period.
Orders and Contract Fulfilment
When you place an order through our online shop, we process the personal data required to conclude and perform the purchase contract.
Depending on the order, this may include:
- first and last name
- billing address
- shipping address
- e-mail address
- phone number (if provided)
- ordered products
- order history
- payment-related information
- shipping information
- customer account information (if applicable)
We process this information for the following purposes:
- processing your order
- payment processing
- shipping your order
- providing customer support
- processing returns where applicable
- preventing fraud
- complying with statutory obligations
The legal basis is Art. 6(1)(b) GDPR.
Where required by law, order and invoice information may additionally be retained to comply with commercial and tax legislation.
Order Confirmations and Transactional Emails
Following an order, we send transactional e-mails necessary for the performance of the purchase contract.
These may include:
- order confirmations
- payment confirmations
- shipping confirmations
- delivery notifications
- account-related notifications
- legally required invoice documents
These communications are essential for contract fulfilment and are therefore sent irrespective of any marketing preferences.
The legal basis is Art. 6(1)(b) GDPR.
Back-in-Stock Notifications
If you subscribe to a back-in-stock notification for a product, we process the personal data required to notify you once the selected product becomes available again.
The processed data may include:
- name
- e-mail address
- selected product
Your personal data is processed exclusively for sending the requested availability notification.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.
You may withdraw your consent at any time by contacting us. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Unless legal obligations require otherwise, your data will be deleted after the notification has been sent or once it is no longer required for this purpose.
Payment Processing
To process payments securely, we use external payment service providers.
Depending on the payment method you choose, payment-related information is transmitted to the respective payment provider.
This may include:
- name
- billing address
- e-mail address
- order amount
- currency
- order reference
- payment identifier
- IP address
- browser information
- device information
- fraud prevention information
The legal basis is Art. 6(1)(b) GDPR.
The respective payment service provider acts as an independent controller for the personal data it processes.
Direct Bank Transfer
If you choose payment by direct bank transfer, we process the payment information required to identify your payment and complete your order.
Depending on the payment, this may include:
- payer name
- payment amount
- payment reference
- bank transaction information
The legal basis is Art. 6(1)(b) GDPR.
Bank transfers are processed through your own financial institution and ours. We do not receive or store your online banking credentials.
PayPal
Payments via PayPal are processed by:
PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxembourg
When PayPal is selected, personal data necessary for payment processing is transmitted directly to PayPal.
PayPal may independently process personal data for purposes including:
- payment processing
- fraud prevention
- identity verification
- compliance with legal obligations
- risk assessment
- anti-money laundering obligations
PayPal acts as an independent controller for these processing activities.
Further information is available at:
https://www.paypal.com/privacy
WooPayments / Stripe
Payments by credit card, debit card, Apple Pay, Google Pay and other supported payment methods are processed through WooPayments powered by Stripe.
Provider:
Stripe Payments Europe Ltd.
1 Grand Canal Street Lower
Grand Canal Dock
Dublin
Ireland
Stripe may process personal data including:
- payment information
- transaction details
- IP address
- browser information
- device information
- fraud prevention data
- authentication data
Stripe processes personal data under its own responsibility for payment processing, fraud prevention, security and compliance with legal obligations.
Further information is available at:
Shipping
To fulfil your order, we share the personal data necessary for shipping with the shipping service provider selected for delivery.
Depending on the shipment, this may include:
This may include:
- recipient name
- billing address (where required)
- shipping address
- e-mail address (where required for shipment notifications)
- phone number (where required by the carrier)
- order reference
- shipment information
The legal basis for this processing is Art. 6(1)(b) GDPR.
DHL
Where delivery is carried out by DHL, your shipping information is transmitted to:
DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
Germany
DHL processes the transmitted data solely for the purpose of delivering your order and, where applicable, providing shipment tracking or delivery notifications.
Further information is available at:
UPS
Where delivery is carried out by UPS, your shipping information is transmitted to:
United Parcel Service Deutschland S.à r.l. & Co. OHG
Görlitzer Straße 1
41460 Neuss
Germany
UPS processes the transmitted data for shipment processing, delivery, shipment tracking and related logistics services.
Further information is available at:
Product Reviews
Customers may voluntarily submit reviews for products purchased through our online shop using WooCommerce’s built-in review functionality.
Reviews may contain:
- chosen display name
- rating
- review text
- submission date
Submitted reviews are published on the corresponding product page and are publicly visible.
We reserve the right to remove reviews that violate applicable law or our website policies.
The legal basis for processing review data is:
- Art. 6(1)(b) GDPR where the review is submitted in connection with an existing customer relationship; and/or
- Art. 6(1)(f) GDPR based on our legitimate interest in providing authentic customer feedback and improving transparency for future customers.
Website Functionality
To operate and maintain our online shop, we use various technical components and WordPress plugins that are necessary for providing website functionality, security and customer services.
These components may support functions including:
- online shop operation
- customer accounts
- shopping cart and checkout
- payment integration
- shipping integration
- multilingual website functionality
- product option management
- invoice generation
- inventory and stock notifications
- website security
- website performance
Personal data is processed only to the extent necessary to provide these functions.
The legal basis is Art. 6(1)(b) GDPR where processing is necessary for contract performance and Art. 6(1)(f) GDPR where processing is necessary for the secure and reliable operation of our website.
Locally Hosted Fonts
Fonts used on this website are hosted locally on our own server.
No connection to external font providers, including Google Fonts, is established when visiting this website.
Accordingly, no personal data is transmitted to third-party font providers through the display of website fonts.
Language Functionality
This website is available in multiple languages.
To remember your preferred language, technically necessary cookies or similar storage technologies may be used.
The legal basis is Art. 6(1)(f) GDPR.
Age Verification
This website uses an age verification mechanism to restrict access to age-sensitive content. Your confirmation may be stored in a technically necessary cookie so that you do not have to verify your age again during subsequent visits.
The legal basis is Art. 6(1)(f) GDPR.
MaxMind GeoLite2
We use the MaxMind GeoLite2 Country database to estimate a visitor’s country based on the visitor’s IP address. The database is stored locally on our server and the geolocation lookup is performed locally. No IP address is transmitted to MaxMind during the lookup process.
The detected country is used to:
- determine available shipping destinations,
- display appropriate language settings,
- improve the user experience.
The legal basis for this processing is Art. 6(1)(f) GDPR. Our legitimate interest is providing appropriate shipping options and language selection.
The GeoLite2 database is provided by:
MaxMind, Inc.
14 Spring Street
Waltham, MA 02451
United States
Further information is available at:
https://www.maxmind.com/en/privacy-policy
International Data Transfers
Some of the service providers used by this website may process personal data outside the European Union (EU) or the European Economic Area (EEA).
This particularly applies to:
- Google (reCAPTCHA)
- PayPal
- Stripe
Where personal data is transferred to countries outside the EU or EEA, appropriate safeguards are implemented in accordance with Chapter V GDPR.
Such safeguards may include:
- an adequacy decision issued by the European Commission,
- certification under the EU-U.S. Data Privacy Framework (where applicable),
- the European Commission’s Standard Contractual Clauses (SCCs), or
- other legally recognized safeguards.
Further information regarding international data transfers can be found in the respective privacy policies of the individual service providers.
Data Retention
Unless a more specific retention period is stated in this Privacy Policy, personal data is stored only for as long as necessary to fulfil the purposes for which it was collected.
Where statutory retention obligations apply, personal data will be retained for the legally prescribed period even if the original processing purpose no longer exists.
In particular:
- accounting records,
- invoices,
- tax-related documents, and
- commercial records
may be retained for up to ten (10) years in accordance with applicable commercial and tax legislation.
Customer communication may also be retained where necessary to establish, exercise or defend legal claims.
Once personal data is no longer required and no statutory retention obligation applies, it will be securely deleted or anonymized.
Your Rights Under the GDPR
Under the General Data Protection Regulation (GDPR), you have the following rights regarding the processing of your personal data, provided the respective legal requirements are met:
Right of Access (Art. 15 GDPR)
You have the right to obtain confirmation as to whether personal data concerning you is being processed. Where this is the case, you have the right to request access to that personal data and additional information regarding the processing.
Right to Rectification (Art. 16 GDPR)
You have the right to request the correction of inaccurate personal data and the completion of incomplete personal data without undue delay.
Right to Erasure (Art. 17 GDPR)
You have the right to request the deletion of your personal data where the legal requirements are fulfilled.
Please note that this right may be restricted where we are legally required to retain certain information, for example under commercial or tax legislation.
Right to Restriction of Processing (Art. 18 GDPR)
You have the right to request that the processing of your personal data be restricted where the legal requirements are met.
Right to Data Portability (Art. 20 GDPR)
Where processing is based on your consent or on a contract and carried out by automated means, you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format and, where technically feasible, to have those data transmitted directly to another controller.
Right to Withdraw Consent (Art. 7(3) GDPR)
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.
Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Right to Lodge a Complaint (Art. 77 GDPR)
If you believe that the processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement.
The exercise of this right is without prejudice to any other administrative or judicial remedies.
Right to Object (Art. 21 GDPR)
Where we process your personal data on the basis of our legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation.
If you object, we will cease processing your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where processing serves the establishment, exercise or defence of legal claims.
Where personal data is processed for direct marketing purposes, you have the right to object to such processing at any time.
Automated Decision-Making
We do not carry out automated decision-making or profiling within the meaning of Art. 22 GDPR.
Please note that independent payment service providers such as PayPal and Stripe may perform automated fraud prevention, identity verification or risk assessment under their own responsibility in accordance with their respective privacy policies.
Links to External Websites
Our website may contain links to external websites operated by third parties.
When you follow such links, you leave our website. We have no control over the content or data processing practices of external websites and therefore cannot accept responsibility for their privacy practices.
We recommend reviewing the privacy policies of any external websites you visit.
Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy where necessary to reflect changes in legal requirements, regulatory guidance, technical developments, or modifications to our website and services.
The version published on this website shall always be the current version.
The date shown at the beginning of this Privacy Policy indicates when it was last updated.